last executing test programs: 8.266269695s ago: executing program 3 (id=481): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372"], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) close(0x3) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000100)=0x2000004) r10 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffff66b}, [@func={0x85, 0x0, 0x1, 0x0, 0x7}, @generic={0x0, 0xb, 0x9, 0x1, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @jmp={0x5, 0x1, 0x0, 0x5, 0x3, 0x10, 0x1}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xb6b}, @jmp={0x5, 0x0, 0xb, 0x4, 0x8, 0x20, 0xffffffffffffffff}]}, &(0x7f00000001c0)='syzkaller\x00', 0x9, 0x3c, &(0x7f0000000240)=""/60, 0x41000, 0x10, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x9, 0x3, 0x2}, 0x10, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000340)=[0x1], &(0x7f0000000380)=[{0x0, 0x2, 0xf, 0x7}], 0x10, 0x4}, 0x94) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x80, 0x5, 0x0, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8, 0x20, 0xc79, 0xe77}}) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x11, r12, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000004c0)={@ifindex=r11, r10, 0x2e, 0x4, 0xffffffffffffffff, @void, @value=r12}, 0x20) pwritev(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="00214717a70700000000430600000000000000000000721d5874f72c000000000200000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) r13 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x503, 0x40000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10061, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffff7f}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 6.938503152s ago: executing program 4 (id=487): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESDEC=r0], 0x7c}, 0x1, 0x0, 0x0, 0x44080}, 0x90) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0x1f}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x98}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) (async) setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote, r3}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@float={0xe, 0x0, 0x0, 0x10, 0xc}, @fwd={0xa}, @func={0x10, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000440)=""/4096, 0x43, 0x1000, 0x0, 0x370}, 0x28) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@float={0xe, 0x0, 0x0, 0x10, 0xc}, @fwd={0xa}, @func={0x10, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f, 0x2e, 0x5f]}}, &(0x7f0000000440)=""/4096, 0x43, 0x1000, 0x0, 0x370}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0xe, 0x100003, 0x4, 0x25, 0x2403, 0xffffffffffffffff, 0x400000}, 0x50) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001480)=@base={0xe, 0x100003, 0x4, 0x25, 0x2403, 0xffffffffffffffff, 0x400000}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r5}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000000240), 0x2000cc0, r5}, 0x38) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="240000000000090702000000000000800705", @ANYRES32=r4, @ANYBLOB="0c000180060002000f000000"], 0x24}, 0x1, 0x5502000000000000}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0xd27, 0x2000, 0x0, {0x0, 0x0, 0x74, r3, {}, {0xafabc05531515610, 0x415034f1892c1116}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x1c005}, 0x24048004) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$inet(r6, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$unix(r7, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000001600)={'syztnl1\x00', &(0x7f0000001500)={'syztnl2\x00', r3, 0x7800, 0x20, 0xae, 0x7, {{0x34, 0x4, 0x3, 0x3, 0xd0, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast1, @private=0xa010102, {[@timestamp={0x44, 0x20, 0xa7, 0x0, 0x4, [0x1, 0x7, 0x1, 0xffffff01, 0x4, 0x80000001, 0x2]}, @generic={0x44, 0x12, "fe35b5973d141164085d350dda73f5a6"}, @cipso={0x86, 0x45, 0x2, [{0x1, 0x5, "b541fd"}, {0x2, 0xf, "5368ff1fc01adeeb138baaa54d"}, {0x6, 0x4, "1dbf"}, {0x0, 0xa, "b9fd7f9951d2a3bc"}, {0x2, 0x4, 'Oi'}, {0x1, 0x9, "1dfb3425d195c3"}, {0x2, 0x10, "98d4e8d1b6216739629e87b6b104"}]}, @cipso={0x86, 0x42, 0x0, [{0x2, 0x11, "e8ad9646e2bd69ee8b6b2f0fec243f"}, {0x7, 0x7, "cbbcfc8e74"}, {0x7, 0x10, "8e773015680f41160f09ba15c0f0"}, {0x6, 0x2}, {0x0, 0x12, "62780c8c12c37ff645e16a3cebac56ca"}]}]}}}}}) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0) r8 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_mtu(r8, 0x29, 0x1e, 0x0, 0x15) 6.265372189s ago: executing program 3 (id=491): r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000000000001001000005000000b401bd326180283992f742eef30be014074b3f3b11c9961f4392be3d4f63cd2b4d940642a64243ba261e462ced5c8aa452fcd2ae7387eab2810dab4b5b738ce0bdcbef6b144203bd86d63a0d866cd162"], 0x10}, 0xfc40) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x800) accept4$bt_l2cap(r2, 0x0, 0x0, 0x800) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000001100)={0x0, 0x9}, 0x8) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000001140)={0x3, 0x766, 0xfffe, @link_local, 'veth1_macvtap\x00'}) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000000c0)=""/4096, &(0x7f00000010c0)=0x1000) 6.081177855s ago: executing program 4 (id=493): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x18, &(0x7f0000000840)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007", @ANYBLOB="0000000000000000b70400000800000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f00000105c0)=ANY=[@ANYBLOB="1808000000000080000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000b7020000000000007b9af8ff00000000b5090b00000000007baaf0ff00000000bf8700000000000007080000fffdffffbca4000000000000a7040000f0ffffff740200001d00000018290000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000cf4900000000000056070000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x1c, r3, 0x83625fc5352ba305, 0x0, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x20008000) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000080)={0xa, 0x4e20, 0xb8, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000002440)=[{&(0x7f0000000340)='b', 0x1}], 0x1}}], 0x2, 0x10) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000280), 0x4) ioctl$sock_netdev_private(r1, 0x89f8, &(0x7f0000000100)="37c693eeaa897b57e5449b94de69b58d5f9af8b2ea309687f9b44403d55216f3040fd8077aceb2ea91ff9b3533139c58abcd81fe79662eb4db7a5ff0a075778cf1a23a4ccee3277a19d274e6860506e31fadd8011d58d3a34b363b67d96a028992bef0b81108793f8db7058d239b5956306a98427967ab8677c30a9012546feec4f6c9829b837a965fa7337a2275bc530b22823d9c1b18731a205ca5a09289f310691393bdeaf53aa82e3e64f11c3a54bda9b30d6a73bab59efc2dd64d4b943288dedc68dbbfbdaaf31c2fdeb5e286ccade1acc6c5fa11cc3028d6f1c8b1f3cb662654fd1574a8fe8d5a33") 5.831170394s ago: executing program 3 (id=494): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800fff5000000000000000000000000850000005000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f5ffffffb703000008000000b704000080000000850000007c00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) 5.486432574s ago: executing program 3 (id=496): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000040) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r2) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="000035be", @ANYRES16=r4, @ANYBLOB="00022bbd7000fcdbdf25030000005400018014000300e0000001000000000000000000000000060004004e20000014000300fc0200000000000000000000000000000c00070020000000000000000c0007000600000010000000080009002700000008000400040000003c000280080003000200000008000400040000005a000f00010000000800030007000000080009000200000006000b000a00000008000600070000003c000380050008000600000014000600ff01000000000000000000000000000114000600ff020000000000000000000000000001060007004e2200000c00028008000900060000000c0002800800090002000000580003800600040081000000080005000a0101021400020070696d7265673000000000000000000005000800050000000500080007000000060007004e210000060007004e200000050008009800000008000300000000003c00028006000e004e22000008000600060000000800040005000000080007002e68ad50080007008100000008000900010000000800030003000000"], 0x194}}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x4, 0xfe, 0x53, 0x3, 0x58, @mcast1, @mcast2={0xff, 0x5}, 0x8, 0x40, 0xe3e1, 0xcff}}) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r5, 0x6b, 0x2, 0x0, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000000)=@req3={0x410000, 0x100000001, 0x2, 0x1, 0xa, 0x0, 0xffffffff}, 0x1c) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r7, 0x10f, 0x81, &(0x7f0000000080), 0x4a) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f00000000c0)=0x9, 0x4) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10000, 0x6}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x29, 0x2, 0xfffffffd) socket$inet6(0xa, 0x805, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r10, 0x84, 0x7a, &(0x7f0000001100)={r11, @in={{0x2, 0x4e24, @remote}}}, &(0x7f0000000040)=0x84) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000818000004000000b4"], 0x50) 4.990359794s ago: executing program 2 (id=498): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000280)={0x10, 0x1401, 0x1, 0x70bd2c, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x2c008000}, 0x20000080) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x28, r2, 0x400, 0x70bd6c, 0x0, {0x1a}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044840}, 0xc0c0) sendmmsg$inet(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000140)="13", 0x1}], 0x1}}], 0x1, 0x800) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xfc79, &(0x7f0000000140)=[{&(0x7f00000004c0)="d800000018009f064e81f744db4cb904021d0800fd02fe02e8fe50a10a001100250000000c600e41b0000900ac0020032500000004000b000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d31afe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffff5ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a4500000000", 0xd8}], 0x1}, 0x0) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x5, 0x5ec, 0x7, 0x3, 0x1, 0x9, 0x7, 0x100, 0x135, 0x0, 0x3, 0xff, 0x6, 0xc, 0x7]}, &(0x7f0000000180)=0x100) 4.394721003s ago: executing program 2 (id=501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000fc0)=@newqdisc={0x50, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xa}, @TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0xce12}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0xf00f}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x4}]}}]}, 0x50}}, 0x24008004) 4.269529744s ago: executing program 1 (id=503): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x3, {0x41}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000140)={0x7ff, 0x49, 0x1, 0x63, 0x55, 0x20, 0x1f, "fb258ba5c66b5ac2e7d944734ec67c8862d0b994", "bb64d52ef70857e69de07d69c47fcd12eadb6a75"}) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000003c0)='\a', 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, &(0x7f0000001f80)=""/52, 0x34}, 0xc0000}], 0x1, 0x40010110, 0x0) 4.198573445s ago: executing program 4 (id=504): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2}, 0x50) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x300060c1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r2, &(0x7f00000009c0)=[{&(0x7f0000000400)="1e", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0x3, &(0x7f00000000c0), 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xf}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=@newtaction={0xf18, 0x30, 0xb, 0x0, 0x0, {}, [{0xf04, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xeb8, 0x2, 0x0, 0x0, {{0xa}, {0xe8c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x5, 0xa, 0x4, 0x1, 0x2000000}, 0x5, 0x1}, [{0x9, 0x80000001, 0x1, 0x630, 0x8, 0x1}, {0xdf, 0x4, 0x5, 0x5, 0x10, 0xe}, {0x1, 0x85a, 0x5, 0xe6db, 0x3, 0xfffffffc}, {0x6, 0x400, 0x9321, 0x9, 0x6, 0x7}, {0x5, 0x5, 0xffffffc0, 0x80, 0x3}, {0xe, 0xf5, 0x3, 0x9, 0xffffbff8, 0x3}, {0x0, 0x7, 0xfff, 0x2, 0x9163ef6c, 0x40080003}, {0x3, 0x3, 0x80, 0x0, 0xacc4, 0x2}, {0x8001, 0xffb, 0x9, 0xffff, 0xfffffffe, 0x81}, {0x8, 0xfff, 0x6, 0xeb84, 0x8, 0x30c4}, {0x7, 0x9, 0xfffffffc, 0x100, 0x4}, {0x8004, 0x80000001, 0xfffffeff, 0xdf, 0x4, 0x5}, {0x0, 0x80000001, 0x9, 0x7, 0x1000, 0x7}, {0x5, 0x2, 0xfffffffd, 0x9, 0x474, 0x594}, {0x7fffffff, 0x1, 0x8, 0xfffffff9, 0x6, 0xffffffff}, {0x24, 0x5, 0xf, 0x6, 0x6, 0x8000003}, {0xbb, 0x5, 0x2, 0x310, 0xf}, {0x9b7d, 0x52fc, 0x3, 0x3, 0x48, 0x9}, {0xbd, 0x8, 0x10, 0xe4d, 0x7f, 0x3}, {0x8, 0x8, 0x9, 0x27, 0x2, 0x5}, {0x4, 0x1000, 0x5, 0x6, 0x93e, 0x6}, {0x1, 0x7, 0x0, 0x1, 0xff, 0x3}, {0xc, 0x7f, 0xfffff417, 0x1, 0x3ff, 0x9}, {0x4, 0x8, 0x7, 0xb, 0x8, 0x80004d}, {0x34db, 0xffff, 0x0, 0x3ff, 0x1, 0x400}, {0x1, 0xcb1d, 0x8, 0x1, 0x0, 0x4}, {0x5, 0x3, 0x7, 0x8, 0x3, 0x984}, {0x2, 0xffffffff, 0x3, 0x2, 0x9, 0x40}, {0x7, 0x281, 0x7fffffff, 0x381, 0x3, 0x8}, {0x5, 0x4, 0x1, 0x8, 0x4, 0x2f}, {0x6, 0x3, 0x4, 0xd1a1, 0x9, 0x7}, {0x5, 0x3, 0x8, 0x4, 0x16, 0x2}, {0x8001, 0x87, 0x6, 0x1, 0x3, 0x4}, {0x6, 0x9e4, 0x8b7f, 0x11, 0x3, 0x7}, {0x7, 0x1, 0x800, 0x70f, 0x8001, 0x3}, {0x4, 0x10, 0x6, 0x1, 0x4, 0x22ff}, {0x5, 0x10001, 0x9, 0x0, 0x10001, 0x7}, {0xf85, 0x2e, 0x100, 0x3, 0x100, 0xe60c}, {0x2, 0x5, 0x1, 0xe000000}, {0x4e2, 0x6ae, 0x2, 0x100, 0x4, 0xd}, {0x1, 0xcad, 0xa5, 0x2, 0x4d800, 0x33}, {0x20, 0x7f, 0x33, 0x2, 0x400, 0x4}, {0x4, 0x62e, 0xb, 0x219c, 0x0, 0x5}, {0x0, 0x4, 0x0, 0x1, 0x1, 0x1}, {0x7f, 0x945a, 0x0, 0x0, 0x8, 0x3}, {0xda1, 0x893, 0x2, 0x9, 0xfffffa2e, 0x6}, {0x1, 0xfffffff3, 0x7fffffff, 0x8, 0x0, 0x1}, {0x2, 0x8, 0x2, 0xe, 0x2, 0x2}, {0x6, 0x100, 0xe, 0x10000, 0x5, 0x7}, {0x0, 0x6, 0x7, 0x4, 0xc, 0x800}, {0x8, 0x10000, 0x1, 0x1, 0x7}, {0x7d5, 0x2, 0x4, 0x800, 0xf}, {0x1, 0x5, 0x6, 0x2, 0x8, 0xc}, {0x2, 0x1, 0x3, 0xc, 0x1, 0x2c3}, {0x1000, 0x3, 0xbc, 0x8001, 0xfa, 0x8}, {0x2, 0x3, 0x9, 0x50e, 0x55ac, 0xa5e2}, {0x0, 0x196680, 0xffffff91, 0x100, 0x3, 0x7}, {0x4, 0x4, 0x2, 0x1, 0x0, 0xe}, {0xfffffff5, 0x8, 0x7023, 0x8, 0x5, 0x851}, {0x3, 0x78, 0x7, 0xa, 0x5dec4cac, 0x6}, {0x4, 0x9, 0x3a, 0x2, 0x8, 0x602}, {0x4, 0x7fffffff, 0x0, 0x8, 0x8, 0xff}, {0x7, 0xfffffff1, 0x2f2c, 0x400, 0x6, 0x6}, {0x10001, 0x81, 0x40, 0x2, 0x89, 0x2}, {0x2, 0x8550, 0x4c, 0x3, 0xfffffffa, 0x736d}, {0x7f, 0x199, 0x5, 0x9, 0x7, 0x2}, {0x7, 0x1, 0x9, 0x7, 0x2, 0x7}, {0x9, 0x3f1, 0x4, 0x5, 0x5, 0x8}, {0x100, 0x3ff, 0x4, 0x7f53, 0x7, 0x1}, {0x3ff, 0xc, 0x4, 0x1, 0x4, 0x4}, {0x9, 0x381, 0xfff, 0x5d7c, 0x0, 0x8001}, {0x8, 0x0, 0x7, 0xfffffffb, 0x3ee, 0x4}, {0xbfffffe, 0x6, 0x101, 0x5, 0x400, 0x400}, {0x7fff, 0xb3, 0x2, 0x10000, 0x6, 0x14}, {0x0, 0x1, 0x4c90, 0x4, 0x7f, 0x8}, {0x5, 0x25b, 0x0, 0x3, 0x2, 0x2}, {0x29dbdf0, 0xd, 0xfffffffd, 0x7, 0x6, 0x3}, {0x7, 0x1, 0xa, 0x8, 0x5, 0x5}, {0x473, 0x8, 0x2, 0x400, 0x4000000, 0x69b3d6e6}, {0x1, 0xb7bb, 0x22800000, 0x3, 0x10, 0x5}, {0x7f, 0x7, 0x6, 0xffffffff, 0x3, 0x8}, {0xfffffff7, 0x80000000, 0xa, 0x40, 0x863, 0x2}, {0xb, 0x9, 0xc, 0x3c1, 0x6e, 0x40}, {0x6, 0xd, 0x6, 0xfb0000, 0x1, 0x7}, {0xe0, 0x100, 0x1, 0xb, 0x8, 0x7}, {0xfff, 0x1, 0x0, 0x38, 0x0, 0x9}, {0x82, 0x10, 0x401, 0x0, 0x4, 0xef}, {0x7, 0x2, 0x200, 0x8, 0x9, 0x2}, {0x54, 0x5, 0xa33f, 0x101, 0x2, 0x10001}, {0x1, 0x4, 0x800004, 0x10001, 0x2, 0xce}, {0x4, 0x8, 0x8, 0x3, 0xf, 0x9}, {0x6, 0x5, 0x8, 0xffffffff, 0x405b9, 0x6}, {0x9, 0x0, 0x9, 0x2, 0x9}, {0x0, 0x2, 0xb, 0x7fffffff, 0xfc0, 0x7f1b4893}, {0x4, 0xd, 0x10, 0x4, 0x7, 0x4}, {0x4, 0x5, 0xe, 0x3, 0x3dcb, 0x9}, {0x200, 0x0, 0xe8, 0x1, 0x800000d4, 0x1}, {0xc651, 0x5f83, 0x2, 0x1, 0xd, 0x8}, {0xfff, 0x5, 0x1, 0x0, 0x49, 0x5}, {0x5, 0x3, 0x7, 0x97fd, 0xef, 0x202}, {0x2, 0xa, 0x1000, 0x1, 0x6, 0xe0}, {0x800, 0x4c, 0x7, 0x0, 0xfffffff7, 0x9}, {0x6, 0xffff, 0xffff8001, 0xa, 0xae36, 0x8}, {0xcfb7, 0x0, 0x101, 0x2, 0x1, 0xaa82}, {0x6, 0x800, 0xec3d, 0xffffffff, 0xea5, 0x3}, {0x9, 0x5, 0x2, 0x0, 0x0, 0xdd}, {0x6, 0x6, 0x0, 0x1e9, 0x6, 0x1}, {0x3, 0x7, 0x7, 0x3, 0x400, 0x81}, {0x970, 0x100, 0xb2eb, 0x2, 0x3, 0x9}, {0x3, 0x6, 0x8, 0x7, 0xd, 0x474c}, {0xf, 0x101, 0x9a, 0x1000, 0x2, 0xfffffffc}, {0x3, 0x98e, 0x1a5e666b, 0x10, 0x7, 0x9}, {0xfffffffb, 0x3, 0x3, 0x2ee8000, 0x8}, {0x3, 0x2, 0x2, 0x3, 0x3, 0x2}, {0x7, 0x4, 0x1, 0x7, 0x101, 0xef}, {0x709e, 0x9, 0x425b597f, 0x1, 0x2, 0x7}, {0x6, 0xc000000, 0x3ff, 0x4, 0x8, 0x5}, {0x3, 0x6, 0x7, 0xfffffff9, 0x0, 0xffffffff}, {0x7, 0x9, 0x8, 0x0, 0x9, 0xd6}, {0x24, 0x10001, 0x6, 0x1, 0x39d6}, {0x401, 0x7d4, 0x9, 0x8000, 0xffff, 0x7}, {0x6, 0x92e4, 0x130, 0x0, 0x4, 0x9}, {0x1, 0x7fff, 0x7, 0x8001, 0x8, 0x5}, {0x7e, 0x800, 0xfffffff9, 0xa, 0x4b64, 0x80000001}, {0x2ad78a25, 0x2, 0x6, 0x6, 0x4, 0x8}, {0x2, 0x9, 0x0, 0x8a7, 0x129, 0xc}, {0x7, 0x2, 0x8, 0x3, 0xe01, 0xf933271}, {0x4a3, 0x0, 0x3, 0x514c, 0xf8a, 0x19}], [{0x5}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x1}, {0x2}, {0x0, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x5}, {0x3}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x3}, {0x2, 0x1}, {0x4}, {0x5}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x4}, {0x5}, {0x3, 0x1}, {0x1}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x2}, {0x3, 0x1}, {0x5, 0x1}, {0x1}, {0x1}, {0x3}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x4}, {0x5}, {0x1, 0x1}, {}, {0x3}, {0x2, 0x1}, {0x5}, {0x4}, {0x4, 0x1}, {0x0, 0x1}, {0x2}, {0x5}, {0x9, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x3, 0x1}, {}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x6, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x3}, {0x3, 0x1}, {0x1}, {0x2}, {0x2}, {0x5}, {0x3, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x2}, {0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x0, 0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x6, 0x1}, {0x5, 0x1}]}}, @TCA_PEDIT_KEYS_EX={0x68, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf18}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ffff850000000400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x35}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 3.926794849s ago: executing program 0 (id=505): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f00000000c0)=0x800, 0x4) sendmsg$inet(r3, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x700) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random='\x00\x00\b\x00'}) 3.540469882s ago: executing program 1 (id=506): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001ffffcfffffffddbdf2500000000", @ANYRES32=r1, @ANYBLOB="6bf7ee5347ea62b81c0012800b00010067726574617000000c00028008000700ac141428080061003bd463a99deeab06870fdc3237a61c923459b440b970cf366facb8825f8718b808e6e3988b3e945167d6f63f99ecee3fc35fe0984477c648a2637bf513737430b2eb7016a7f163a0ee389dd94a46dec849b36b4a191daa9a6105e02658698d8d1f0593329905021f130410840d3f17a0e9e063d9eb17424c3745b7a1f0a7f3f8a58b4180e7424f6112f738a7107bda5cdf59360873078c67604350739094b0b59b7c302c7e78f0122d5e66aef72359982fb03cfc5f4e1548078b0f957de5005c", @ANYRES32=0x0], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000400)={r5}, 0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000000)=ANY=[@ANYRES32=r5, @ANYBLOB="ff0305"], 0x12) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)={r5, 0x4}, &(0x7f0000000240)=0x8) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$int_out(r6, 0x5462, &(0x7f0000000280)) close(0x3) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000740)={r5, 0x1000, "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"}, &(0x7f0000001780)=0x1008) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x2c, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x1, 0x0, &(0x7f0000000000)="06", 0x0, 0x8, 0x503, 0x0, 0x0, 0x0, 0x0, 0x7, 0xffff80fe}, 0x50) shutdown(r9, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r11, @in6={{0xa, 0x4e22, 0x7, @local, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r7, &(0x7f0000000100)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c", @ANYRES8=r12], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000400)=0x8) 3.450859737s ago: executing program 4 (id=507): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'pimreg0\x00'}) writev(r2, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000300)="1100f8ae", 0x4}, {&(0x7f00000002c0)="00020057", 0x4}], 0x3) r3 = socket(0x1d, 0x2, 0x6) bind$inet(r3, &(0x7f00000000c0)={0x1d, 0x4e20, @loopback}, 0x10) sendmsg$AUDIT_SET_FEATURE(r3, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3fa, 0x100, 0x70bd2b, 0x25dfdbfc, {0x1, 0x0, 0x1}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x48880) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'ip6gretap0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000240)='\tH', 0x2, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r4, 0x1, 0x87, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007b00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r7, 0x3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x400000000000000) r8 = socket(0x10, 0x803, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0x9}], 0x18, 0x6000000}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x3f, &(0x7f00000001c0)=[{&(0x7f0000000500)=""/96, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) setsockopt$MRT6_ASSERT(r10, 0x29, 0xcf, &(0x7f0000000300)=0x1, 0x4) sendmsg$nl_route(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="700000001000370429bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="890c04de67000000500012800b000100697036746e6c000040000280140003002001000000000000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="0400130014000200fe"], 0x70}, 0x1, 0x0, 0x0, 0x8d0}, 0x4004884) 3.16266202s ago: executing program 2 (id=508): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0208000002"], 0x10}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000002000010028bd7000fcdbdf350a8010000800002017000000080018004e224e2414000200fc0000000000000000000000000000001400010020010000000000000000000000000001"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0x20048810) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x2, 0x66e03de5, 0x32, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x40, 0x7800, 0x2, 0x77f87500}}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@ipv6_newroute={0x74, 0x18, 0x200, 0x70bd25, 0x25dfdbff, {0xa, 0x10, 0x14, 0x2, 0xff, 0x2, 0xff, 0x0, 0x1a00}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x38, 0x3, r3}}, @RTA_GATEWAY={0x14, 0x5, @remote}, @RTA_METRICS={0x1a, 0x8, 0x0, 0x1, "b4916ae47e190b906141e7f7039d1301850c2f93ade3"}, @RTA_GATEWAY={0x14, 0x5, @rand_addr=' \x01\x00'}, @RTA_PREF={0x5, 0x14, 0x5}]}, 0x74}}, 0x0) 3.097721377s ago: executing program 0 (id=509): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x9, 0x200006}, 0x28) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f00000006c0)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0x6, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffd}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000004780)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x4}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000340)="c7", 0x1}], 0x1}}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000180)={0x0, 0x1, 0x8, 0x7ff, 0x800, 0xd, 0x2, 0x0, {0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x0, 0x3, 0xd1c0, 0x5, 0x6}}, &(0x7f0000000240)=0xb0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7b2f298e718937a313108f000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getpeername$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x4c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, r7, 0x10000}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_TTL_INHERIT={0x5}, @IFLA_GENEVE_TOS={0x5, 0x4, 0x6}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000001c0)=@raw={'raw\x00', 0x8, 0x3, 0x348, 0x270, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@loopback, @private=0xa010100, 0x0, 0xff000000, 'bond_slave_1\x00', 'geneve1\x00', {}, {0xff}, 0x84, 0x0, 0x28}, 0x0, 0x1b8, 0x218, 0x0, {0x0, 0x1c8}, [@common=@inet=@sctp={{0x148}, {[0x4e24, 0x4e21], [0x4e24, 0x4e21], [0x101, 0x81c, 0x4, 0x3041800, 0x10000, 0x8, 0x7f, 0x3, 0x8000, 0xe4, 0x5e9c90b, 0x4b, 0x5, 0x2, 0x5, 0x6, 0x0, 0xea, 0x8001, 0x4, 0x6937, 0x7598, 0x4, 0x5, 0x1, 0x9, 0x7, 0x81, 0x0, 0xba11, 0x4, 0x2, 0x3d, 0x10001, 0x3ff, 0xffffffff, 0xffff, 0x8000, 0x1000, 0x0, 0x28, 0x800, 0x6, 0xfffffffa, 0xd721, 0x80000000, 0x0, 0xfff, 0x0, 0x10001, 0x2, 0x3, 0x7575bec7, 0x8cdf, 0x3, 0x4, 0x1000, 0x24, 0xd8e, 0x4, 0x8, 0x4, 0xe1, 0x8a], 0x0, [{0x80, 0xb}, {0xac, 0xc, 0x5}, {0x10, 0x4f, 0x4}, {0x4, 0x80, 0x4}], 0x4, 0x4, 0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}, 0x5, 0x0, [0x25, 0x5, 0x28, 0x23, 0x12, 0x34, 0x16, 0x3, 0x10, 0x39, 0x27, 0x2a, 0x6, 0xe, 0x36, 0x10], 0x27b02525726059f5, 0x7, 0x4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x3a8) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)="10", 0x1}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x4}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000000000)=0xc) 2.840517473s ago: executing program 3 (id=510): r0 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000100), &(0x7f0000000140)=0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000005000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000005000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000340)="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", 0x12b, 0x10, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x0, 0x2, 0xe, 0x9}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000002900)=r4, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8ad8}, 0x0, &(0x7f0000000540)={0x203ff, 0x0, 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r7, 0x65, 0x6, &(0x7f0000000140)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r7], 0x0, 0x5a}, 0x28) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r8, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5ffffff}, 0x3f01) sendmsg$tipc(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)="57fa9b4c91", 0x5}], 0x1}, 0x80804) 2.770641789s ago: executing program 1 (id=511): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x1ff) r2 = openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000c40), 0x12) openat$cgroup_type(r0, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3300000}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 2.499042042s ago: executing program 0 (id=512): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x3c, r3, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfe, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc005, 0x7}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@deltclass={0x0, 0x29, 0x100, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x7, 0xffe0}, {0x8, 0xa}, {0x18, 0xd}}, [@TCA_RATE={0x0, 0x5, {0x1, 0xaa}}, @TCA_RATE={0x0, 0x5, {0x7, 0xb7}}, @tclass_kind_options=@c_htb={{}, {0x0, 0x2, [@TCA_HTB_CEIL64={0x0, 0x7, 0x4153}]}}, @TCA_RATE={0x0, 0x5, {0xf, 0xf8}}, @tclass_kind_options=@c_hfsc={{}, {0x0, 0x2, [@TCA_HFSC_FSC={0x0, 0x2, {0x6, 0x8, 0x80000000}}]}}, @TCA_RATE={0x0, 0x5, {0xb, 0x4}}, @tclass_kind_options=@c_sfb, @TCA_RATE={0x0, 0x5, {0x4, 0x95}}]}, 0x11c}}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffeb2, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="42a00200231c04001400030076657468315f746f5f626f6e6400000014001680100001800c000700f9ffffff05000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffeb2, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYBLOB="42a00200231c04001400030076657468315f746f5f626f6e6400000014001680100001800c000700f9ffffff05000000"], 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x4040080) 2.07768149s ago: executing program 2 (id=513): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x6, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005880)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000001240)="14051b5ae730a16b38ec3c25a36f", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) 1.990630522s ago: executing program 1 (id=514): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff000000009408000000001700638af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70300002a000000850000006900000095"], &(0x7f0000005d80)='syzkaller\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x300}, 0x94) 1.705446111s ago: executing program 0 (id=515): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x8000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000100)={r1, 0x200}, &(0x7f0000000140)=0x8) socket$nl_audit(0x10, 0x3, 0x9) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x110, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x24, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010102}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x2}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x7}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x5}]}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xd}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x142}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xa, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x88}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7a46}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}]}, 0x110}, 0x1, 0x0, 0x0, 0x80}, 0x20000841) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x30, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0xa2cc, 0x6}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000801) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000500)={'virt_wifi0\x00', {0x2, 0x4e20, @remote}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@getnetconf={0x14, 0x52, 0x300, 0x70bd2c, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x8010) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000007c0)={0xffffffffffffffff, &(0x7f0000000640)="50c4dd986305c75e6ef919ad7365546a2f5e8a18ff1ac9c4ec5124193b5a43fee324012de64d4f0cfaeadc21cca19590b2c11cffb22e526d99a484067c84e4d93eabd3ba236d46ad154f405a2aa8d1ba6ac5f081bf1669ceec6a2ba72e", &(0x7f00000006c0)=""/206, 0x4}, 0x20) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, r5, 0x0, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void, @val={0xc, 0x99, {0x2, 0x47}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x7}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x42014}, 0x4000000) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000a00)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000a40)={r2, 0x5, 0xa}, &(0x7f0000000a80)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000b00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r4, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, r5, 0x10, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x3d}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xd}]}, 0x44}, 0x1, 0x0, 0x0, 0xc040}, 0x50) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r8, 0x8983, &(0x7f0000000c40)={0x6, 'pimreg\x00', {0x2}, 0x3}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x13c, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_REKEY_DATA={0xb0, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="04462c64bdd192b6dc41819f38e2af437dd874b7311c4a5d260292b2b9551941"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="24593bcd4abfc2a8925f462897aabb55e5ba290270c6f2ff"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="3beb91b38b8c94b04f2abf721af2cd79f79f293394d9bfdf238147ad51470c6b"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="035bd910786f0462b854b5621bc6aa032c464b3992a67ccd64f4a6294b7bc9ba"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x6}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="3b968d0df421a31a37bb74c95dc63e61"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="bac18d0e7c9739ec713551c336d16b63"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="4d614707f9920d60ff2b4334e8c60a42882ff14e2604f224"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="0572e4f5588959faff32f5de2e79cfa8"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="5ccd5c554370e879ff51f7878d0e05c5"}]}, @NL80211_ATTR_REKEY_DATA={0xc, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x81}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004080) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000ec0), r4) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000fc0)={&(0x7f0000000e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, r9, 0x8, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x5, 0x7b}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x103}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x20008080) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001080)={'syztnl0\x00', &(0x7f0000001000)={'syztnl1\x00', 0x0, 0x80, 0x1, 0x80000001, 0x3, {{0xa, 0x4, 0x2, 0x35, 0x28, 0x67, 0x0, 0x7, 0x29, 0x0, @private=0xa010100, @rand_addr=0x64010100, {[@timestamp_prespec={0x44, 0xc, 0xd3, 0x3, 0x5, [{@multicast2, 0x5}]}, @lsrr={0x83, 0x7, 0xc0, [@multicast2]}]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000010c0)={0xffffffffffffffff, r10, 0x25, 0x11, @void}, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x3c, r5, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x65}}}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "cc9dab50b26343c209e8ddf371"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40800) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000001200), &(0x7f0000001240)=0x4) 1.469108375s ago: executing program 4 (id=516): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000001c0), 0xffffffffffffffff) r3 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r3], 0x7c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r8, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newlink={0x5c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, r8, 0x42093, 0x4}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @sit={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}, @IFLA_IPTUN_6RD_PREFIX={0x14, 0xb, @loopback}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x800}, @IFLA_IPTUN_6RD_RELAY_PREFIXLEN={0x6, 0xe, 0x7}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24048014}, 0x8010) sendmsg$GTP_CMD_ECHOREQ(r1, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x804, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_LINK={0x8, 0x1, r5}, @GTPA_VERSION={0x8}, @GTPA_LINK={0x8, 0x1, r8}]}, 0x34}}, 0x60) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x870bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0xfff3, 0xffea}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r11, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x3, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 1.358647147s ago: executing program 2 (id=517): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f0000001340)=[{{&(0x7f0000000140)={0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x29}}, 0x1c, 0x0}}], 0x1, 0xc040) (async) sendto$inet6(r1, 0x0, 0xa5651504c53ef6be, 0x40080, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f0000000040), 0x4) (async) r2 = openat$cgroup_int(r0, &(0x7f0000000180)='hugetlb.2MB.rsvd.max_usage_in_bytes\x00', 0x2, 0x0) read(r2, &(0x7f00000000c0)=""/102, 0x66) (async) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x4010, r1}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg1\x00', 0x0}) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) (async, rerun: 32) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000240)={0x1b, 0x0, 0x0, 0x8, 0x0, r3, 0x80000000, '\x00', r4, r5, 0x3, 0x4, 0x5}, 0x50) (rerun: 32) 1.324026889s ago: executing program 1 (id=518): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8a00fe00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbf0400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000370002000000b705000008000000850000005e00000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2}, 0x94) 1.021011808s ago: executing program 0 (id=519): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x4000, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x50) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x2, 0x8}, 0xc) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x50) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl2\x00', &(0x7f0000000580)={'gre0\x00', 0x0, 0x8781, 0x10, 0x5, 0x571, {{0xd, 0x4, 0x2, 0x1, 0x34, 0x67, 0x0, 0x1, 0x0, 0x0, @broadcast, @local, {[@generic={0x89, 0x12, "77c803f07bd79e8dbed469e9642abc54"}, @timestamp_prespec={0x44, 0xc, 0xe8, 0x3, 0x1, [{@multicast2, 0x100}]}]}}}}}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000800)={{0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x10001, &(0x7f0000000680)={@_ha_fsid={[0x9, 0x9]}, {0x9, 0x8, 0xfffffff9, 0x9}}, 0xa, &(0x7f00000006c0)={@_ha_fsid}, &(0x7f0000000700)=0x9}, {[0x6a, 0x9, 0x6, 0x8]}, 0x4, 0xa6, &(0x7f0000000740)=""/166}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000900)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000940)=[0x0], &(0x7f0000000980)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x46, &(0x7f00000009c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xf7, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000d00)={0xffffffffffffffff, &(0x7f0000000c00)='\x00', 0x4c4e81, &(0x7f0000000c40)={@_ha_fsid={[0x736f3b1, 0x2c]}, {0x6, 0xcb2, 0x6000, 0x7}}, 0xf0, &(0x7f0000000c80)={@_ha_fsid}, &(0x7f0000000cc0)=0x41}) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d40)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3}, 0x50) (async) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7090000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000058020010c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9820000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r10, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r10, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r10, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) (async) setsockopt(r10, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r10, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0xf, 0x4, 0x4, 0x9df, 0x24000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x50) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000001040)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000001080)=0x24) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000010c0)={r12, 0x53}, 0x8) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001680)={{r13}, &(0x7f0000001600), &(0x7f0000001640)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0x18, 0x5, 0xd, 0xffff0000, 0x601d, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0xc, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x0, 0x0, 0x9, 0x6, 0x8, 0x1}, @generic={0x6, 0x9, 0x0, 0x0, 0x8}, @alu={0x7, 0x0, 0x3, 0xa, 0x7, 0xfffffffffffffff8, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x8000}, @map_idx={0x18, 0x2, 0x5, 0x0, 0x4}, @map_fd={0x18, 0x3, 0x1, 0x0, r2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000480)='syzkaller\x00', 0x6, 0xa7, &(0x7f00000004c0)=""/167, 0x41000, 0x2b, '\x00', r3, @fallback=0x37, r4, 0x8, &(0x7f0000000880)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x2, 0x8, 0x5}, 0x10, r5, 0xffffffffffffffff, 0x6, &(0x7f0000000ec0)=[r6, r7, r9, r11, r13, r14], &(0x7f0000000f00)=[{0x5, 0x1, 0x3, 0x7}, {0x1, 0x1, 0x6, 0x4}, {0x4, 0x3, 0x4}, {0x5, 0x4, 0x1, 0x1}, {0x3, 0x1, 0x0, 0x7}, {0x1, 0x7, 0x5, 0xc}], 0x10, 0x6}, 0x94) (async) r15 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r15, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000040000000000000003000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000007f00000095"], &(0x7f0000000380)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 956.439323ms ago: executing program 3 (id=520): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000005c0), 0x10) (async) recvmmsg(r4, 0x0, 0x0, 0x10002, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f00000001c0)=0x3, 0x4) vmsplice(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)='w', 0x1}], 0x1, 0x1) (async) close(r8) (async) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_DELETE(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000380)={0x1c, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40480d0}, 0x40) splice(r7, 0x0, r8, 0x0, 0xfffd, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="edd719e2491638f8496e1e07ed07037aa064935788953e18f8af5f50c12efa8570b89b68e573da6e78c2e97b66ad95984f6181a809d97f0debc9bedb9f58c54a829993842807ae97988553"], 0x3c}}, 0x0) r13 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) getsockname$packet(r13, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) 674.933715ms ago: executing program 2 (id=521): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r1, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x18, 0x17, {0x1a, 0xfffffffd, @l2={'eth', 0x3a, 'vlan0\x00'}}}}, ["", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r2 = socket(0x1e, 0x4, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="4800000010003b15000000000000000000214907", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b00010067726574617000001800028004001200060003001c00000006000e"], 0x48}}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x400, 0x8, 0x6, 0xc, 0x82, 0x7f, 0x7}, 0x1c) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x1, 0x81, 0x1ff, 0x801, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) bind$tipc(r4, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000004400)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}}], 0x1, 0x12001, 0x0) 573.243754ms ago: executing program 1 (id=522): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@o_path={&(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r0}, 0x18) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x4}, 0x6) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x2, &(0x7f0000000600)=ANY=[@ANYBLOB="18030000000400000000000000933efbc3e5700e5f97d495fa8a5883bed79700"], &(0x7f0000000140)='syzkaller\x00', 0x4, 0xe6, &(0x7f0000000280)=""/230, 0x41100, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xfffffffe, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x1, 0x800, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000400)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000440)=[{0x5, 0x5, 0x2, 0xb}, {0x3, 0x1, 0xe, 0x5}, {0x5, 0x2, 0xb, 0xc}, {0x0, 0x5, 0x6, 0x9}, {0x1, 0x3, 0x9, 0xe17a104a9b0760f1}], 0x10, 0xfffffffd}, 0x94) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x2c, 0x10, 0x8, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42004}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200068a0}, 0x0) (async) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxnfc={0x2f, 0x2, 0x6, {0x10, @esp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @broadcast, 0x7, 0x80}, {0x0, @remote, 0xd, 0x4, [0x7, 0x8]}, @ah_ip4_spec={@multicast1, @private=0xa010100, 0x0, 0x5}, {0x0, @local, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xc, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000800000000000000082a6a36f0e7a0ab357f2c32c74b3244426da900000091116100000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) (async) r5 = socket$kcm(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) (async) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r10 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}, {0xc, 0xc}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x24, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x0, 0x2, 0x7}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0xb}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c0006"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) ioctl$sock_SIOCBRADDBR(r6, 0x89a0, &(0x7f00000005c0)='veth0_vlan\x00') (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$nbd(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r12, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001f40)={0x14, r13, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4089}, 0xc0000) (async) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r11) sendmsg$NLBL_MGMT_C_ADD(r11, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010025bd7000fedbdf250100000008000700e00000010e0001006e65742f6c2e636170000000080002000500000008000800ac"], 0x3c}, 0x1, 0x2000000, 0x0, 0x20000000}, 0x4000080) (async) sendmsg$kcm(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000580)="140000001600f963d25a80648456dc921f6b718d", 0x14}], 0x1}, 0x804) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 382.078553ms ago: executing program 0 (id=523): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) unshare(0x20000400) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a6c000000060a0104000000000000000002000000400004803c0001800c0001007061796c6f6164002c0002800800044000000000080005400000000008000340756c005d0800024000000002234c8ef76e2a04f3a5c508000740000000080900010073797a30000000000900020073797a3200000000140000001100010000000000000000000300000a"], 0x94}}, 0x4) socketpair$unix(0x1, 0x1, 0x0, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000004c0)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f00000005c0)=0xe8) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000200)=0x0) r9 = gettid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004180)={{{@in6=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@empty}}, &(0x7f0000004280)=0xe8) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f00000042c0)={0x0, 0x0, 0x0}, &(0x7f0000004300)=0xc) sendmsg$netlink(r5, &(0x7f0000004380)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfc, 0x8}, 0xc, &(0x7f0000004140)=[{&(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="9f8340a51ee25745f31306ed5962f8c18a4c702b6a1bef02aa63adc49fbe86799588bd462751a19a5040c7bb093d92b465112bba10496c0100be51514fef55a984f0d067115945c39291b46683b161ea1edd1fb67184bcdea92e30834044874236d9aeb0affb0c103d800096ae35ea779dae94139df5b32f1dfa05861745838e87f2eebeb27444d7660fc4d206cda8c86ed174f46db5928ec52d75be1a3a182d1860196359d18ff6523de316113c7491a212285ac66db8a5f0ba0a6e058372480e64da490ef63e7cc542034f946b5226fbe8b74bec009e7a8d4251f856479bad494c77adc9f2342b45fc7d7d57a82cde8fe8e306dc35b0bed6937e28f9ef4b72e3f23898683d8cdd4c39dbe856ccf9a092aefc3bf24bfdd3b458d4cfe4998eba1319d8ddb549e0e7da7318d67d8793a80558104f8425ce21150f78e4ba1601176269f546c430dc9b9aacb544f9b6027307cd72c615843cdc5858356d29f0b8c407df530f09a97ef962043e32004279fcbe323f67b9e5545fec1e2d86aa5e0d54192acea1113a1cd75efa4379f642939cbb473105363defc8635a41a2fb1a3bd66ebe266e6eae2fb525e4035ea64e6153b3d23829ec0c50ef5f601cdcfb3a2943ade3e5374ce3c87a58ee21022fec9aafeb04eb22bebd746a993a2cc1059b9d3f034ca002270b74f9de22f8a03dd69554b24bf583666a18e1da31beedcdf1a437dbb4113826b8bab2d03ae03cdcee7d01e53bc65114adc8ad716db537255f05e69971b4b73d6577c8739b0f98a3d8ed06d41b2e75525710fc681d7f13ef3bde6767731a38a29f12cac9b196e4bac641c5ec4c3e44002bd060db40ca989b3ea9157af427d4bfd70e884c83c2505c2b9b1b71cb7f1196833e07b7a92c90d39b92b9c3793b7cfa6d4a668aa72e76f2ac5ecba66a7abef7bbbe0ca8c60c9dbfbad5255122cae367215bcce71accc65ed9c36a07f1fe6af6b1e40964d694ff8620c63c1a7991a73a9edb9b6e5ff7cb12e5b1c6f141f7822c0013e5745e753848b27a21a2dac39e960295da795e0d338eae630b1077400eb8b9993a2653e012da5603adb5cbaf4f55f6616a1fbe47cf294183474a040ed8a6de5daa6cdaa8e6bf4e368c66c085d447532a8ef075bd4aa2778600cf51bda0b8dbe0040ac59365e03f8637524bc8f868878356f9e69ad7bb1b196d504a7af66d535ee95d47da90d4063924b825e5a6818d081c99b729206495de3cc4772f1920bcabc2e12053a7eaeae6af3449a9355b776a197acf7faa1766439812d4c9c0a2c88f5f76028be98cf4c3c0359bb03eeed35659b85e0a0553c12dddf2c3e8e067a3fdb4251d88f5b7169dca4a5b01071474ab460ea2089541001c856e5ae14a8c8ffec7ba9be6a12a1f3acaf1c0e308bd49d871e0b8d76b7bdc4e3668d3e0f9dc86cbf835bb00084dca85d2c936e6afbce76fbf1f2ab286613caab77feef59b5ca5e6c0cb3b9a43095384312a303b5bbc6e59b6988ddcd7d259fe229052e24392bbbdc4c91c36c2e53fb6894d7054e4ab2dd5be260365d03b7594388248cf2e6280685e88b7d367c85f53f5226283a0ae27052f233e84b67e52081e607e76fa544a3a798a4fee4e80697b78ad782f6d7f98841e5df0b8f77fd7f1baca62befc8d6b74d236fae36ee5f6ceaa0c2c0c6c5fb59358110ce746b0cdbab00d73e0b069bf33329a82f6a643fdd6a8d11a98a7b7752c4938e86de42152310e96c96d988a537b62f03a33db30d4badfffaad7dbb8d7f6886fe912d84d88eae0356c7edac47b568038ec5597255101a05833b7471b3753b31301815fe111358dc3c7a1dc60a0f0d395b42939a72878c43111952f3a37415420c207ad29bb19757221b3685bcf54cd140dc625894d7ba0fc54f0794627963722d74fc571494bc7018d7e0c9e4568fb1207163f273f23490432972425c3eb871ccf87fda84ca69df9303a297e0cd27109cb244305b5de6edee552be4d7fd92aef479991c6076a4bc96a19e7485f9d8fe3f1569936060e4306935b278310c26db9d1d19e8aff631ff5862279bfbe9ef0a0eb9dbb4de9f272d5f31a623e72dbcdeac3a35a3b22399b1f0133b96463370d6a8b8f57cf0702665840fec80ff56cf6326fe44a42746dccb3c96a79a447376c8bfbd39ecd10491f7ce5aa6dae1ad50ede43f1a958532ef46340131eea18ec78d09bf738757edc7fe8c5cfb6500be7fe769d496b3ac3aee71e125c22bf38fffbf0066331cc64850b36552a70b133413585ec794101d883e474dc4dccff1220cbf222df9d90f61b15fee73d3bf30d058726c58e777bd1f6a337facdf3ca0b84b6c3b71391502d7dd1ce358cf698d8c26affe6a3f79d03d76fc0c129e47a0b43a347250a7fd17d90b7bb1d4fc4151e1ec39249c2920ecb3e918bd5c1bda7ec6f4a258c389afeddf485817826d1a1c4edc12e24a21b0d550852f04cee6fad78ec661cd91224c4b79ae7134f6eb351e98195fe23830f2fc0c2ccc8173c8c3484c8a3f115deca41111e79f9bf35ca2e37a049797341836c87c057935d96142ce24d6f91d5e935a72ffcff0efce8cb93166224603e80188ba78d7248555d5a09cc6ed739a9797940f5a3ad91f5ee15fab5c16ee502dfb1bab645ba78b530eeeb07b37921db839e930378db172b23690452c633cd7382c1aec583dfdc9fc39edbe4e19a3b4fff359ff39527b4cd2a082b0b5fa479cb653c4c6aa3f0f3819de7c6eda5d778c50b2d4419a4d3c3b13b6f0c1042657a97eb7bc81c4491453929ed0a7d1930cba888e9d2321543c323f9e78193748c1aac89e1e7a57beeb6bba2a5dd7336f78d5368a7d0ecc4e737430b3bee87a3dbadb66ad82b2f0263522c36b712ee78658655bcba153d04c85f243ec09df7f18174c3b469c9a53014ff1b39f589cd274035162f8f6c5efa964aadbfd48608af383335302557e1ca1c0142b54c2ecb24ccb0f09650208d0de6b2471e6d4f76c3a0471df4bbedadc25776fc6f925c31224d69b8a1acc103d6c1a02322de09c11692bd1285dcf2c1f7dc1c2b490e81f1cb96cfc4acf8408a446ca4ac5614a9c3e3573884ba39f94ddbb43a10f0e9412a074fabddfc31a1d175d9461ef14f1a07222bc3f1070d06c8fd19b0117e3a822cdc35885a347b72e431437983741dfb0f0440f6592003bac9d54d3d9016c3f2064a38442e3dd90f6477492443b23b7da0de35dd314a06aba85c85a860288547322aeb00b8353b55bce6bd81a2f14bd530b20baf49e7cb8554ce909d21e1e6ad0c41160dad5eb347be2ab18d26eddab9778e5664d7323de474b0ebe3381c6c4d726ecb114659f4dcf2c8de6b6ff50736b06123ef33ffc511e25ad6feeed452f11819b5b626e735cc0c27bb17acc69dc9fd7b9bc1ab3b0d34825a691f36374fc05731a867a6482c0beec006d905f6dd24e4152cd54fdc379fcefc8dc102065fe1189b1c01b1fefb2f9cfb6ca92825ea9f0299ec528a8eb7e8e68ced8e760ddd57ce81430747909a107fa31444d37a838d4860a9a80a1be240f5c30ee33c215002dca93f8ff58fc0f750f18a1a679942cf51aac303a96a8a43b2556acac12a7829237756fae95e8f1f4f7b1f37e3d034958a98a582eb34fd589a4e2cf7aa90fbc8ef617eb33732bafd9b9792b39708637921995cc3978e4558c3ace16d2fcbca4eef6e1caacc7f0229a95be82eee740bf3f14d1c817b1e8523df561b0ba12707f6ae16e878acee140315aabafa3caf7149e2998e786a8fb1dafd2026d750a1506af13eb0b2f03ba86c2e19a517de0bbe58708f64dd97cca00dd60ac2488f5225a849b1c61c6ba0fcc5adb4afd5e06f56d6a5b9e23af56deba8f1f3726919bb821cc15003a5f33750babea82d10b155179e6d613e568c23825b085cc03f8ee1fc7458de306d55025c6d846168bb3951cb14e534e2c44a2f880ed2042b9b0a51da6cd7a156a100da0c5cb98b9b89bc1145804b4f3b4801f664571c682b31b51e526172bf2000b767a6e18addc7af6cc78b0acd2f57d8d43bed83d3e8d522ca5bfa69c35add8a01709ea9d00cd124206b496a2c244c4df4d32aaa852e04495673bc3e1edc4ed4b6b774410a9cd7befcedfd38a8bac53160777368d1a548dcdc225c7d8bf9a63bd61dd66f05aead4dc42b5bc7f948a287e42d201d1c19fcdd344b5831c73ba1aa378ca892d6b575323e9688d60a6ca1fa1c31b1df2084b29ea933616ef05a6f09222b3af8cfad0b1e30b68580975d11afe1006bd31528c7634801166fcf15c9e49fb82f711c0f35c5366c06e18a84b4804a8ca22a6a11236bc29932e3b0023594c2455e25093fae54c1f5f0dd06c4f3e12fb7c3f2e8a71a1296996814018f5682d99c07e4fb31adffac39ab9ac21b672b1b9aa79ba599c004d1bdc967b40dbf4c6794323d745d033dbb0c2a4c14875e86f58bb450ff3ad7924f99946ce2831f36ac84f27a26a565e81a8b0946d6c45f3a08b4100f8f3794824ef7b6ed99266efd631a740f006359dfe4409c7d17e7bc3dca1b76991ce71cdd188e794a3616f26f06e756c9790548eb523f3f4a7fe3bd1dc9bcb087e9f2c01759458c37edf2e44de83034c789da7fef4d1a7d44077ed3d998d3063718f6845bbf802176be470f01ea896c9aecba3fa66f075986fe34f361b03fc6067bde57c5175c144f9251a11f20475250de19e603da186fd89c933d2b01aeee50197ca8c70f4411b22d0a69e6188072829a15b8cb67ad38d5753fe6e2a65bf80f40bb713ce1a9ae0479f289bc2e77072cfd0e54fa559cd1af9c97d1097cf0a20542a0f90e8f967901ee6b285e6101e76ddc9ac494a39419e0bb1dcc212d11dc0fe252d61b066dec7b05f6c416a1af969bec56e7004ad902841df0ff4238519d48f7d586233bdfaa5fd8f471bdae68c546a6ed0c3c4961f9a66f8363e7423191dcf77d4f9f5e0e7d5e26ceb874d43efebb24c0b0bc05577e35f1b32344c45c99056cd2b65c12a998083daebaaaf76f430be5c64348871b471bbf61cff32f0aa789b4e99873f1c83821c2a0df2aed59d29cbbf111965b9f321ebb334bbd50d22672d591b890373c8760320c9c60573ca6bdfd249ad87e94c4a80f3fb94ae7845387aa617900cc7e1c08eb3f24859bd5cc141f7680a7a8e78a38892d73d349d1a2723e20791693888081b2d22b944fdb16ac44f0f4ba037f7380c5e14c581625f3d015f6ac5a2d0ca91a6f12a0a5bd34f5d74090518354b207af976d22e0b1494a3b34ad5ab8bd1441b791dc3d66d76b8e12a6fa134230652cbfe7367b674962b9c4817e805bd5ddcedc2a8fb90f6c35abb8815d66692a685454228608c129e54d8df3b842feb4bc44175c5fb0875f396b9969c6b19b9cae27aff0faec85c66e085ff302a45cd701667e31b2d1d6da85d3208ffcd4eab33112b70580bda9e79ee1bb8e7b096bdce8d61f11a08134ee8599b04d548105aab4808fde05e634335d73bfb482805a58a00b83ef1e41a3d4531f4042ea08e90726041b3cdea0d5c561dc48f3763b9803bc361d8a2a4d941a9c22818c2424542f03601d14effd2d423d2b2f28edb803fe1431a08a2fc865d889a78de6cdc1140865e11f5a56f44601b6443592b1cc322c02b681a2202a5158b975484988a8b0558fc3dd4e63e6b9577970d0b29f08a2d8a9671a2a0f95dd6830d0955f461224f0eebe8afaf6b0e62048448e0a58786dd717e3594be79caa70bf803ae4dab98cd7b74062085ba1e9d8fd82636ff0eaed7a470e00a462b89bee8bb5af4dff3eedbed1a7d501959a14076c62cb9dde9b33f8318f3885bdf492e7e559067b3e380ec25a1ec8d334e44690878b068203b093af42bdbd3e99afdda377695985f8cb0775a0bbcbe4be1270ae7bddd329da5df9b14047c7bc1c098d2e97fd973a040d973736dbf250d5e89e6608003c00", @ANYRES32=r8, @ANYBLOB="f300a00060ce8e92256dcd5e7edc901cceca63ac1359741ab63b40af15f37422fa2bb368c29f3b38d51175af79f736946d26b5c1a6590c224b2a2dfc7668ac025b01e58b0ba040309a092d9c9a9b6e1b161f851e5cdbcd1fdfc67bc66dc74ef3bbfab4e83e9376a0196ed13e46c27854660f285e83331a52a706f6361fc901fea750372ecd5b13cb8cadd165baa50649b225e4280348c69b4d85b2bf8e7f1d7734724cbebe3dedcb07727b2783bb447ffc21f4cc349e4d42d7f2adb72b1e754cacd65c5b2954a208db1eed7db594ecf6819c6cd0fec4112bc3f84c4779c5f02c10528c13436fe97f0e56ec92d20ad623fff15c000000"], 0x12fc}, {&(0x7f0000001c40)={0xcc, 0x31, 0x416, 0x70bd29, 0x25dfdbff, "", [@generic="f816bedae7ab5d3151d3c66bfda90e10457bb7d88d17cf3e99f22665ada73973c09d4fa379aa582053ecb45dc4dc4135aae9e8b24d1fa9a611b9638491e19d24604cb237eb8f08d0d660689bf1bf20076803443d90eee80664f6bc35250019f2c537c2c767250cc4bac13006cbfd3132cf3cb07d40f14c028916a7c815a1c54e8e41303ca1701fdd7fa7d0995c39f0ddf86e5727784b15a50b697bd6c96d9341015f90e5b621199451d7961070c60c01015c235c99", @nested={0x4, 0x20}]}, 0xcc}, {&(0x7f0000001d80)={0x10, 0x36, 0x400, 0x70bd27, 0x25dfdbfd}, 0x10}], 0x3, &(0x7f0000004340)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, r11}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x40, 0x4008084}, 0x4c4) sendmsg$nl_generic(r2, &(0x7f0000000880)={&(0x7f0000000080), 0xc, &(0x7f0000000840)={&(0x7f0000000600)={0x218, 0x2c, 0x2, 0x70bd2a, 0x25dfdbfc, {0x19}, [@typed={0x8, 0xf9, 0x0, 0x0, @uid=r3}, @generic="0c2fe29037d65b2ac784c0fd108ee90f8e41b98ef4b922dae402628cb9efda10726e99c0571af3df0d4dda4957994aa540a05dcde7ff898319d2164f8b2710663812083e9dde70c127c3821fc2a4938f35fe422fa82caca71a35db223934e2f93681be69f53cb65ab3f3449a28f5b30cf6d38c31c6985964441568255a38f49dc48c68532bc4ca8f7e66ece10198690744fc166a2444dc72241d151530c0d184d638d69bd05154cfc588ca478f004bb459a960c05b25bcba76ed86170202dd54c493", @nested={0xa1, 0x8f, 0x0, 0x1, [@typed={0x24, 0x10d, 0x0, 0x0, @str='blkio.throttle.io_service_bytes\x00'}, @nested={0x4, 0xb5}, @nested={0x4, 0xc8}, @generic="02c313a105e2bb632c8a6d0a1463883163f407173a079ba6da8766a1fe8f6db1bc9823c2fa4d3d0fd605aa5cc1ebe55f06d71935b6cfb2360ac2a262f2b530968fd54f95526807a0507b2790f1b44200b279fb", @typed={0x8, 0xb9, 0x0, 0x0, @uid=r4}, @generic="f8d631683b1601b2bbb4d4c6b203", @typed={0x8, 0x4f, 0x0, 0x0, @uid=r10}]}, @generic="0a3f133d774a92be288cf985f663a12990ad1c9f6d6670982dfa8de267345b61f3fba925d050a1ad00657a76eb5c136f397563f5c337da2979f7581f09edac8082f46cc951873e91dab057c85d0643cd1bee66ea72100048708b4fd15fa62547518c9acd49649a5f4f9ab89b16bb0bb23116e9b45522fe967763ff83af2ff1236f37b932c6874e44aa9e93197515f918f0809d"]}, 0x218}, 0x1, 0x0, 0x0, 0x40000}, 0x4c0c0) r12 = openat$cgroup_ro(r2, &(0x7f0000000000)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) unshare(0x20000400) splice(r12, &(0x7f0000000040)=0xffff, r2, 0x0, 0x6, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0) 0s ago: executing program 4 (id=524): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0xfffffffe, 0x0, {0x2, 0x0, 0x0, 0xa, 0x0, 0x1, 0xc8, 0x0, 0x1000}, [@RTA_IP_PROTO={0x5, 0x1b, 0x6}, @RTA_OIF={0x8}]}, 0x2c}}, 0x24008800) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010014000000000000028c00000008000300", @ANYRES32=r7], 0x28}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x8, 0xa}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x18, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.141' (ED25519) to the list of known hosts. [ 84.515648][ T5610] cgroup: Unknown subsys name 'net' [ 84.631945][ T5610] cgroup: Unknown subsys name 'cpuset' [ 84.641870][ T5610] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.334655][ T5610] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.881937][ T5630] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.889950][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.916260][ T5638] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.926217][ T5642] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.934113][ T5642] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.943399][ T5642] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.948556][ T5638] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.960054][ T5642] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.961019][ T5645] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.971410][ T5642] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.982510][ T5645] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.983466][ T5642] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.998581][ T5645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.999119][ T5642] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.014260][ T5642] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.024992][ T5638] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.027228][ T5642] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.039448][ T5638] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.039932][ T5645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.040880][ T5642] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.061353][ T5642] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.071299][ T5642] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.078927][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.090923][ T5642] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.111817][ T5642] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.956322][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.964702][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.972142][ T5625] bridge_slave_0: entered allmulticast mode [ 90.980836][ T5625] bridge_slave_0: entered promiscuous mode [ 91.036720][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.044864][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.052195][ T5625] bridge_slave_1: entered allmulticast mode [ 91.060603][ T5625] bridge_slave_1: entered promiscuous mode [ 91.097077][ T5635] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.104417][ T5635] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.111964][ T5635] bridge_slave_0: entered allmulticast mode [ 91.119731][ T5635] bridge_slave_0: entered promiscuous mode [ 91.157771][ T5635] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.165485][ T5635] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.173298][ T5642] Bluetooth: hci0: command tx timeout [ 91.173707][ T5630] Bluetooth: hci4: command tx timeout [ 91.179972][ T5629] Bluetooth: hci3: command tx timeout [ 91.187172][ T4936] Bluetooth: hci1: command tx timeout [ 91.191608][ T5631] Bluetooth: hci2: command tx timeout [ 91.202997][ T5635] bridge_slave_1: entered allmulticast mode [ 91.212701][ T5635] bridge_slave_1: entered promiscuous mode [ 91.277912][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.325725][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.362648][ T5635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.404653][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.412132][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.419685][ T5627] bridge_slave_0: entered allmulticast mode [ 91.427218][ T5627] bridge_slave_0: entered promiscuous mode [ 91.436938][ T5635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.464496][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.472096][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.480113][ T5628] bridge_slave_0: entered allmulticast mode [ 91.487417][ T5628] bridge_slave_0: entered promiscuous mode [ 91.495312][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.503218][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.510777][ T5627] bridge_slave_1: entered allmulticast mode [ 91.518444][ T5627] bridge_slave_1: entered promiscuous mode [ 91.548974][ T5625] team0: Port device team_slave_0 added [ 91.554770][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.562579][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.570261][ T5628] bridge_slave_1: entered allmulticast mode [ 91.578414][ T5628] bridge_slave_1: entered promiscuous mode [ 91.645720][ T5625] team0: Port device team_slave_1 added [ 91.675829][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.687068][ T5635] team0: Port device team_slave_0 added [ 91.693101][ T5626] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.700617][ T5626] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.708071][ T5626] bridge_slave_0: entered allmulticast mode [ 91.715521][ T5626] bridge_slave_0: entered promiscuous mode [ 91.737414][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.749303][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.760451][ T5635] team0: Port device team_slave_1 added [ 91.766388][ T5626] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.773971][ T5626] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.781304][ T5626] bridge_slave_1: entered allmulticast mode [ 91.788953][ T5626] bridge_slave_1: entered promiscuous mode [ 91.797067][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.804145][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.830939][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.846995][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.889359][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.896425][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.922418][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.975074][ T24] cfg80211: failed to load regulatory.db [ 92.010378][ T5627] team0: Port device team_slave_0 added [ 92.016774][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.024071][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.050089][ T5635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.063372][ T5635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.070581][ T5635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.096954][ T5635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.119850][ T5626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.133123][ T5626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.145608][ T5628] team0: Port device team_slave_0 added [ 92.153432][ T5627] team0: Port device team_slave_1 added [ 92.200730][ T5628] team0: Port device team_slave_1 added [ 92.218498][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.225569][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.251952][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.308385][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.315518][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.341588][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.354804][ T5626] team0: Port device team_slave_0 added [ 92.383329][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.390663][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.416705][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.429639][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.436622][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.462600][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.484225][ T5626] team0: Port device team_slave_1 added [ 92.495780][ T5625] hsr_slave_0: entered promiscuous mode [ 92.502721][ T5625] hsr_slave_1: entered promiscuous mode [ 92.515355][ T5635] hsr_slave_0: entered promiscuous mode [ 92.522085][ T5635] hsr_slave_1: entered promiscuous mode [ 92.529265][ T5635] debugfs: 'hsr0' already exists in 'hsr' [ 92.535165][ T5635] Cannot create hsr debugfs directory [ 92.576886][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.583974][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.610419][ T5626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.623092][ T5626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.630280][ T5626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.656438][ T5626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.802498][ T5627] hsr_slave_0: entered promiscuous mode [ 92.809121][ T5627] hsr_slave_1: entered promiscuous mode [ 92.815521][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 92.821760][ T5627] Cannot create hsr debugfs directory [ 92.840809][ T5628] hsr_slave_0: entered promiscuous mode [ 92.847266][ T5628] hsr_slave_1: entered promiscuous mode [ 92.853733][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 92.859547][ T5628] Cannot create hsr debugfs directory [ 92.883372][ T5626] hsr_slave_0: entered promiscuous mode [ 92.889846][ T5626] hsr_slave_1: entered promiscuous mode [ 92.895981][ T5626] debugfs: 'hsr0' already exists in 'hsr' [ 92.901901][ T5626] Cannot create hsr debugfs directory [ 93.248046][ T5629] Bluetooth: hci2: command tx timeout [ 93.253999][ T5642] Bluetooth: hci4: command tx timeout [ 93.254630][ T5630] Bluetooth: hci0: command tx timeout [ 93.261928][ T5631] Bluetooth: hci1: command tx timeout [ 93.264936][ T4936] Bluetooth: hci3: command tx timeout [ 93.467309][ T5635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.486700][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.494992][ T5635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.506861][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.515907][ T5635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.526391][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.534479][ T5635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.545494][ T5635] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.632205][ T5625] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.645337][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.665062][ T5625] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.675079][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.683575][ T5625] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.694071][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.702568][ T5625] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.714772][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 93.817255][ T5627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.827695][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 93.836708][ T5627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.850191][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 93.858962][ T5627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.869125][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 93.877241][ T5627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.887059][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.009662][ T5628] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 94.021557][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.032322][ T5628] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 94.043305][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.053962][ T5628] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.066437][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.077286][ T5635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.092276][ T5628] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.102390][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.174637][ T5635] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.228114][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.235781][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.255502][ T5626] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.266090][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.274869][ T5626] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.285209][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.293523][ T5626] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.302964][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.312238][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.319542][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.339351][ T5626] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.351273][ T5626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.372399][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.442166][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.482756][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.489987][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.529914][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.546636][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.553844][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.610015][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.620742][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.650863][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.658124][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.703619][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.710851][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.791682][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.842353][ T1173] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.849595][ T1173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.870438][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.877671][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.940027][ T5626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.023576][ T5626] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.074934][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.082177][ T3296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.143840][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.151111][ T3296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.336869][ T5631] Bluetooth: hci0: command tx timeout [ 95.336915][ T4936] Bluetooth: hci1: command tx timeout [ 95.343055][ T5629] Bluetooth: hci2: command tx timeout [ 95.353803][ T5630] Bluetooth: hci3: command tx timeout [ 95.354169][ T5642] Bluetooth: hci4: command tx timeout [ 95.692807][ T5635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.916045][ T5635] veth0_vlan: entered promiscuous mode [ 95.963541][ T5635] veth1_vlan: entered promiscuous mode [ 96.118289][ T5635] veth0_macvtap: entered promiscuous mode [ 96.173196][ T5635] veth1_macvtap: entered promiscuous mode [ 96.250997][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.265505][ T5635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.304277][ T3296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.340607][ T134] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.355628][ T134] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.385723][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.400750][ T134] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.436115][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.493827][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.721251][ T134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.736666][ T5626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.757076][ T134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.841926][ T3296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.852207][ T5627] veth0_vlan: entered promiscuous mode [ 96.854420][ T3296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.866941][ T5628] veth0_vlan: entered promiscuous mode [ 96.897612][ T5628] veth1_vlan: entered promiscuous mode [ 96.925270][ T5627] veth1_vlan: entered promiscuous mode [ 96.967773][ T5635] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.041892][ T5628] veth0_macvtap: entered promiscuous mode [ 97.094048][ T5628] veth1_macvtap: entered promiscuous mode [ 97.112427][ T5625] veth0_vlan: entered promiscuous mode [ 97.142362][ T5626] veth0_vlan: entered promiscuous mode [ 97.179251][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.216879][ T5627] veth0_macvtap: entered promiscuous mode [ 97.231336][ T5625] veth1_vlan: entered promiscuous mode [ 97.242263][ T5626] veth1_vlan: entered promiscuous mode [ 97.258395][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.272337][ T5627] veth1_macvtap: entered promiscuous mode [ 97.311795][ T1108] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.338088][ T1108] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.371295][ T1108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.381243][ T1108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.408157][ T5631] Bluetooth: hci0: command tx timeout [ 97.413623][ T5630] Bluetooth: hci3: command tx timeout [ 97.413655][ T5630] Bluetooth: hci1: command tx timeout [ 97.424866][ T5642] Bluetooth: hci4: command tx timeout [ 97.428636][ T5629] Bluetooth: hci2: command tx timeout [ 97.451489][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.479442][ T5825] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 97.480575][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.515787][ T5626] veth0_macvtap: entered promiscuous mode [ 97.547731][ T5625] veth0_macvtap: entered promiscuous mode [ 97.557738][ T14] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.572866][ T5626] veth1_macvtap: entered promiscuous mode [ 97.585173][ T5625] veth1_macvtap: entered promiscuous mode [ 97.595868][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.606474][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.616894][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.770792][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.815665][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.824871][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.842798][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.856469][ T5830] syz.0.9 uses obsolete (PF_INET,SOCK_PACKET) [ 97.874177][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.890759][ T5626] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.921849][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.933914][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.956287][ T1108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.970604][ T1108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.990356][ T5830] netlink: 'syz.0.9': attribute type 1 has an invalid length. [ 98.000995][ T1108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.009981][ T1108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.040598][ T3296] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.060500][ T3296] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.080755][ T1108] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.090173][ T1108] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.099620][ T1108] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.151529][ T1108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.151992][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.199509][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.336960][ T5836] netlink: 64 bytes leftover after parsing attributes in process `syz.0.10'. [ 98.366033][ T1108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.394173][ T1108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.465732][ T1173] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.496205][ T1173] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.607524][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.642771][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.651854][ T5844] Zero length message leads to an empty skb [ 98.730321][ T1108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.764087][ T1108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.976183][ T5850] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12'. [ 99.104494][ T5850] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 99.188131][ T5854] tipc: Started in network mode [ 99.206419][ T5854] tipc: Node identity b6cae954f721, cluster identity 4711 [ 99.226616][ T5854] tipc: Enabled bearer , priority 0 [ 99.243843][ T5858] syzkaller0: entered promiscuous mode [ 99.257600][ T5858] syzkaller0: entered allmulticast mode [ 99.287383][ T5859] tipc: Resetting bearer [ 101.593489][ T5852] tipc: Resetting bearer [ 101.691970][ T5852] tipc: Disabling bearer [ 101.832484][ T11] tipc: Node number set to 1105979732 [ 102.219832][ T5869] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 102.323816][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 102.336821][ T5882] netlink: 'syz.2.19': attribute type 1 has an invalid length. [ 102.455677][ T5877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 102.507587][ T5893] sctp: [Deprecated]: syz.3.17 (pid 5893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 102.507587][ T5893] Use struct sctp_sack_info instead [ 102.564840][ T5898] netlink: 'syz.4.23': attribute type 1 has an invalid length. [ 102.580279][ T5882] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.748867][ T5898] team0: Device gre1 is of different type [ 102.845898][ T5906] netlink: 'syz.3.24': attribute type 2 has an invalid length. [ 102.901758][ T5907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.24'. [ 102.973154][ T5906] : entered promiscuous mode [ 103.306927][ T5914] netlink: 72 bytes leftover after parsing attributes in process `syz.0.27'. [ 103.405389][ T5920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.30'. [ 103.416862][ T5922] Driver unsupported XDP return value 0 on prog (id 12) dev N/A, expect packet loss! [ 103.514219][ T5928] netlink: 'syz.3.29': attribute type 2 has an invalid length. [ 103.601009][ T5923] bond0: entered promiscuous mode [ 103.607397][ T5923] bond_slave_0: entered promiscuous mode [ 103.622639][ T5923] bond_slave_1: entered promiscuous mode [ 103.638303][ T5923] bond0: entered allmulticast mode [ 103.650608][ T5923] bond_slave_0: entered allmulticast mode [ 103.663967][ T5923] bond_slave_1: entered allmulticast mode [ 103.759810][ T5920] gretap0: entered promiscuous mode [ 103.801273][ T5920] vlan2: entered promiscuous mode [ 103.862301][ T5931] netlink: 28 bytes leftover after parsing attributes in process `syz.0.32'. [ 104.015107][ T5941] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 104.542063][ T5964] netlink: 112 bytes leftover after parsing attributes in process `syz.0.40'. [ 104.888349][ T5982] bond0: (slave wlan0): Error: Device can not be enslaved while up [ 104.915631][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.2.46'. [ 104.936426][ T5982] sctp: [Deprecated]: syz.2.46 (pid 5982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 104.936426][ T5982] Use struct sctp_sack_info instead [ 105.497302][ T6008] syzkaller0: entered promiscuous mode [ 105.514363][ T6008] syzkaller0: entered allmulticast mode [ 105.660919][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 105.690350][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 105.708203][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 105.755072][ T6018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.55'. [ 105.814242][ T6021] syzkaller0: entered promiscuous mode [ 105.833659][ T6021] syzkaller0: entered allmulticast mode [ 105.961214][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.58'. [ 106.003853][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.3.58'. [ 106.064061][ T6021] geneve2: entered promiscuous mode [ 107.571283][ T6084] Cannot find add_set index 0 as target [ 107.819455][ T6090] xt_policy: output policy not valid in PREROUTING and INPUT [ 107.843689][ T6094] Bluetooth: MGMT ver 1.23 [ 107.960916][ T6097] hsr0: entered promiscuous mode [ 108.389072][ T6108] Cannot find del_set index 1 as target [ 108.653390][ T6123] __nla_validate_parse: 3 callbacks suppressed [ 108.653409][ T6123] netlink: 4 bytes leftover after parsing attributes in process `syz.4.89'. [ 108.717764][ T6123] bond0: (slave bond_slave_1): Releasing backup interface [ 108.942231][ T6131] xt_bpf: check failed: parse error [ 109.224160][ T6141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.97'. [ 109.256191][ T6140] netlink: 132 bytes leftover after parsing attributes in process `syz.1.96'. [ 109.266020][ T6141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.97'. [ 109.773649][ T6158] pim6reg: entered allmulticast mode [ 109.782021][ T6170] netlink: 16 bytes leftover after parsing attributes in process `syz.3.105'. [ 109.807088][ T6161] pim6reg: left allmulticast mode [ 109.829709][ T6158] netlink: 48 bytes leftover after parsing attributes in process `syz.4.101'. [ 109.993982][ T6177] netlink: 16 bytes leftover after parsing attributes in process `syz.3.106'. [ 110.043915][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.103'. [ 110.996180][ T6210] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 111.022155][ T6210] netlink: 224 bytes leftover after parsing attributes in process `syz.2.116'. [ 111.393751][ T6230] netlink: 'syz.2.119': attribute type 2 has an invalid length. [ 111.444120][ T5760] IPVS: starting estimator thread 0... [ 111.444789][ T6228] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 111.483248][ T6230] : entered promiscuous mode [ 111.531085][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 111.559271][ T6233] IPVS: using max 29 ests per chain, 69600 per kthread [ 111.752909][ T6237] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 112.253731][ T6255] xt_hashlimit: size too large, truncated to 1048576 [ 112.276713][ T6258] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 112.685356][ T6264] syzkaller1: entered promiscuous mode [ 112.709718][ T6264] syzkaller1: entered allmulticast mode [ 113.048403][ T6270] macvtap1: entered promiscuous mode [ 113.066454][ T6270] bridge0: entered promiscuous mode [ 113.902582][ T6294] tipc: Enabled bearer , priority 0 [ 113.931815][ T6294] syzkaller0: entered promiscuous mode [ 113.953395][ T6294] syzkaller0: entered allmulticast mode [ 114.131949][ T6294] tipc: Resetting bearer [ 114.179560][ T6293] tipc: Resetting bearer [ 114.233206][ T6293] tipc: Disabling bearer [ 114.528669][ T6318] __nla_validate_parse: 6 callbacks suppressed [ 114.528688][ T6318] netlink: 4 bytes leftover after parsing attributes in process `syz.4.144'. [ 114.934887][ T6331] FAULT_INJECTION: forcing a failure. [ 114.934887][ T6331] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 114.974643][ T6331] CPU: 0 UID: 0 PID: 6331 Comm: syz.1.149 Not tainted syzkaller #0 PREEMPT(full) [ 114.974673][ T6331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 114.974695][ T6331] Call Trace: [ 114.974704][ T6331] [ 114.974713][ T6331] dump_stack_lvl+0xe8/0x150 [ 114.974762][ T6331] should_fail_ex+0x40c/0x560 [ 114.974793][ T6331] _copy_from_user+0x2d/0xb0 [ 114.974826][ T6331] __sys_bpf+0x2e7/0xd90 [ 114.974862][ T6331] ? __pfx___sys_bpf+0x10/0x10 [ 114.974900][ T6331] ? __fget_files+0x2a/0x420 [ 114.974956][ T6331] ? ksys_write+0x242/0x270 [ 114.974991][ T6331] ? __pfx_ksys_write+0x10/0x10 [ 114.975029][ T6331] __x64_sys_bpf+0xba/0xd0 [ 114.975054][ T6331] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.975078][ T6331] do_syscall_64+0x174/0x580 [ 114.975108][ T6331] ? trace_irq_disable+0x3b/0x140 [ 114.975135][ T6331] ? clear_bhb_loop+0x40/0x90 [ 114.975161][ T6331] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.975181][ T6331] RIP: 0033:0x7f5a4659de59 [ 114.975207][ T6331] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.975225][ T6331] RSP: 002b:00007f5a474b3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.975250][ T6331] RAX: ffffffffffffffda RBX: 00007f5a46825fa0 RCX: 00007f5a4659de59 [ 114.975265][ T6331] RDX: 0000000000000094 RSI: 0000200000000000 RDI: 0000000000000005 [ 114.975279][ T6331] RBP: 00007f5a474b3090 R08: 0000000000000000 R09: 0000000000000000 [ 114.975292][ T6331] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.975304][ T6331] R13: 00007f5a46826038 R14: 00007f5a46825fa0 R15: 00007ffc0d00d508 [ 114.975337][ T6331] [ 114.976193][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.150'. [ 115.391012][ T6351] xt_hashlimit: overflow, try lower: 6/0 [ 115.416781][ T6351] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'. [ 115.443363][ T6354] netlink: 'syz.4.155': attribute type 1 has an invalid length. [ 115.757213][ T6354] 8021q: adding VLAN 0 to HW filter on device bond2 [ 115.816610][ T6350] bond2: (slave veth0_to_bond): making interface the new active one [ 115.856430][ T6350] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 115.895287][ T6359] bond2: entered promiscuous mode [ 115.907119][ T6359] veth0_to_bond: entered promiscuous mode [ 115.915146][ T6359] bond2: entered allmulticast mode [ 115.920580][ T6359] veth0_to_bond: entered allmulticast mode [ 116.035971][ T6363] macvlan2: entered promiscuous mode [ 116.060449][ T6363] macvlan2: entered allmulticast mode [ 116.079349][ T6380] netlink: 4968 bytes leftover after parsing attributes in process `syz.3.161'. [ 116.092327][ T6363] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 116.136799][ T6363] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of veth0_to_bond [ 116.422627][ T6391] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 116.446137][ T6391] syzkaller1: linktype set to 778 [ 116.706088][ T6410] netlink: 64 bytes leftover after parsing attributes in process `syz.3.168'. [ 116.786687][ T6412] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 116.895567][ T6414] veth3: entered allmulticast mode [ 117.063844][ T6418] xt_l2tp: missing protocol rule (udp|l2tpip) [ 119.295320][ T6388] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 119.506734][ T6425] netlink: 16 bytes leftover after parsing attributes in process `syz.3.175'. [ 119.509520][ T6427] netlink: 'syz.1.176': attribute type 1 has an invalid length. [ 119.630378][ T6427] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 120.895586][ T6499] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.945939][ T6499] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.825582][ T6523] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 122.416112][ T6549] netlink: 32 bytes leftover after parsing attributes in process `syz.1.212'. [ 122.452075][ T6549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.212'. [ 122.517273][ T6552] netlink: 60 bytes leftover after parsing attributes in process `syz.3.215'. [ 122.732144][ T6563] openvswitch: netlink: Missing key (keys=40, expected=100) [ 122.829237][ T6571] netlink: 16 bytes leftover after parsing attributes in process `syz.3.215'. [ 122.980706][ T6582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.221'. [ 123.343655][ T30] audit: type=1800 audit(1783468214.214:2): pid=6557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.215" name="memory.events" dev="tmpfs" ino=216 res=0 errno=0 [ 123.946572][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 124.015970][ T6584] veth0_to_team: entered promiscuous mode [ 124.179112][ T6604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 124.466314][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 124.476977][ T6626] netlink: 'syz.4.235': attribute type 3 has an invalid length. [ 124.486735][ T6626] netlink: 666 bytes leftover after parsing attributes in process `syz.4.235'. [ 124.639083][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.236'. [ 124.747011][ T6635] xfrm1: entered promiscuous mode [ 124.767515][ T6635] xfrm1: entered allmulticast mode [ 124.827300][ T6640] batman_adv: batadv0: Adding interface: vlan2 [ 124.837119][ T6640] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 124.867469][ T6640] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 125.137230][ T6662] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.423409][ T5760] IPVS: starting estimator thread 0... [ 125.429929][ T6677] IPVS: nq: FWM 3 0x00000003 - no destination available [ 125.538005][ T6680] IPVS: using max 29 ests per chain, 69600 per kthread [ 126.024593][ T6685] netlink: 'syz.2.248': attribute type 5 has an invalid length. [ 126.181218][ T6703] batman_adv: batadv0: Adding interface: vlan2 [ 126.203916][ T6703] batman_adv: batadv0: The MTU of interface vlan2 is too small (1450) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 126.240681][ T6703] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 126.294236][ T6710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.302746][ T6710] IPv6: NLM_F_CREATE should be set when creating new route [ 126.363794][ T6712] netlink: 'syz.2.254': attribute type 1 has an invalid length. [ 126.505810][ T6715] netlink: 'syz.4.256': attribute type 1 has an invalid length. [ 126.733662][ T6715] 8021q: adding VLAN 0 to HW filter on device bond3 [ 126.866688][ T6721] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 126.877619][ T6721] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 126.891605][ T6721] hsr0: left promiscuous mode [ 127.011442][ T6724] bond3: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 127.033329][ T6724] bond3: entered allmulticast mode [ 127.056460][ T5732] bridge0: entered promiscuous mode [ 127.290753][ T6742] netlink: 'syz.0.260': attribute type 22 has an invalid length. [ 127.336926][ T6742] netlink: 'syz.0.260': attribute type 22 has an invalid length. [ 127.340292][ T3296] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.403444][ T3296] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.425906][ T3296] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.448503][ T3296] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 127.570150][ T6754] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 127.870542][ T6765] __nla_validate_parse: 9 callbacks suppressed [ 127.870560][ T6765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.266'. [ 127.979363][ T6769] netlink: 68 bytes leftover after parsing attributes in process `syz.3.268'. [ 128.011282][ T6778] netlink: 28 bytes leftover after parsing attributes in process `syz.1.269'. [ 128.232990][ T6782] GUP no longer grows the stack in syz.3.271 (6782): 200000003000-20000000a000 (200000001000) [ 128.262388][ T6786] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 128.266081][ T6782] CPU: 0 UID: 0 PID: 6782 Comm: syz.3.271 Not tainted syzkaller #0 PREEMPT(full) [ 128.266167][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 128.266210][ T6782] Call Trace: [ 128.266239][ T6782] [ 128.266262][ T6782] dump_stack_lvl+0xe8/0x150 [ 128.266368][ T6782] __get_user_pages+0x238c/0x2720 [ 128.266467][ T6782] ? __gup_longterm_locked+0xc3b/0x15c0 [ 128.266600][ T6782] __gup_longterm_locked+0xd52/0x15c0 [ 128.266673][ T6782] ? lock_acquire+0x106/0x350 [ 128.266803][ T6782] gup_fast_fallback+0x1d8c/0x20e0 [ 128.266850][ T6782] ? lockdep_hardirqs_on+0x7a/0x110 [ 128.267054][ T6782] ? __pfx_gup_fast_fallback+0x10/0x10 [ 128.267128][ T6782] ? is_valid_gup_args+0x11f/0x200 [ 128.267193][ T6782] ? get_user_pages_fast+0x4d/0xb0 [ 128.267259][ T6782] __iov_iter_get_pages_alloc+0x378/0xa40 [ 128.267357][ T6782] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 128.267462][ T6782] iov_iter_get_pages2+0x5e/0xa0 [ 128.267550][ T6782] __se_sys_vmsplice+0x7b5/0x1660 [ 128.267696][ T6782] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 128.267792][ T6782] ? __pfx_futex_wake+0x10/0x10 [ 128.268045][ T6782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.268120][ T6782] do_syscall_64+0x174/0x580 [ 128.268194][ T6782] ? trace_irq_disable+0x3b/0x140 [ 128.268269][ T6782] ? clear_bhb_loop+0x40/0x90 [ 128.268364][ T6782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.268441][ T6782] RIP: 0033:0x7f1de0f9de59 [ 128.268497][ T6782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 128.268542][ T6782] RSP: 002b:00007f1de1e95028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 128.268609][ T6782] RAX: ffffffffffffffda RBX: 00007f1de1225fa0 RCX: 00007f1de0f9de59 [ 128.268651][ T6782] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000006 [ 128.268684][ T6782] RBP: 00007f1de1033e6f R08: 0000000000000000 R09: 0000000000000000 [ 128.268724][ T6782] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 128.268756][ T6782] R13: 00007f1de1226038 R14: 00007f1de1225fa0 R15: 00007ffd8c306178 [ 128.268851][ T6782] [ 128.613673][ T6794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.753500][ T6804] netlink: 'syz.1.273': attribute type 1 has an invalid length. [ 128.774774][ T6804] netlink: 756 bytes leftover after parsing attributes in process `syz.1.273'. [ 129.330714][ T6811] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 129.330714][ T6811] Please contact the netfilter-devel mailing list or update your nftables rules. [ 129.376501][ T6813] netlink: 4 bytes leftover after parsing attributes in process `syz.2.278'. [ 129.445091][ T6813] hsr_slave_1 (unregistering): left promiscuous mode [ 129.472028][ T6816] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 129.634923][ T6825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.281'. [ 129.680681][ T30] audit: type=1804 audit(1783468220.554:3): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.282" name="/newroot/50/memory.events" dev="tmpfs" ino=275 res=1 errno=0 [ 129.738250][ T30] audit: type=1800 audit(1783468220.574:4): pid=6828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.282" name="memory.events" dev="tmpfs" ino=275 res=0 errno=0 [ 130.152003][ T6843] netlink: 280 bytes leftover after parsing attributes in process `syz.3.286'. [ 130.341534][ T6858] netlink: 'syz.4.289': attribute type 13 has an invalid length. [ 130.434955][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 130.467240][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.4.289'. [ 130.509038][ T6861] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 131.395140][ T6892] bond4 (unregistering): Released all slaves [ 131.827468][ T6911] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.835559][ T6911] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.018538][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.041914][ T6911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.457064][ T6923] macsec1: entered promiscuous mode [ 132.489661][ T6923] batadv0: entered promiscuous mode [ 132.502381][ T6923] macsec1: entered allmulticast mode [ 132.518070][ T6923] batadv0: entered allmulticast mode [ 132.538573][ T6923] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 132.549906][ T6923] batadv0: left allmulticast mode [ 132.557980][ T6923] batadv0: left promiscuous mode [ 132.577514][ T6925] wg2: Caught tx_queue_len zero misconfig [ 132.587554][ T134] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.622948][ T6944] syzkaller1: entered promiscuous mode [ 132.637907][ T6944] syzkaller1: entered allmulticast mode [ 132.814765][ T134] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.854639][ T134] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.880581][ T134] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.932916][ T1317] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.719697][ T6981] veth1_macvtap: left promiscuous mode [ 133.754532][ T6981] macsec0: entered allmulticast mode [ 134.467924][ T7025] __nla_validate_parse: 3 callbacks suppressed [ 134.467945][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.329'. [ 134.732570][ T7037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.333'. [ 134.937308][ T7041] netlink: 28 bytes leftover after parsing attributes in process `syz.1.335'. [ 135.442049][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz.0.343'. [ 135.454941][ T7069] netlink: 24 bytes leftover after parsing attributes in process `syz.1.344'. [ 135.475806][ T7061] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 135.547157][ T7061] veth3: entered allmulticast mode [ 135.668952][ T7080] netlink: 332 bytes leftover after parsing attributes in process `syz.1.348'. [ 135.681240][ T7080] netlink: 'syz.1.348': attribute type 9 has an invalid length. [ 135.689324][ T7080] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 135.699915][ T7084] netlink: 'syz.4.346': attribute type 1 has an invalid length. [ 135.792390][ T7086] netlink: 'syz.4.346': attribute type 32 has an invalid length. [ 135.829044][ T7086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.346'. [ 135.912260][ T7088] xt_hashlimit: size too large, truncated to 1048576 [ 135.932744][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.350'. [ 135.996041][ T7086] bond4: option coupled_control: invalid value (100) [ 136.019408][ T7086] bond4 (unregistering): Released all slaves [ 136.354267][ T7111] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 136.416367][ T7113] netlink: 'syz.1.354': attribute type 4 has an invalid length. [ 136.629117][ T7121] ip6tnl1: entered allmulticast mode [ 136.801855][ T7126] bridge0: port 3(vlan3) entered blocking state [ 136.824967][ T7126] bridge0: port 3(vlan3) entered disabled state [ 136.860489][ T7126] vlan3: entered allmulticast mode [ 136.865830][ T7126] geneve0: entered allmulticast mode [ 136.875687][ T7126] vlan3: entered promiscuous mode [ 136.881191][ T7126] geneve0: entered promiscuous mode [ 136.925545][ T7126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.358'. [ 137.019108][ T7134] lo speed is unknown, defaulting to 1000 [ 137.037305][ T7134] lo speed is unknown, defaulting to 1000 [ 137.067250][ T7134] lo speed is unknown, defaulting to 1000 [ 137.108879][ T7134] smbdirect: ib_dev[syú2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 137.131794][ T7134] smbdirect: ib_dev[syú2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 137.176260][ T7134] smbdirect: ib_dev[syú2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 137.215736][ T7142] ±ÿ: renamed from lo (while UP) [ 137.282548][ T7134] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 137.325221][ T7134] infiniband syú2: RDMA CMA: cma_listen_on_dev, error -98 [ 137.519295][ T7134] ±ÿ speed is unknown, defaulting to 1000 [ 137.533731][ T7134] ±ÿ speed is unknown, defaulting to 1000 [ 137.543770][ T7134] ±ÿ speed is unknown, defaulting to 1000 [ 137.554189][ T7134] ±ÿ speed is unknown, defaulting to 1000 [ 137.562151][ T7134] ±ÿ speed is unknown, defaulting to 1000 [ 138.456641][ T7165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.466727][ T7165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.584489][ T7122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 139.800980][ T7180] __nla_validate_parse: 2 callbacks suppressed [ 139.801000][ T7180] netlink: 104 bytes leftover after parsing attributes in process `syz.1.373'. [ 139.854370][ T7184] netlink: 'syz.1.373': attribute type 1 has an invalid length. [ 139.878305][ T7185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.372'. [ 139.912200][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.4.372'. [ 139.983638][ T7184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.102967][ T7193] netlink: 36 bytes leftover after parsing attributes in process `syz.2.375'. [ 140.194226][ T7195] openvswitch: netlink: Message has 8 unknown bytes. [ 140.221278][ T7195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 140.581905][ T7214] netlink: 200 bytes leftover after parsing attributes in process `syz.4.382'. [ 140.611528][ T7214] netlink: 20 bytes leftover after parsing attributes in process `syz.4.382'. [ 140.954645][ T7232] pim6reg1: entered promiscuous mode [ 140.972884][ T7232] pim6reg1: entered allmulticast mode [ 141.321742][ T7242] tc action pedit 'at' offset 9 out of bounds [ 141.816974][ T7266] xt_l2tp: v2 tid > 0xffff: 37482740 [ 142.265066][ T7277] ±ÿ speed is unknown, defaulting to 1000 [ 142.471762][ T7294] gretap1: entered promiscuous mode [ 142.969389][ T7314] netlink: 556 bytes leftover after parsing attributes in process `syz.3.413'. [ 143.090771][ T7312] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 143.112165][ T7313] netlink: 'syz.2.412': attribute type 4 has an invalid length. [ 143.154657][ T7314] netlink: 'syz.3.413': attribute type 1 has an invalid length. [ 143.226582][ T7314] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.259493][ T7314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.286912][ T7314] bond1: (slave bond0): making interface the new active one [ 143.297041][ T7314] bond1: (slave bond0): Enslaving as an active interface with an up link [ 143.345908][ T7314] bond1: entered promiscuous mode [ 143.359212][ T7314] bond0: entered promiscuous mode [ 143.364528][ T7314] bond_slave_0: entered promiscuous mode [ 143.371316][ T7314] bond_slave_1: entered promiscuous mode [ 143.378565][ T7314] bond1: entered allmulticast mode [ 143.383940][ T7314] bond0: entered allmulticast mode [ 143.389748][ T7314] bond_slave_0: entered allmulticast mode [ 143.399856][ T7314] bond_slave_1: entered allmulticast mode [ 143.411460][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 143.512294][ T7334] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'. [ 143.526614][ T7334] netlink: 12 bytes leftover after parsing attributes in process `syz.0.419'. [ 143.559819][ T7331] bond1: entered promiscuous mode [ 143.565500][ T7331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.611635][ T7339] ipip0: entered promiscuous mode [ 143.623093][ T7344] xfrm0: Caught tx_queue_len zero misconfig [ 143.757004][ T7340] ±ÿ speed is unknown, defaulting to 1000 [ 144.595738][ T7375] netlink: 'syz.0.431': attribute type 2 has an invalid length. [ 144.837255][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.857242][ T7368] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.206342][ T7368] ip6tnl1: left allmulticast mode [ 145.213343][ T7368] ipip0: left promiscuous mode [ 145.240930][ T7394] __nla_validate_parse: 2 callbacks suppressed [ 145.240953][ T7394] netlink: 2 bytes leftover after parsing attributes in process `syz.4.437'. [ 145.265152][ T57] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.298455][ T57] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.335159][ T57] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.351398][ T57] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.497485][ T7408] netlink: 28 bytes leftover after parsing attributes in process `syz.4.439'. [ 145.533596][ T7408] netlink: 52 bytes leftover after parsing attributes in process `syz.4.439'. [ 145.554287][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 145.567442][ T7408] netlink: 52 bytes leftover after parsing attributes in process `syz.4.439'. [ 145.585608][ T7408] netlink: 52 bytes leftover after parsing attributes in process `syz.4.439'. [ 145.877181][ T7424] bridge0: port 4(veth1_to_bridge) entered blocking state [ 145.907146][ T7424] bridge0: port 4(veth1_to_bridge) entered disabled state [ 145.930959][ T7424] veth1_to_bridge: entered allmulticast mode [ 145.952899][ T7424] veth1_to_bridge: entered promiscuous mode [ 145.986405][ T7424] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 146.036089][ T7424] bridge0: port 4(veth1_to_bridge) entered blocking state [ 146.043609][ T7424] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 146.086538][ T7436] netlink: 40 bytes leftover after parsing attributes in process `syz.2.447'. [ 146.342341][ T7447] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 146.476693][ T7447] syzkaller1: linktype set to 805 [ 146.683312][ T7449] netlink: 'syz.1.451': attribute type 11 has an invalid length. [ 147.706392][ T7469] ip6gretap0: entered promiscuous mode [ 147.731410][ T7469] vlan4: entered promiscuous mode [ 148.593756][ T7489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.063336][ T7499] netlink: 28 bytes leftover after parsing attributes in process `syz.1.458'. [ 150.742492][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 150.817940][ T7537] netlink: 24 bytes leftover after parsing attributes in process `syz.1.469'. [ 151.148351][ T7542] netlink: 10 bytes leftover after parsing attributes in process `syz.2.470'. [ 151.958665][ T7554] netlink: 72 bytes leftover after parsing attributes in process `syz.0.472'. [ 152.114979][ T7554] netlink: 28 bytes leftover after parsing attributes in process `syz.0.472'. [ 153.915453][ T7593] FAULT_INJECTION: forcing a failure. [ 153.915453][ T7593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 154.015476][ T7593] CPU: 0 UID: 0 PID: 7593 Comm: syz.2.480 Not tainted syzkaller #0 PREEMPT(full) [ 154.015508][ T7593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 154.015522][ T7593] Call Trace: [ 154.015532][ T7593] [ 154.015542][ T7593] dump_stack_lvl+0xe8/0x150 [ 154.015585][ T7593] should_fail_ex+0x40c/0x560 [ 154.015620][ T7593] _copy_from_user+0x2d/0xb0 [ 154.015657][ T7593] __sys_bpf+0x2e7/0xd90 [ 154.015700][ T7593] ? __pfx___sys_bpf+0x10/0x10 [ 154.015745][ T7593] ? __fget_files+0x2a/0x420 [ 154.015797][ T7593] ? ksys_write+0x242/0x270 [ 154.015841][ T7593] ? __pfx_ksys_write+0x10/0x10 [ 154.015885][ T7593] __x64_sys_bpf+0xba/0xd0 [ 154.015914][ T7593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.015941][ T7593] do_syscall_64+0x174/0x580 [ 154.015974][ T7593] ? trace_irq_disable+0x3b/0x140 [ 154.016004][ T7593] ? clear_bhb_loop+0x40/0x90 [ 154.016034][ T7593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.016059][ T7593] RIP: 0033:0x7f857539de59 [ 154.016091][ T7593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.016112][ T7593] RSP: 002b:00007f8576182028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 154.016137][ T7593] RAX: ffffffffffffffda RBX: 00007f8575625fa0 RCX: 00007f857539de59 [ 154.016155][ T7593] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 154.016170][ T7593] RBP: 00007f8576182090 R08: 0000000000000000 R09: 0000000000000000 [ 154.016185][ T7593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.016199][ T7593] R13: 00007f8575626038 R14: 00007f8575625fa0 R15: 00007fff6cbfdb08 [ 154.016238][ T7593] [ 154.778398][ T7612] tipc: Can't bind to reserved service type 2 [ 154.931193][ T7617] netlink: 'syz.2.486': attribute type 1 has an invalid length. [ 154.991816][ T7617] netlink: 224 bytes leftover after parsing attributes in process `syz.2.486'. [ 155.366810][ T7626] netlink: 4 bytes leftover after parsing attributes in process `syz.4.487'. [ 155.755912][ T7633] netlink: 'syz.0.490': attribute type 1 has an invalid length. [ 155.837098][ T7633] netlink: 28 bytes leftover after parsing attributes in process `syz.0.490'. [ 157.830850][ T7677] netlink: 16 bytes leftover after parsing attributes in process `syz.2.501'. [ 158.543394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 158.785918][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.506'. [ 159.132609][ T7693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 159.428120][ T7705] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 161.099385][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 161.111795][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 161.125616][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 161.138138][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 161.151659][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 161.164174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 161.177712][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 161.190222][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 161.300692][ T7738] netlink: 48 bytes leftover after parsing attributes in process `syz.4.516'. [ 161.412917][ T7756] netlink: 'syz.3.520': attribute type 1 has an invalid length. [ 161.861979][ T7768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.523'. [ 162.035127][ T7756] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 162.047332][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.522'. [ 163.688050][ C0] net_ratelimit: 1007 callbacks suppressed [ 163.688073][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 163.706395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 163.718897][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 163.731375][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 163.743965][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 163.756423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 163.768923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 163.781422][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 163.793967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 163.806448][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.707991][ C0] net_ratelimit: 5155 callbacks suppressed [ 168.708016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.727929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.741929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.755777][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.769726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.789756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.803682][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.817584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.831513][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 168.845380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.718084][ C0] net_ratelimit: 2581 callbacks suppressed [ 173.718109][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.737657][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.751461][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.765048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.778712][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.799471][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.813113][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.826759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.840507][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 173.854107][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.738366][ C0] net_ratelimit: 2593 callbacks suppressed [ 178.738390][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.757984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.771632][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.785331][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.808236][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.821896][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.835522][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.849174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.862932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 178.876583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.747883][ C0] net_ratelimit: 2724 callbacks suppressed [ 183.747907][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.767677][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.781257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.794904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.808734][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.822337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.835859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.849496][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.863088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 183.876711][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.779379][ C0] net_ratelimit: 2604 callbacks suppressed [ 188.779404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.798964][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.812544][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.826211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.839776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.853337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.867206][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.880816][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.894333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 188.908015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.798523][ C0] net_ratelimit: 2599 callbacks suppressed [ 193.798549][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.818158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.831718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.845289][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.868829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.882480][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.896026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.909690][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.923303][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 193.936822][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.818958][ C0] net_ratelimit: 2597 callbacks suppressed [ 198.818983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.838608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.852231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.865825][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.879448][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.893054][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.906652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.920190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.933776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 198.947347][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.838610][ C0] net_ratelimit: 2599 callbacks suppressed [ 203.838638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.858088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.871671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.885302][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.908786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.922499][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.936077][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.949682][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.963237][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 203.976795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.859046][ C0] net_ratelimit: 2597 callbacks suppressed [ 208.859071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.878542][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.892041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.905631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.919228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.932743][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.946306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.959903][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.973451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 208.987049][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 213.879075][ C0] net_ratelimit: 2598 callbacks suppressed [ 213.879099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 213.898555][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 213.912240][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 213.925962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 213.949436][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 213.963044][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 213.976706][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 213.990256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 214.003877][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 214.017819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 218.897970][ C0] net_ratelimit: 2596 callbacks suppressed [ 218.897994][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 218.917458][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 218.931166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 218.945212][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 218.959055][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 218.972799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 218.986660][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 219.000417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 219.014142][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 219.028108][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 223.918857][ C0] net_ratelimit: 2592 callbacks suppressed [ 223.918881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 223.938504][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 223.952058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 223.965765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 223.979452][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 223.993091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 224.006650][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 224.020287][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 224.033874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 224.047508][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 228.948759][ C0] net_ratelimit: 2601 callbacks suppressed [ 228.948784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 228.968310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 228.981871][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 228.995492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 229.009138][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 229.022765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 229.036401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 229.050024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 229.063631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 229.077454][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 233.968006][ C0] net_ratelimit: 2598 callbacks suppressed [ 233.968031][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 233.987542][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 234.001150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 234.014859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 234.038233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 234.051932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 234.065564][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 234.079200][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 234.092867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 234.106496][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 238.987938][ C0] net_ratelimit: 3566 callbacks suppressed [ 238.987962][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 239.006378][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 239.019908][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 239.032335][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 239.045841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 239.058309][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 239.071934][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 239.084415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 239.098127][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 239.110634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.008275][ C0] net_ratelimit: 2950 callbacks suppressed [ 244.008300][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.026754][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.041604][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.054056][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.068747][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.081204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.095988][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.108460][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.123560][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 244.136057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.040468][ C0] net_ratelimit: 2604 callbacks suppressed [ 249.040492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.058850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.073573][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.086074][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.100647][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.113108][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.127851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.140320][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.155042][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 249.167531][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.068811][ C0] net_ratelimit: 2602 callbacks suppressed [ 254.068836][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.087225][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.101832][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.114398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.129373][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.141880][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.156737][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.169217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.183925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 254.196407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.099956][ C0] net_ratelimit: 2604 callbacks suppressed [ 259.099981][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.118338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.133093][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.145592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.160349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.172838][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.187563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.200048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.214635][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 259.227173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.128311][ C0] net_ratelimit: 2603 callbacks suppressed [ 264.128346][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.149343][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.161991][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.176983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.189527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.204511][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.217025][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.232095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.244629][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 264.259654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 267.147786][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 267.154807][ C0] rcu: 1-...!: (1 ticks this GP) idle=9cdc/1/0x4000000000000000 softirq=23956/23956 fqs=1 [ 267.165676][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7757/1:b..l [ 267.173638][ C0] rcu: (detected by 0, t=10502 jiffies, g=26169, q=243 ncpus=2) [ 267.181401][ C0] Sending NMI from CPU 0 to CPUs 1: [ 267.181454][ C1] NMI backtrace for cpu 1 [ 267.181479][ C1] CPU: 1 UID: 0 PID: 5635 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 267.181508][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 267.181523][ C1] RIP: 0010:match_held_lock+0x3/0xb0 [ 267.181559][ C1] Code: b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 53 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 5f 48 8b [ 267.181574][ C1] RSP: 0018:ffffc90000a07b40 EFLAGS: 00000097 [ 267.181590][ C1] RAX: 0000000000000001 RBX: ffff8880324768a0 RCX: 0000000000010102 [ 267.181603][ C1] RDX: ffff888032475d00 RSI: ffff8880b87281d8 RDI: ffff8880324768a0 [ 267.181617][ C1] RBP: 00000000ffffffff R08: ffff88807a42d317 R09: 0000000000000000 [ 267.181629][ C1] R10: ffff88807a42d308 R11: ffffed100f485a63 R12: 0000000000000046 [ 267.181641][ C1] R13: ffff888032475d00 R14: ffff8880b87281d8 R15: 0000000000000000 [ 267.181655][ C1] FS: 0000555575a64500(0000) GS:ffff888125060000(0000) knlGS:0000000000000000 [ 267.181670][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 267.181683][ C1] CR2: 00007ff40f827dac CR3: 000000005fde0000 CR4: 00000000003526f0 [ 267.181699][ C1] Call Trace: [ 267.181708][ C1] [ 267.181717][ C1] lock_is_held_type+0x89/0x150 [ 267.181745][ C1] __hrtimer_run_queues+0x20b/0xa10 [ 267.181773][ C1] hrtimer_interrupt+0x448/0x910 [ 267.181792][ C1] ? sched_clock+0x3f/0x60 [ 267.181825][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 267.181845][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 267.181869][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 267.181888][ C1] RIP: 0010:unwind_next_frame+0xa7/0x2550 [ 267.181907][ C1] Code: 5c 4c 89 6c 24 68 e8 08 10 35 00 4c 8d 2d 00 00 00 00 48 c7 c7 20 9c b5 8e 31 f6 31 d2 b9 02 00 00 00 45 31 c0 45 31 c9 41 55 a4 30 2b 00 48 83 c4 08 e8 4b 58 57 0a 85 c0 74 3a e8 e2 5a 34 [ 267.181921][ C1] RSP: 0018:ffffc90000a07e78 EFLAGS: 00000246 [ 267.181936][ C1] RAX: 0000000000000002 RBX: ffffffff8bcdc403 RCX: 0000000000000002 [ 267.181947][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb59c20 [ 267.181959][ C1] RBP: 1ffff92000140fec R08: 0000000000000000 R09: 0000000000000000 [ 267.181970][ C1] R10: ffffc90000a07f78 R11: ffffffff81b16930 R12: dffffc0000000000 [ 267.181983][ C1] R13: ffffffff8176f21f R14: ffffc90000a07f28 R15: 1ffff92000140fe5 [ 267.181998][ C1] ? unwind_next_frame+0x8f/0x2550 [ 267.182015][ C1] ? do_syscall_64+0x353/0x580 [ 267.182039][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 267.182067][ C1] ? do_syscall_64+0x353/0x580 [ 267.182091][ C1] ? unwind_next_frame+0x8f/0x2550 [ 267.182117][ C1] ? exit_to_user_mode_loop+0x104/0x730 [ 267.182140][ C1] ? unwind_next_frame+0x8f/0x2550 [ 267.182159][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 267.182181][ C1] arch_stack_walk+0x11b/0x150 [ 267.182201][ C1] ? do_syscall_64+0x353/0x580 [ 267.182227][ C1] stack_trace_save+0xa9/0x100 [ 267.182248][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 267.182272][ C1] ? __lock_acquire+0x683/0x2cf0 [ 267.182297][ C1] kasan_save_track+0x3e/0x80 [ 267.182320][ C1] ? kasan_save_track+0x3e/0x80 [ 267.182340][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 267.182363][ C1] ? kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 267.182383][ C1] ? skb_clone+0x212/0x3a0 [ 267.182409][ C1] ? br_flood+0x3c3/0x8d0 [ 267.182430][ C1] ? br_handle_frame_finish+0x1175/0x1990 [ 267.182454][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 267.182478][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 267.182505][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 267.182531][ C1] ? br_handle_frame+0x127f/0x1510 [ 267.182555][ C1] ? __netif_receive_skb_core+0x989/0x30b0 [ 267.182575][ C1] ? process_backlog+0x706/0x1860 [ 267.182598][ C1] ? __napi_poll+0xaa/0x330 [ 267.182616][ C1] ? net_rx_action+0x61d/0xf50 [ 267.182637][ C1] ? handle_softirqs+0x225/0x840 [ 267.182656][ C1] ? do_softirq+0x76/0xd0 [ 267.182674][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 267.182693][ C1] ? copy_fpstate_to_sigframe+0x51e/0xd20 [ 267.182716][ C1] ? get_sigframe+0x603/0x830 [ 267.182736][ C1] ? x64_setup_rt_frame+0x163/0xc50 [ 267.182758][ C1] ? arch_do_signal_or_restart+0x456/0x860 [ 267.182779][ C1] ? exit_to_user_mode_loop+0x104/0x730 [ 267.182802][ C1] ? do_syscall_64+0x353/0x580 [ 267.182843][ C1] __kasan_slab_alloc+0x6c/0x80 [ 267.182867][ C1] kmem_cache_alloc_noprof+0x2a0/0x5f0 [ 267.182888][ C1] ? kmem_cache_alloc_noprof+0x150/0x5f0 [ 267.182908][ C1] ? skb_clone+0x212/0x3a0 [ 267.182933][ C1] ? skb_clone+0x212/0x3a0 [ 267.182963][ C1] skb_clone+0x212/0x3a0 [ 267.182991][ C1] br_flood+0x3c3/0x8d0 [ 267.183019][ C1] br_handle_frame_finish+0x1175/0x1990 [ 267.183044][ C1] ? kasan_save_track+0x4f/0x80 [ 267.183072][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 267.183112][ C1] ? nf_hook_slow+0x176/0x220 [ 267.183132][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 267.183157][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 267.183186][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 267.183212][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 267.183237][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 267.183265][ C1] ? lock_acquire+0x106/0x350 [ 267.183291][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 267.183318][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 267.183347][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 267.183374][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 267.183400][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 267.183428][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 267.183455][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 267.183484][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 267.183507][ C1] br_handle_frame+0x127f/0x1510 [ 267.183536][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 267.183562][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 267.183586][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 267.183609][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 267.183636][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 267.183660][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 267.183687][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 267.183713][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 267.183733][ C1] ? ip6_rcv_finish+0x265/0x280 [ 267.183757][ C1] ? NF_HOOK+0x336/0x3c0 [ 267.183782][ C1] ? process_backlog+0x3c3/0x1860 [ 267.183803][ C1] ? lock_acquire+0x106/0x350 [ 267.183826][ C1] ? process_backlog+0x3c3/0x1860 [ 267.183852][ C1] ? process_backlog+0x3c3/0x1860 [ 267.183873][ C1] ? process_backlog+0x3c3/0x1860 [ 267.183896][ C1] process_backlog+0x706/0x1860 [ 267.183921][ C1] ? process_backlog+0x3c3/0x1860 [ 267.183949][ C1] __napi_poll+0xaa/0x330 [ 267.183970][ C1] net_rx_action+0x61d/0xf50 [ 267.183998][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 267.184019][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 267.184046][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 267.184070][ C1] ? try_to_wake_up+0x8c5/0x14d0 [ 267.184111][ C1] handle_softirqs+0x225/0x840 [ 267.184132][ C1] ? do_softirq+0x76/0xd0 [ 267.184153][ C1] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 267.184176][ C1] do_softirq+0x76/0xd0 [ 267.184195][ C1] [ 267.184201][ C1] [ 267.184207][ C1] __local_bh_enable_ip+0xf8/0x130 [ 267.184227][ C1] copy_fpstate_to_sigframe+0x51e/0xd20 [ 267.184252][ C1] ? copy_fpstate_to_sigframe+0x188/0xd20 [ 267.184278][ C1] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 267.184312][ C1] ? fpu__alloc_mathframe+0xac/0x130 [ 267.184336][ C1] get_sigframe+0x603/0x830 [ 267.184361][ C1] ? __pfx_get_sigframe+0x10/0x10 [ 267.184389][ C1] x64_setup_rt_frame+0x163/0xc50 [ 267.184414][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 267.184437][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 267.184458][ C1] ? get_signal+0x10dd/0x12c0 [ 267.184480][ C1] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 267.184508][ C1] arch_do_signal_or_restart+0x456/0x860 [ 267.184532][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 267.184558][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 267.184583][ C1] exit_to_user_mode_loop+0x104/0x730 [ 267.184607][ C1] ? rcu_is_watching+0x15/0xb0 [ 267.184635][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.184654][ C1] do_syscall_64+0x353/0x580 [ 267.184678][ C1] ? trace_irq_disable+0x3b/0x140 [ 267.184700][ C1] ? clear_bhb_loop+0x40/0x90 [ 267.184720][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.184738][ C1] RIP: 0033:0x7ff40f55e68e [ 267.184755][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 267.184770][ C1] RSP: 002b:00007fff5c99a638 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 267.184788][ C1] RAX: fffffffffffffffc RBX: 0000555575a64500 RCX: 00007ff40f55e68e [ 267.184801][ C1] RDX: 00007fff5c99a690 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.184812][ C1] RBP: 00007fff5c99a6fc R08: 0000000000000000 R09: 0000000000000000 [ 267.184823][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000072 [ 267.184834][ C1] R13: 0000000000000064 R14: 0000000000027892 R15: 00007fff5c99a750 [ 267.184854][ C1] [ 267.185439][ C0] task:syz.3.520 state:R running task stack:22616 pid:7757 tgid:7751 ppid:5627 task_flags:0x40054c flags:0x00080000 [ 268.100808][ C0] Call Trace: [ 268.104123][ C0] [ 268.107105][ C0] __schedule+0x17d9/0x56c0 [ 268.111700][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.116776][ C0] ? __pfx___schedule+0x10/0x10 [ 268.121692][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 268.127115][ C0] preempt_schedule_common+0x82/0xd0 [ 268.132458][ C0] preempt_schedule_thunk+0x16/0x40 [ 268.137716][ C0] _raw_spin_unlock+0x3f/0x50 [ 268.142454][ C0] __zap_vma_range+0x4084/0x4f10 [ 268.147521][ C0] ? __pfx___zap_vma_range+0x10/0x10 [ 268.152878][ C0] ? mas_find+0xab1/0xcf0 [ 268.157260][ C0] ? unmap_vmas+0x1b9/0x550 [ 268.161821][ C0] unmap_vmas+0x390/0x550 [ 268.166220][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 268.171329][ C0] exit_mmap+0x293/0x9f0 [ 268.175626][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 268.180483][ C0] ? __pfx_exit_aio+0x10/0x10 [ 268.185228][ C0] ? arch_uprobe_clear_state+0x1c8/0x240 [ 268.190927][ C0] ? uprobe_clear_state+0x2ac/0x3e0 [ 268.196186][ C0] __mmput+0x118/0x420 [ 268.200309][ C0] exit_mm+0x221/0x2d0 [ 268.204448][ C0] do_exit+0x6cd/0x2360 [ 268.208668][ C0] ? __lock_acquire+0x683/0x2cf0 [ 268.213664][ C0] ? __pfx_do_exit+0x10/0x10 [ 268.218310][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 268.223485][ C0] do_group_exit+0x22d/0x2f0 [ 268.228137][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 268.233394][ C0] get_signal+0x121b/0x12c0 [ 268.237976][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 268.243575][ C0] ? fput+0xa0/0xd0 [ 268.247441][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 268.253646][ C0] ? __x64_sys_sendmsg+0x25d/0x290 [ 268.258845][ C0] exit_to_user_mode_loop+0x104/0x730 [ 268.264270][ C0] ? rcu_is_watching+0x15/0xb0 [ 268.269102][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.275221][ C0] do_syscall_64+0x353/0x580 [ 268.279866][ C0] ? trace_irq_disable+0x3b/0x140 [ 268.284943][ C0] ? clear_bhb_loop+0x40/0x90 [ 268.289675][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.295620][ C0] RIP: 0033:0x7f1de0f9de59 [ 268.300078][ C0] RSP: 002b:00007f1de1e53028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 268.308538][ C0] RAX: 000000000000003c RBX: 00007f1de1226180 RCX: 00007f1de0f9de59 [ 268.316549][ C0] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 268.324562][ C0] RBP: 00007f1de1033e6f R08: 0000000000000000 R09: 0000000000000000 [ 268.332569][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.340583][ C0] R13: 00007f1de1226218 R14: 00007f1de1226180 R15: 00007ffd8c306178 [ 268.348616][ C0] [ 268.351677][ C0] rcu: rcu_preempt kthread starved for 8450 jiffies! g26169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 268.362917][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 268.372920][ C0] rcu: RCU grace-period kthread stack dump: [ 268.378853][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 268.392504][ C0] Call Trace: [ 268.395831][ C0] [ 268.398805][ C0] __schedule+0x17d9/0x56c0 [ 268.403362][ C0] ? __lock_acquire+0x683/0x2cf0 [ 268.408389][ C0] ? __pfx___schedule+0x10/0x10 [ 268.413306][ C0] ? schedule+0x90/0x2b0 [ 268.417606][ C0] schedule+0x164/0x2b0 [ 268.421815][ C0] schedule_timeout+0x152/0x2c0 [ 268.426715][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 268.432135][ C0] ? __pfx_process_timeout+0x10/0x10 [ 268.437471][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 268.443330][ C0] ? prepare_to_swait_event+0x322/0x350 [ 268.448933][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 268.453849][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 268.459798][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 268.465151][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 268.470418][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 268.476276][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 268.480916][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 268.486156][ C0] ? __kthread_parkme+0x71/0x1f0 [ 268.491136][ C0] ? __kthread_parkme+0x196/0x1f0 [ 268.496205][ C0] kthread+0x388/0x470 [ 268.500339][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 268.505573][ C0] ? __pfx_kthread+0x10/0x10 [ 268.510203][ C0] ret_from_fork+0x514/0xb70 [ 268.514844][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 268.519999][ C0] ? __switch_to+0xc89/0x1420 [ 268.524716][ C0] ? __pfx_kthread+0x10/0x10 [ 268.529351][ C0] ret_from_fork_asm+0x1a/0x30 [ 268.534169][ C0] [ 268.537223][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 268.543577][ C0] CPU: 0 UID: 0 PID: 11 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 268.552797][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 268.562884][ C0] Workqueue: events drain_vmap_area_work [ 268.568568][ C0] RIP: 0010:lock_acquire+0x221/0x350 [ 268.573890][ C0] Code: ff ff ff e8 41 20 2c 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 2b db c9 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 10 21 2f 0a cc 48 8d 3d b8 77 b8 [ 268.593540][ C0] RSP: 0018:ffffc90000006a80 EFLAGS: 00000282 [ 268.599663][ C0] RAX: 89e85f3476e98200 RBX: 0000000000000000 RCX: 0000000000000102 [ 268.607672][ C0] RDX: 000000007f45ee1d RSI: ffffffff8e4afadf RDI: ffffffff8c4bd280 [ 268.615675][ C0] RBP: ffffffff8176f21f R08: ffffffff8176f21f R09: 0000000000000000 [ 268.623683][ C0] R10: 0000000000000000 R11: ffffffff8eb59c20 R12: 0000000000000002 [ 268.631959][ C0] R13: ffffffff8eb59c20 R14: 0000000000000000 R15: 0000000000000246 [ 268.639996][ C0] FS: 0000000000000000(0000) GS:ffff888124f60000(0000) knlGS:0000000000000000 [ 268.648974][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 268.655595][ C0] CR2: 00007f6e3a0c3000 CR3: 00000000213fc000 CR4: 00000000003526f0 [ 268.663607][ C0] Call Trace: [ 268.666923][ C0] [ 268.669879][ C0] ? net_rx_action+0x61d/0xf50 [ 268.674692][ C0] ? unwind_next_frame+0x8f/0x2550 [ 268.679840][ C0] unwind_next_frame+0xac/0x2550 [ 268.684839][ C0] ? unwind_next_frame+0x8f/0x2550 [ 268.689990][ C0] ? __napi_poll+0xaa/0x330 [ 268.694563][ C0] ? unwind_next_frame+0x8f/0x2550 [ 268.699709][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 268.705991][ C0] arch_stack_walk+0x11b/0x150 [ 268.710801][ C0] ? net_rx_action+0x61d/0xf50 [ 268.715621][ C0] stack_trace_save+0xa9/0x100 [ 268.720424][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 268.725845][ C0] ? __lock_acquire+0x683/0x2cf0 [ 268.730833][ C0] kasan_save_track+0x3e/0x80 [ 268.735546][ C0] ? kasan_save_track+0x3e/0x80 [ 268.740461][ C0] ? kasan_save_free_info+0x40/0x50 [ 268.745696][ C0] ? __kasan_slab_free+0x5c/0x80 [ 268.750679][ C0] ? kmem_cache_free+0x182/0x650 [ 268.755653][ C0] ? ip6_mc_input+0x909/0xbc0 [ 268.760375][ C0] ? ip_sabotage_in+0x1e1/0x270 [ 268.765269][ C0] ? nf_hook_slow+0xc5/0x220 [ 268.769893][ C0] ? NF_HOOK+0x21f/0x3c0 [ 268.774175][ C0] ? netif_receive_skb+0x278/0xbf0 [ 268.779324][ C0] ? NF_HOOK+0xa4/0x3a0 [ 268.783518][ C0] ? br_handle_frame_finish+0x1192/0x1990 [ 268.789279][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 268.794436][ C0] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 268.800896][ C0] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 268.806480][ C0] ? br_handle_frame+0x127f/0x1510 [ 268.811627][ C0] ? __netif_receive_skb_core+0x989/0x30b0 [ 268.817464][ C0] ? process_backlog+0x706/0x1860 [ 268.822525][ C0] ? __napi_poll+0xaa/0x330 [ 268.827060][ C0] ? net_rx_action+0x61d/0xf50 [ 268.831899][ C0] ? ip6_mc_input+0x909/0xbc0 [ 268.836618][ C0] kasan_save_free_info+0x40/0x50 [ 268.841680][ C0] __kasan_slab_free+0x5c/0x80 [ 268.846483][ C0] kmem_cache_free+0x182/0x650 [ 268.851291][ C0] ip6_mc_input+0x909/0xbc0 [ 268.855846][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 268.860942][ C0] ? ip6_rcv_finish+0x265/0x280 [ 268.865843][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 268.871083][ C0] ip_sabotage_in+0x1e1/0x270 [ 268.875801][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 268.881040][ C0] nf_hook_slow+0xc5/0x220 [ 268.885493][ C0] NF_HOOK+0x21f/0x3c0 [ 268.889603][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 268.894837][ C0] ? NF_HOOK+0x9e/0x3c0 [ 268.899031][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 268.903661][ C0] ? ip6_rcv_core+0xa1/0x1870 [ 268.908390][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 268.913632][ C0] ? netif_receive_skb+0x102/0xbf0 [ 268.918779][ C0] netif_receive_skb+0x278/0xbf0 [ 268.923764][ C0] ? NF_HOOK+0xfa/0x3a0 [ 268.927961][ C0] ? lock_acquire+0x106/0x350 [ 268.932683][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 268.938180][ C0] ? br_netif_receive_skb+0x126/0x190 [ 268.943598][ C0] NF_HOOK+0xa4/0x3a0 [ 268.947627][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 268.953388][ C0] ? NF_HOOK+0xfa/0x3a0 [ 268.957599][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 268.962292][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 268.968059][ C0] ? br_pass_frame_up+0x275/0x420 [ 268.973130][ C0] br_handle_frame_finish+0x1192/0x1990 [ 268.978718][ C0] ? kasan_save_track+0x4f/0x80 [ 268.983615][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 268.989566][ C0] ? nf_hook_slow+0x176/0x220 [ 268.994284][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 269.000216][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 269.005209][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 269.010712][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 269.016652][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 269.021895][ C0] ? lock_acquire+0x106/0x350 [ 269.026626][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 269.032647][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 269.038596][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 269.044010][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 269.049600][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 269.055541][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 269.062087][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 269.067339][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 269.072839][ C0] br_handle_frame+0x127f/0x1510 [ 269.077830][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 269.083159][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 269.089092][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 269.094413][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 269.099665][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 269.105010][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 269.110783][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 269.115848][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 269.121948][ C0] ? ip6_rcv_finish+0x265/0x280 [ 269.126857][ C0] ? NF_HOOK+0x336/0x3c0 [ 269.131146][ C0] ? process_backlog+0x3c3/0x1860 [ 269.136207][ C0] ? lock_acquire+0x106/0x350 [ 269.140923][ C0] ? process_backlog+0x3c3/0x1860 [ 269.146000][ C0] ? process_backlog+0x3c3/0x1860 [ 269.151059][ C0] ? process_backlog+0x3c3/0x1860 [ 269.156125][ C0] process_backlog+0x706/0x1860 [ 269.161019][ C0] ? process_backlog+0x3c3/0x1860 [ 269.166098][ C0] __napi_poll+0xaa/0x330 [ 269.170474][ C0] net_rx_action+0x61d/0xf50 [ 269.175307][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 269.180484][ C0] handle_softirqs+0x225/0x840 [ 269.185292][ C0] ? __irq_exit_rcu+0xca/0x220 [ 269.190098][ C0] __irq_exit_rcu+0xca/0x220 [ 269.194721][ C0] irq_exit_rcu+0x9/0x30 [ 269.198996][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 269.204672][ C0] [ 269.207637][ C0] [ 269.210593][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 269.216609][ C0] RIP: 0010:smp_call_function_many_cond+0x10b0/0x14b0 [ 269.223414][ C0] Code: c0 75 73 41 8b 1e 89 de 83 e6 01 31 ff e8 d8 1e 0c 00 83 e3 01 48 bb 00 00 00 00 00 fc ff df 75 07 e8 84 1a 0c 00 eb 37 f3 90 <41> 0f b6 04 1c 84 c0 75 10 41 f7 06 01 00 00 00 74 1e e8 69 1a 0c [ 269.243049][ C0] RSP: 0018:ffffc900001077a0 EFLAGS: 00000293 [ 269.249163][ C0] RAX: ffffffff81ba5757 RBX: dffffc0000000000 RCX: ffff88801dea1f00 [ 269.257182][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 269.265196][ C0] RBP: ffffc900001078e0 R08: ffffffff905768f7 R09: 1ffffffff20aed1e [ 269.273215][ C0] R10: dffffc0000000000 R11: fffffbfff20aed1f R12: 1ffff110170e81d1 [ 269.281223][ C0] R13: ffff8880b863c448 R14: ffff8880b8740e88 R15: 0000000000000001 [ 269.289276][ C0] ? smp_call_function_many_cond+0x10c7/0x14b0 [ 269.295490][ C0] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 269.300932][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 269.307310][ C0] ? __pfx_do_flush_tlb_all+0x10/0x10 [ 269.312719][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 269.317913][ C0] flush_tlb_kernel_range+0x44f/0x460 [ 269.323330][ C0] purge_vmap_node+0x39c/0x960 [ 269.328152][ C0] ? __pfx_purge_vmap_node+0x10/0x10 [ 269.333481][ C0] ? on_each_cpu_cond_mask+0x62/0x80 [ 269.338833][ C0] ? flush_tlb_kernel_range+0x350/0x460 [ 269.344423][ C0] __purge_vmap_area_lazy+0x783/0xb40 [ 269.349841][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 269.355595][ C0] drain_vmap_area_work+0x27/0x40 [ 269.360659][ C0] process_scheduled_works+0xa8e/0x14e0 [ 269.366268][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 269.372293][ C0] ? assign_work+0x3cf/0x5d0 [ 269.376920][ C0] worker_thread+0xa47/0xfb0 [ 269.381558][ C0] ? __kthread_parkme+0x71/0x1f0 [ 269.386545][ C0] kthread+0x388/0x470 [ 269.390666][ C0] ? __pfx_worker_thread+0x10/0x10 [ 269.395811][ C0] ? __pfx_kthread+0x10/0x10 [ 269.400444][ C0] ret_from_fork+0x514/0xb70 [ 269.405088][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 269.410338][ C0] ? __switch_to+0xc89/0x1420 [ 269.415054][ C0] ? __pfx_kthread+0x10/0x10 [ 269.419690][ C0] ret_from_fork_asm+0x1a/0x30 [ 269.424516][ C0] [ 269.469037][ C0] net_ratelimit: 1553 callbacks suppressed [ 269.469065][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 269.487621][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 269.502427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 269.515003][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 269.529667][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 269.548330][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 269.563153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 269.575766][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 269.590564][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 269.603023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.480107][ C0] net_ratelimit: 2594 callbacks suppressed [ 274.480130][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.498680][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.513598][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.526067][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.549982][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.562652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.577356][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.589900][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.604675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 274.617279][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:1)