last executing test programs: 12m11.032039376s ago: executing program 0 (id=4699): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000007"], 0x50) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000080)=',)^}$\'\x00', 0x121001, &(0x7f00000000c0)={@align=0x3, {0x2, 0xb, 0x4, 0x8000000000000000}}, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x81}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1b, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000faffffffffff17150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000026000000850000000700000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000640)="d9b9547ed3c0021a6fd6a67ab922", 0x0, 0x20000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) 12m10.882910099s ago: executing program 0 (id=4701): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="cc0000002100010000000000fefffffffe8000000000000000000000000000aa00000000000000000000000000000000fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc020000000000000000000000000000ff010000000000000000000000000001ff020000000000000000000000000001fff1ffff0000000000000000000000006c010000000000000a"], 0xcc}, 0x1, 0x2000000, 0x0, 0x800}, 0x0) 12m10.757726285s ago: executing program 0 (id=4703): sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x401c040) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe1b) r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r1 = socket$alg(0x26, 0x5, 0x0) accept4(r1, 0x0, 0x0, 0x800) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@delsa={0x34, 0x12, 0x1, 0x0, 0x25dfdbfe, {@in=@dev}, [@mark={0xc, 0x15, {0x0, 0xff}}]}, 0x34}}, 0x4840) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x3ff, 0xd365, 0x1, 0x40000, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x50) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000b000000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa10000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007008500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 12m10.276044015s ago: executing program 0 (id=4706): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007200000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x0, 0x36, 0x0, &(0x7f0000000000)="c1188e99001d4d296204c0a586ddebda09f11201f58558c1a5c5391567688a0329f921425892a71e28b312b4829d13c2382d51131a29", 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003e40)=@newtaction={0x78, 0x30, 0xffff, 0x0, 0x0, {}, [{0x64, 0x1, [@m_ife={0x60, 0x1, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x9, 0x4, 0x5, 0x1}, 0x1}}, @TCA_IFE_SMAC={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) 12m10.157989126s ago: executing program 0 (id=4708): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f0000000180)={0x2, 0x2000}, 0x8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x5}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x0, 0x8, 0x7}, {0x0, 0x0, 0x400000000}, 0x2, 0x0, 0x1, 0x0, 0x107e3242293c71d6, 0x3}, {{@in6=@empty, 0x8, 0x33}, 0x0, @in=@loopback, 0x3502, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe, 0xc00}}, 0xe8) (async, rerun: 32) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x8, &(0x7f00000010c0)=ANY=[@ANYBLOB="180200000a0000010000000000000000180200000a0000020000000000000000bfa2000000000000b70300004000000085000000450000009500000000800000"], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0xcb42, @dev={0xfe, 0x80, '\x00', 0x14}, 0xbf}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=@delchain={0x24, 0x65, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x1, 0x64181b046e585f2f}, {0x48cd5521565b8d04, 0xfff1}, {0xffff, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x400c0c0}, 0x20000000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010003"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket(0x10, 0x803, 0x2) (async) r8 = socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="f3d59bde3c0000001000"/24, @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32=r10, @ANYBLOB="140012800b000100627269646765000004000280"], 0x3c}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) (async) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r6, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 12m9.709201784s ago: executing program 0 (id=4711): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpid() sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x8841) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x9, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x4, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0x9, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="590000001100c15a28596fcd6c3def823a01002abd7000fddbdf2513000000", @ANYRES32=r3, @ANYBLOB="20100000000004001400030076657468315f766c616e00000000000004001a80"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800599c6d0eab070004000523"], 0xfe33) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x6, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r6, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000040), 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x7, 0x0, 0x2, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1ffffffc, 0x0, 0x0, 0x1}, 0xc, 0x1, 0x0, 0x0, "1193ffcb137ca0c14f3351ceb2609e4c736bfcf0641e00f6db10689ca3f32f962d6cbba8ada55c6aaa5bce2f1b67d9eb5d3cb03da3bc718c5d4d2e201520b72b"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 11m54.526276694s ago: executing program 32 (id=4711): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpid() sendmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x1}], 0x1, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18}, 0x8841) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_1\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x333, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x5, 0x2}, {0x9, 0xe}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xd, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001980)=@newqdisc={0x43c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x80000001, 0x8001, 0x3, 0x0, 0x6, 0x4, 0x8, 0x9, 0x401, 0xfffffffc, 0x6, 0xfffffff7, 0x3, 0x3, 0x4, 0x3, 0x100, 0x8, 0xff, 0x80, 0x9, 0x8001, 0x80, 0x7, 0x101, 0xa46, 0xeb, 0x7ff, 0x7, 0x10001, 0x9, 0x6, 0x9c01, 0x7, 0x4, 0x0, 0xfaa, 0xc88, 0x6, 0x8d1, 0x1ff, 0x2, 0x1, 0x80000000, 0x6a, 0xffffffff, 0x7, 0x4, 0x3, 0x6, 0x0, 0x100, 0x4, 0x9, 0x8, 0x144, 0xd, 0x14574, 0x0, 0x4, 0x7, 0x1, 0x314, 0x7, 0xe, 0xfccf, 0x2, 0x45, 0x7, 0x4, 0x2, 0x8, 0x5, 0x3, 0x1, 0x4, 0x1, 0x40, 0xb, 0x3ff, 0xfffffff9, 0x6, 0x9, 0x8, 0x80, 0x59b, 0x1, 0x2, 0x6, 0xc, 0x0, 0xfffffffa, 0x4, 0xba65, 0x4, 0x0, 0x70e, 0x9, 0xd, 0x1, 0x0, 0x7fffffff, 0x7fff, 0xfff, 0x4, 0x4, 0xac1, 0x5, 0x4, 0x9, 0x5, 0x9, 0x7, 0x5371, 0x709d7f5b, 0xa09a, 0xfffffffe, 0x4b8a, 0x9, 0x7, 0x4, 0x3, 0x8a9, 0x6, 0x4, 0x10001, 0xc0000000, 0x4, 0x7, 0xf, 0x86, 0x7, 0x3, 0x9, 0x9, 0x663, 0xfffffffd, 0xe2, 0x0, 0x4, 0x4, 0x6, 0xfc, 0x1, 0x9, 0x8, 0x7, 0x8001, 0x0, 0x4, 0x5, 0xfd, 0x90, 0xffff, 0x5, 0xfffeffff, 0x7, 0x9, 0x8e0e, 0x1, 0xe, 0x8, 0xd, 0x2, 0x5, 0x0, 0xb, 0x6, 0x4, 0x9, 0x9, 0x0, 0xc, 0xaa8, 0xcb1a, 0x7, 0xffffffff, 0x9, 0x2, 0x81, 0x9, 0x280, 0x0, 0x8, 0x9, 0x8, 0xfffffff9, 0x800, 0x18e, 0x5, 0x5, 0x1, 0x32, 0x6, 0x4f, 0x8, 0xfffffff9, 0x1, 0x0, 0x6, 0x1, 0x7, 0x8001, 0x7, 0x53f, 0x4, 0xd13b, 0xb, 0x6, 0x9, 0x100, 0x7, 0x5, 0x6, 0x1, 0x10001, 0x6, 0x4, 0x7, 0x82, 0xf0, 0x4, 0x3, 0x6, 0x4, 0x5, 0x400, 0x0, 0x0, 0x1000, 0x6, 0xc, 0x2, 0x1, 0x3, 0xc, 0x8, 0x80000001, 0x8, 0xa4eb, 0x7, 0x4, 0xffffffff, 0x1ff, 0x3ff, 0x3, 0x80, 0x3, 0x8001, 0x1, 0x8, 0xe1, 0xc, 0x5, 0x3, 0x95]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x40098}, 0x4004004) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="590000001100c15a28596fcd6c3def823a01002abd7000fddbdf2513000000", @ANYRES32=r3, @ANYBLOB="20100000000004001400030076657468315f766c616e00000000000004001a80"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r6 = socket(0x1e, 0x4, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[@ANYBLOB="1b0000001800599c6d0eab070004000523"], 0xfe33) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r8 = socket$kcm(0x10, 0x2, 0x4) r9 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x6, 0x25dfdc01, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x2400c000) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r6, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000340)=""/82, 0x52}], 0x1}, 0x81}], 0x1, 0x2000, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) connect$inet(r6, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmsg$can_bcm(r6, &(0x7f0000000480)={&(0x7f0000000040), 0x10, &(0x7f0000000400)={&(0x7f0000000380)={0x7, 0x0, 0x2, {}, {}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x1ffffffc, 0x0, 0x0, 0x1}, 0xc, 0x1, 0x0, 0x0, "1193ffcb137ca0c14f3351ceb2609e4c736bfcf0641e00f6db10689ca3f32f962d6cbba8ada55c6aaa5bce2f1b67d9eb5d3cb03da3bc718c5d4d2e201520b72b"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) 1m53.580521905s ago: executing program 1 (id=7385): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x1ff, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x10, &(0x7f0000000000)=0x1, 0x4) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002cbd700000000000010000001c000180060001000200000008000300ac29141c0800060003f3ff00"], 0x30}}, 0x0) getsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000080), 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000002400010026bd7000fcdadf2504"], 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) listen(r9, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) 1m53.008840945s ago: executing program 4 (id=7388): sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x14, 0x0, 0x701, 0x2, 0x0, {0x2e}}, 0x14}, 0x1, 0x0, 0x0, 0x4c018}, 0x4004004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000d042abd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="01000000000000002400128009000100626f6e640000000014000280050001000600000005001b"], 0x44}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@ipv4_newrule={0x38, 0x20, 0x1, 0xffffffff, 0x0, {0x2, 0x0, 0x20}, [@FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x5}, @FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x40008c4}, 0x8000) write$nci(r0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="400104"], 0x14) r5 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r5], 0x14) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000050}, 0x20000000) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m52.534427319s ago: executing program 4 (id=7393): r0 = socket(0xa, 0x5, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x5, 0x20, 0x3f, 0x3}, &(0x7f0000000080)=0x18) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r3) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b80), r6) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000001bc0)={0x14, r7, 0x50be6fea6f3bdfbb, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r5, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x24, r7, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x2}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) getsockname(r3, &(0x7f0000000200)=@phonet, &(0x7f0000000100)=0x80) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000000)={r2, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x0, 0x800, 0x4, 0x7fffffff, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r4, 0x84, 0x4, &(0x7f00000000c0)=0xffffff7d, 0x4) sendto$inet6(r4, &(0x7f00000003c0)="5a442428fd30f05f000e5e522650e0394d41fba6aa882837", 0x18, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x31, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r9 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) splice(r1, 0x0, r9, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000001640)={&(0x7f0000000080)=@in={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000040)='(', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000840000000000000000800f"], 0x18, 0x4008000}, 0x28008841) 1m52.316960427s ago: executing program 1 (id=7395): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0x42, 0x4, 0x278, 0xffffffff, 0x98, 0x11c0, 0x11c0, 0xffffffff, 0xffffffff, 0x1258, 0x1258, 0x1258, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x0, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@empty, @remote, 0xff, 0x0, 'veth0_to_batadv\x00', 'team_slave_1\x00'}, 0x287, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x3, {0x8}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2, 0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x38, r1, 0x1, 0x60bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc}]}, {0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x808}, 0x4040400) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000000d000000cc0002000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0x4000) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="300000001800356a00000000000000000a800000ff03000600000000140001"], 0x30}}, 0x0) 1m51.795379816s ago: executing program 3 (id=7397): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = socket(0x10, 0x2, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x55, 0x1, 0x0, 0x0, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x80004}, 0x40c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b705000008000000850000005e00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1m51.661528252s ago: executing program 1 (id=7398): syz_emit_ethernet(0x8e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd604dd31800580600fc010000000000000000000000000002fe8000000000000000000000000000aa08004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="6002000cf5781edc20afca7e3778669d7821c47113126171cffc51f705645318039c4106a9c05141a0dc84c08119fbf0c1c852cc0ce8dbc90e0000000100000000fffffffa13129829e5b8831b66a041f72541c6efc9102203c60000000000"], 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003340)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0xa, @remote, 0x1800000}, 0x1c, 0x0, 0x0, 0x0, 0x1f0}}], 0x1, 0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r4, 0x2, 0x20000000, 0x4}, &(0x7f0000000080)=0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x94, r1, 0x400, 0x70bd27, 0x25dfdbfc}, 0x94}, 0x1, 0x0, 0x0, 0x4001}, 0x40830) 1m51.660273758s ago: executing program 5 (id=7399): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) getpeername$packet(r0, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@bridge_delneigh={0x50, 0x1d, 0x300, 0x70bd2b, 0x25dfdbfc, {0xa, 0x0, 0x0, r2, 0x1c, 0xc0, 0x6}, [@NDA_MASTER={0x8, 0x9, 0xfffffea5}, @NDA_VNI={0x8, 0x7, 0x2b0ce1c0}, @NDA_IFINDEX={0x8, 0x8, r3}, @NDA_SRC_VNI={0x8, 0xb, 0x10000}, @NDA_IFINDEX={0x8, 0x8, r4}, @NDA_DST_MAC={0xa, 0x1, @random="fc2050e02ba5"}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m51.42120677s ago: executing program 5 (id=7401): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@newtclass={0x24, 0x28, 0x400, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x9, 0x2}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x80000) r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000002300)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x8, &(0x7f0000000180)=0xffff7b6e, 0x4) setsockopt$inet6_int(r3, 0x29, 0x2, &(0x7f00000001c0)=0x7, 0x4) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x80) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f0000000080)=""/25, &(0x7f0000000000)=0x19) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000580)={0x6}, 0x8) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r6, 0x6, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000001540)={r6, 0x8}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x38091}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IFLAGS={0x6, 0x2, 0x21}]}}}]}, 0x38}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r7, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r8, 0x0, 0x1, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000003280), r8) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0xc, 0x3, 0x3, 0x1, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r9}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r9, 0x0, &(0x7f0000000140)=""/75}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x8}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x645c, 0x4, 0x40, 0x0, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x90}, 0x40081) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005000100040000000600180000100000060019"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000ac0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000005c0)=@delchain={0x488, 0x65, 0x800, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x8, 0xffff}, {0x4, 0xfff3}, {0x6, 0x7}}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0xd8}}, @filter_kind_options=@f_cgroup={{0xb}, {0x438, 0x2, [@TCA_CGROUP_POLICE={0x434, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8000000000000001}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe34, 0xf, 0x0, 0x5, 0x22, 0x2, 0x2, 0x2, 0xfffffffd, 0x1, 0x3, 0x0, 0x9, 0x5, 0x5, 0x51, 0xfffffff7, 0x100, 0x5, 0x1ff, 0x100, 0x1, 0x0, 0x66fc, 0x7, 0x81, 0x5cb00000, 0x27f, 0x80, 0x42628be0, 0x4, 0x3, 0x3ff, 0x1, 0xf, 0xfffff001, 0x6, 0x4, 0xfff, 0xb836, 0x0, 0x1, 0xff, 0x5, 0x7b, 0x6, 0xb4e7, 0x3, 0x274a, 0x9, 0x9, 0xcb0, 0x80000000, 0xa3, 0x0, 0xf8, 0x60c, 0xffff7fff, 0x5, 0x3, 0x7, 0xffffffc0, 0x7, 0x8c, 0x8001, 0x7, 0x3, 0x6, 0x3, 0x2, 0xff, 0x5, 0x9f, 0x6, 0x6, 0x8001, 0x0, 0xc, 0x9e, 0x9, 0xd, 0x9, 0x0, 0x6e37a042, 0x81, 0x7f, 0x10, 0x7, 0x4, 0x8, 0x9, 0x3, 0x3, 0x8, 0x9, 0xf, 0x7, 0xfffffffd, 0x0, 0x0, 0x0, 0x5, 0x5, 0x800, 0xb, 0x1, 0x3, 0xeb, 0x1000, 0x9, 0x6f, 0x1, 0xa, 0x1, 0x9, 0x8, 0x8001, 0xa85, 0x7fff, 0x40, 0x81, 0x80000001, 0xcb, 0x200, 0x1e3, 0x9, 0x2b6d, 0x0, 0x7, 0x0, 0xce5, 0xb, 0x8, 0x5, 0x6, 0xbbb, 0x4, 0x2, 0x800, 0x8, 0x6, 0x7ff, 0x0, 0x1cca, 0x6, 0x1, 0x3, 0x7fffffff, 0x9, 0x6, 0x2, 0x9, 0x8, 0x173f, 0x5, 0x4, 0x3, 0xbee, 0x10, 0x5, 0x480, 0x6, 0x3, 0x4, 0x7, 0x0, 0x6, 0x600a5fe4, 0x6, 0x0, 0x4, 0x10001, 0x6e, 0xd6d1, 0xd, 0x4, 0x8, 0x4, 0x4, 0x8, 0x1, 0x3, 0x3, 0x7, 0x6, 0x9, 0x3, 0x8000, 0x2, 0x8ed, 0x3ff, 0x4, 0x7, 0xa1f, 0x4, 0x8, 0x4, 0x3, 0x9, 0x5, 0x10, 0x551b, 0x1, 0x1ff, 0x9, 0x1, 0x10001, 0x0, 0x2bb7, 0x0, 0x2, 0x9, 0x80000000, 0x3, 0x100, 0x9, 0x4, 0xa, 0x1, 0x100, 0x3, 0x7, 0x8, 0xbbc2, 0x8, 0x5, 0x7fff, 0x3, 0x4a, 0x101, 0x7f, 0x9, 0x5a, 0x1, 0x9, 0x80000001, 0x40, 0x200, 0x9, 0x72, 0x4, 0xd35afad, 0xaf9e, 0x2, 0x3, 0x0, 0x0, 0x7, 0x200, 0x6, 0x4, 0x8, 0xe, 0xa, 0x1, 0x7]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x2}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}]}, 0x488}, 0x1, 0x0, 0x0, 0x4000000}, 0xc080) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m51.420810799s ago: executing program 4 (id=7402): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x20, 0x1405, 0x621, 0x0, 0x0, "", [{{0x8}, {0x8}}]}, 0x20}}, 0x10) recvmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}, 0x1000}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x2, {0x0, 0x0, 0x0, r2, 0x18e40, 0x2200a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x9}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e22}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400cc17}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000000)={0x0, 0x0, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r5) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4) sendto$inet6(r7, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x50, r6, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x200000000000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r8) sendmsg$NL80211_CMD_NEW_KEY(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x44, r10, 0x801, 0x400, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "4abee33908f8eef16f162471f4"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}, 0x44}}, 0x0) sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000640)={0xa0, r6, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x24, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xc}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_DAEMON={0x5c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_1\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x84}, 0x20000810) sendmsg$DEVLINK_CMD_SB_POOL_SET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}, 0x1, 0x0, 0x0, 0x24046004}, 0x20040041) 1m51.420198112s ago: executing program 1 (id=7403): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r1, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x34000081}, 0x200080c1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) close(r4) r5 = socket$kcm(0x2d, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000380)="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", 0x118}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e3, &(0x7f0000000180)={r5, r6}) sendfile(r4, r3, 0x0, 0xf03a0005) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'veth0_macvtap\x00', @multicast}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0xd, 0x0, 0x0, @void, @value=0x0}, 0x20) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'ip6tnl0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r8, 0x8916, &(0x7f0000000300)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x6f, r9}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newlink={0x68, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbbb, {0x0, 0x0, 0x0, 0x0, 0x50a10, 0x51a23}, [@IFLA_LINKINFO={0x48, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x30}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_LOCAL={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x68}, 0x1, 0x20000, 0x0, 0x240440d5}, 0x9080) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000040)={@link_local, @empty, @val={@val={0x88a8, 0x3, 0x0, 0x2}, {0x8100, 0x0, 0x0, 0x3}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x65, 0x9]}, {}, {0x2f89, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {}, {0x8, 0x6558, 0x1}}}}}}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r11, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) 1m51.279114033s ago: executing program 3 (id=7404): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000040000000404000040"], 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0d000000070000000400000001080000010000004b45", @ANYRES32=r3, @ANYBLOB="b41500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r4, &(0x7f0000000900)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r5, r5, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)={@cgroup=r2, r5, 0x2f, 0x18, 0x4}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x55, 0x1e5, 0x0, 0xffffeffd, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x1, 0x1, 0x0, {@ip4=@remote, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x4052) r8 = socket$kcm(0xa, 0x2, 0x0) r9 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r9, 0x0, 0x482, &(0x7f0000000240)={0x84, @multicast1, 0x4e20, 0x3, 'ovf\x00', 0x31, 0x660f537e, 0x3}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000440)={{0x84, @dev={0xac, 0x14, 0x14, 0x22}, 0x4f29, 0x7, 'rr\x00', 0x7, 0xc, 0x42c}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4e23, 0x2, 0x1, 0xfffffffd, 0x1}}, 0x89) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$sock(r8, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xfd}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 1m50.776126056s ago: executing program 3 (id=7406): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_bridge\x00', 0x0}) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff000000000000750000000000000000000000000000000000000000000000000000000000b86b6e"], 0xb8}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fcdbdf254f00000008000300", @ANYRES32=r7, @ANYBLOB="40007a800c00030007bdb6068a7c8a08140001"], 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$key(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0216ef050a0000002dbd7000ffdbdf250800120002000100b86b6e00"], 0x50}}, 0x840) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000040)=0xb, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000007c0)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x50}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{}, [@TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x37, 0x2, {0xe, 0x10, 0xbb2f, 0x7}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x84}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20700, 0x2000000, {0x0, 0x0, 0x0, 0x0, 0x8203}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 1m50.729186296s ago: executing program 1 (id=7407): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) pipe(0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0f0000000400000004000000120000"], 0x50) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) bpf$ENABLE_STATS(0x20, &(0x7f0000000100), 0x4) r5 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r5, &(0x7f0000000500)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x1, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "1b8100", 0x18, 0x11, 0x0, @empty, @mcast2, {[], {0x4e25, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x5, 0x9}}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) sendfile(r7, r0, 0x0, 0x7d1d7457) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 1m50.403577682s ago: executing program 5 (id=7410): bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) sendto$inet(0xffffffffffffffff, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d", 0xec, 0x12, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8, 0xd, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x4, r4, 0x3e}, 0x80, 0x0}, 0x0) 1m50.156046833s ago: executing program 4 (id=7411): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x32, 0x1}, 0x9c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000005c0)=[@in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e22, 0x10, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}, 0x68}], 0x2c) shutdown(r0, 0x0) 1m49.539383534s ago: executing program 2 (id=7412): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x48}}, 0x0) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x10, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m49.515963334s ago: executing program 3 (id=7413): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000000)="02ae8c760bfddd9e60b0000001002f576140000000", 0x15}], 0x1, 0x6) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x28) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000007c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r5, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x48815, 0x50103}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r7, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) syz_emit_ethernet(0x18d, &(0x7f0000000400)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb08004500017f0000000000019078ac1e0001ac1414aa05009078ffffffff480137a30067fff2062e0005ac141400ffffffff866100000001010608d55edc06090d8c9c5ec7730f07129f492af7776e4c2aa07e26cc350d130a060b302e725fdca6f7a5230607d1ce104ec3070d32a3cc468088f2c6a7f9ef060f3b2acbca15f46bb3c40aa17c96010cfacd2e03353f046920d544343031ac1414bb00000004ac1e000100000009ac1414aa00000003ac1414bbfffff001e000000100000001ac1414bb0000000101018633000000000205610546000adf341d226ff0a92202043239001005ced1092a3d96dd5c692011171a000a15fa93c616003b8b8634ffffffff0506d3b381d501050dfdb9071287266e9d254fb225a4050e7f9373f287ff62f0d21b043c05038b891ff90a010100ac1414bbffffffffac1414bbac1414bbe00000020a010102442c58610a01010000000074640101010000081eac1414bb00000005ffffffff000000050a01010100000003000000b0d762"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0x631, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0xb}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r2, 0x0, 0x10500, 0x0) 1m49.391280348s ago: executing program 2 (id=7414): syz_init_net_socket$bt_rfcomm(0x1f, 0x0, 0x3) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x37, 0x6c, 0x8, [0x1, 0x4, 0x8d, 0x405]}}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendfile(r0, r1, &(0x7f0000000040)=0x4, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000071001d00000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) 1m49.389913805s ago: executing program 5 (id=7415): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x50) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=@newqdisc={0x64, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xe, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xf7, 0x2, 0x35, 0x3, 0x8}, {0x77, 0x0, 0x7f, 0x8000, 0x4}, 0x1, 0x9ccd, 0x1941}}, @TCA_TBF_RATE64={0xc, 0x4, 0xa508c888da3da3d9}]}}]}, 0x64}}, 0x4000010) ioctl(r0, 0x5, &(0x7f0000001340)="71393e4aa940cc704dcca45f71e71eeb7eba04c09eb73be14e23f811530245a6a3080f8590eacba812f643c9252e1cbc329917841d0dd1879b446e8ef9805fa4ef24151c2542524469c7a5748c14eb9d39fc059d7c63e2e930408697b8793a6e4ae43c0975ecdae84a19fc66de4997a22d9a344889ab70f41cd4fabf3dcb118636c8c3f488328c3b6eb1b97337ba6f131e2cfb0999ec5244078556e0e4c98284166761b6d4ebf8a60c31c582ebace9c6ce2a563c82cee076cc5b8962d7663f5ddd82d8ab5e4c12848ceba9811173a88fe4da7e6130b67952923031dd3c14b603d15eeff45e200228216063bfa98ea2886825cde616dd") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000340)="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", 0x1000) 1m49.346155106s ago: executing program 1 (id=7416): unshare(0x6a040000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)={0x14, r1, 0x30b, 0x0, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x404c857}, 0x20060000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB="00000000800000000008a116edfe", @ANYRES32=0x0, @ANYBLOB], 0x50) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffe, 0x8001, 0x6}, 0x10) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) unshare(0x7a030000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="6000000010000108fdff00000080000000000200", @ANYRES32=r3, @ANYRESDEC=r1], 0x60}, 0x1, 0x0, 0x0, 0x4040080}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000600), r0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) recvfrom$llc(0xffffffffffffffff, 0x0, 0x0, 0xa7a028f7425b35c2, 0x0, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, 0x0, 0x0) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r5, 0x6, 0x16, &(0x7f0000000000)=[@mss, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x5) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6800000010000305"], 0x68}}, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x7, 0x4, 0x3e0, 0x110, 0x110, 0x210, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "716ebd2e1aa0cc683e62f312359594df00da56317f76121697127951fdba"}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a31000000000800"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) recvfrom$inet(r5, 0x0, 0x0, 0xc9100120, 0x0, 0x0) 1m49.209310822s ago: executing program 2 (id=7417): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r5 = openat$cgroup(r4, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20004880}, 0x20000090) 1m49.158337492s ago: executing program 4 (id=7418): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a30000000000500050005000000050001000600000014000780060004"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x24000800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="07000000010001", 0x7) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r4, 0xc0186e86, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x3a, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r5, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000800)=@bpf_tracing={0x1a, 0xf, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000700)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x1c, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x8ad4, r5, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) 1m48.597127396s ago: executing program 4 (id=7419): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000000000102000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000045090200000300006e00000000000000b7020000000000007b9af0ff00000000c509000000000000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf8400000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000002f00090027bd6a000000000004"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x10) recvmsg(r2, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x17, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xa}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x40}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x20000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xca71d000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), r6) sendmsg$IEEE802154_LLSEC_GETPARAMS(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r7, @ANYBLOB="0100df252400009d"], 0x14}, 0x1, 0x0, 0x0, 0x20000801}, 0x4008840) mmap(0x0, 0x0, 0x3, 0x110, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x200088c4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) unshare(0x20000400) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x14, r9, 0x1, 0x70bd2d, 0x25dfdc01}, 0x14}, 0x1, 0x0, 0x0, 0x24000000}, 0x20008004) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710443000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) sendmmsg(r8, &(0x7f00000000c0), 0x4000000000000d2, 0x8048848) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r10 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r10, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x6, 0x3, @mcast2}, 0x1c, &(0x7f0000000040)=[{0x0}], 0x1}, 0x30008b08) 1m48.172138809s ago: executing program 2 (id=7420): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9c940000, 0x0, 0x3, 0x1}, 0x20) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000001e00)={r7, 0x6}, &(0x7f0000001e40)=0x8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000240)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x20) syz_emit_ethernet(0xf0, &(0x7f0000000500)={@broadcast, @remote, @val={@val={0x88a8, 0x7, 0x1}, {0x8100, 0x3}}, {@ipv4={0x800, @igmp={{0x15, 0x4, 0x3, 0x1c, 0xda, 0x68, 0x0, 0xa9, 0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x96, 0x3, 0x3, [{@broadcast}, {@private=0xa010101, 0xfffffffc}]}, @timestamp={0x44, 0x24, 0xef, 0x0, 0x1, [0x5, 0xa, 0x3, 0x1, 0xa, 0xb, 0x5e40, 0x7f]}, @lsrr={0x83, 0x7, 0xeb, [@local]}, @noop]}}, {0x1f, 0xf8, 0x0, @empty, "61bcabce8c0dd48cfeb6d623ca1b63c260e6bb4c7e790544a782ec04005b4d7a8f81335aeeef9db03de4cd529de4fb36bd44716e538e185640574991ae7fa00a963f9f752aa148354fc8f6648d464d8c400115712ec21ab08aec5d50f9ea32d8dea19990ab8dd002bc45d97a6ee7ddf791a152aef82445e704c02691c11f"}}}}}, 0x0) sendmsg$kcm(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'erspan0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x8000, 0x8, 0xa, 0x2, {{0x2e, 0x4, 0x0, 0x3, 0xb8, 0x65, 0x0, 0xb4, 0x29, 0x0, @broadcast, @remote, {[@end, @noop, @timestamp_addr={0x44, 0x34, 0x3d, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@multicast1, 0x2e}, {@rand_addr=0x64010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x120}]}, @timestamp_prespec={0x44, 0x4, 0x2d, 0x3, 0x4}, @lsrr={0x83, 0x1f, 0xc5, [@rand_addr=0x64010101, @multicast1, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x28}, @remote]}, @timestamp_prespec={0x44, 0x24, 0xf5, 0x3, 0x1, [{@multicast1, 0x4000000c}, {@empty, 0x1}, {@broadcast, 0x6844}, {@private=0xa010100, 0x6}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0x9f, [@dev={0xac, 0x14, 0x14, 0x14}, @multicast1]}, @noop, @rr={0x7, 0x13, 0xce, [@multicast2, @remote, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x21}]}, @end]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000150)=@setlink={0x3c, 0x13, 0x5, 0xfffbfffe, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_IFNAME={0x14, 0x3, 'macsec0\x00'}, @IFLA_NET_NS_FD={0x8, 0x1c, 0xc9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) 1m48.140068432s ago: executing program 2 (id=7421): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYRES8=r0], 0x44}}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, &(0x7f0000000740)='!-\\.-#+.--\x00', 0xb) ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000001c0)={'veth1_virt_wifi\x00', &(0x7f0000000380)=@ethtool_perm_addr={0x4b, 0x14, "5c83277b6c020086200db0e102ea1d0d85d4bc69"}}) sendmsg$TIPC_NL_KEY_FLUSH(r3, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1f0000f61917853a20702fc99fe712490800757c15e6697cfb077f135b57070ff87f15cb2074ab883c051533", @ANYRES16=r4, @ANYBLOB="000427bd7000fbdbdf25180000002c0009800800020003000000080001006f0f00000800020033000000080001000300000008000100040000006c00058014000280080002000900000008000300050000004c000280080002000c0000000800020081ffffff08000300080000000800010014000000080002000000000008000300080000000800030006000000080001001500000008000400070000000800010075647000"], 0xac}, 0x1, 0x0, 0x0, 0x4811}, 0x24000044) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000010000004200000040"], 0x48) r7 = socket$inet_sctp(0x2, 0x1, 0x84) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) r11 = socket$inet6(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0700020000000c0003800400039b0400010004000180"], 0x24}, 0x1, 0x0, 0x0, 0x4060850}, 0x400d4) sendto$inet6(r11, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r11, &(0x7f0000000000)=""/31, 0x1f, 0x2002, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000000)="48050000150019", 0x7}, {&(0x7f0000000580)="e2b1b611a45b70fb2dc6fdb6f3b1fca6e75e0f0d43aebed588b94b7711d175afe0460f2146bc7037004853af0303057e5260ec30891c4123285fedf50baf993d6b2c280d3f9cecd2662d0aa8923fa2499f8cdcf5fce65d065208ed0cbd09966ef5e501abeb45f70000000000000000da6932269af8ade10e853914d1f9a5f56513b23e4bc8642e0a55e8c01ec4db072d7d770e52403fa219b82a8edb13e7c82af26b534c2ac237eeba13addde261dc17d342b5b6d6b35505b436f1d9907da0bfafc257ae49257e8a", 0x6f}], 0x100000000000014e) r12 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r12, &(0x7f0000000000)='s', 0x573, 0x800, 0x0, 0x4b6ae4f95a5de35b) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000400)={r10, 0x4ab3}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f0000000100)={r10, 0x3}, &(0x7f00000002c0)=0x8) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x7, r6, 0x20}, 0x38) 1m47.973379962s ago: executing program 5 (id=7422): socket(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000000)={@remote, @random="a547ae412132", @void, {@generic={0x200}}}, 0x0) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4082, 0xff2}], 0x1}, 0xfffffffc}], 0x1, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) sendto$inet6(r5, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) sendmsg$inet_sctp(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000003c0)="f6", 0x1}], 0x1, &(0x7f00000000c0)=[@sndinfo={0x20, 0x84, 0x2, {0x4, 0x49, 0x4bc, 0x2}}], 0x20, 0x40801}, 0x50) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x0, 0x7a}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x6, 0x9}, 0x8) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000180)={0x8001, 0x8eb, 0x4, 0x42a7, 0x0, 0xb6}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0b01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000180)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r6, &(0x7f0000000140)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x17, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, [@ringbuf_query={{}, {}, {0x85, 0x0, 0x0, 0x17}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet_sctp(0x2, 0x5, 0x84) 1m47.872412118s ago: executing program 3 (id=7423): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000c00)=0x469, 0x4) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="050100000000004024006d6163766c616953000000ff5baf283b00000000000000f90002ff0000000000000800000000007587d1fee52ea8e2538dfcc36a4fc16742ec2682a506153884114634fc000bbe680cb59be34907502977f92fc486783a9ae055d6f69062e60cea"], 0x44}}, 0x10) 1m47.370133448s ago: executing program 3 (id=7424): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0xa4, 0x44, 0x1, 0x70bd29, 0x4, {0x2}, [@nested={0x4, 0x48}, @nested={0x8c, 0x1, 0x0, 0x1, [@nested={0x88, 0x13f, 0x0, 0x1, [@nested={0x74, 0x127, 0x0, 0x1, [@nested={0x65, 0xdb, 0x0, 0x1, [@typed={0x8, 0x15c, 0x0, 0x0, @fd=r3}, @generic="03fe807b568f6c3d5e601539eb84881dd2ebaa46528bbfd27c6f809ce744a00d6a2a498e228c5994794d66b8bc582fb67c1c630923ba3f85ab74272646fccf01d362e3995dc13c0bcf900c5646f1ca9bbbc9b2ba78b8bbbedc"]}, @typed={0x8, 0x48, 0x0, 0x0, @pid}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid}, @nested={0x8, 0x13f, 0x0, 0x1, [@typed={0x4, 0x17, 0x0, 0x0, @binary}]}]}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) (async, rerun: 32) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x8001}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (rerun: 32) 1m45.706200782s ago: executing program 2 (id=7425): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000e40)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="0100000000000003000008000000180001801400020073797a5f74756e0000000000000000001c00028004000100140003800c000180080001000000000004000180"], 0x48}}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x40010) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0xfffffffb, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x28}}, @IFLA_GRE_TOS={0x5, 0x9, 0x7}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x68, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10}}}, @TCA_STAB={0x20, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x68}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610414000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'sit0\x00', &(0x7f00000003c0)={'tunl0\x00', 0x0, 0x20, 0x1, 0x10000, 0xe4, {{0x2d, 0x4, 0x2, 0x1a, 0xb4, 0x65, 0x0, 0x1, 0x2f, 0x0, @private=0xa010101, @multicast2, {[@cipso={0x86, 0x16, 0x3, [{0x1, 0x10, "5a74cf29596544d626653300f389"}]}, @timestamp_prespec={0x44, 0x34, 0x31, 0x3, 0x6, [{@remote, 0x12}, {@broadcast, 0x1}, {@private=0xa010102, 0x8}, {@empty, 0x4}, {@local, 0xae5}, {@loopback, 0x101}]}, @timestamp_addr={0x44, 0x44, 0x1c, 0x1, 0x4, [{@broadcast, 0x1}, {@remote, 0x1}, {@broadcast, 0x5}, {@broadcast, 0x3ff}, {@local, 0x7}, {@rand_addr=0x64010100, 0x5122}, {@multicast1, 0x103}, {@multicast2, 0xffffd8d3}]}, @generic={0x88, 0xa, "6856e169c34a5528"}, @generic={0x7, 0x7, "ad7c416de0"}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x0, 0xc, 0x9, 0x348e, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, @private0, 0x7, 0x20, 0x6e5e, 0x2}}) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, &(0x7f0000002600)={0x0, @in6={{0xa, 0x4e20, 0x8, @local}}}, &(0x7f00000026c0)=0x84) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e00)=@newqdisc={0x38, 0x24, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r13, {0x0, 0x9}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000700)={'ip6_vti0\x00', &(0x7f0000000680)={'ip6_vti0\x00', 0x0, 0x4, 0x1, 0x8, 0x8, 0x0, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000, 0x700, 0x81, 0xff}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback, 0x0}, &(0x7f0000000780)=0xc) r16 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r16, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x18, 0x0, 0x1, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4020004}, 0x80) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000dc0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d80)={&(0x7f00000007c0)={0x4ac, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x905d}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r11}}, {0x8}}}]}}, {{0x8}, {0x200, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r13}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x6, 0xf9, 0x7, 0x8}, {0x8, 0xb, 0x1}, {0x9, 0x81, 0x8, 0x1ac}, {0x6, 0xf1, 0x3, 0x400}, {0x8001, 0xfe, 0x1, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x28}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xff}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r15}}}]}}]}, 0x4ac}, 0x1, 0x0, 0x0, 0x40004}, 0x800) 1m45.450728115s ago: executing program 5 (id=7426): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'team0\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "dcf7983962915d8c0fe9db6917ce1759e9ef480b0d74be1614421fef43242ce1", "84110a8779a7c6d6548cdcc09748743340416e2f5830ed476d5fec8450df42ba", "4d0b88f64e03c5a4db042278adc080576cf28a008cf11d28f3cbab30e9106d7b", "4a06e2f091f5dc1045e37f32fbf10762aaf1c146aab735e0482aeda0718c79d7", "37d266b7eedde3a08baef3fa17cb380353cb8e66666f2f6bde9f380f9bb170d3", "69d7eed7e4d4e2f58ef6ff9e", 0x3, 0x0, 0xffff8001, 0xf07, 0x5}}) pipe(&(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007911480000000000711133000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 0s ago: executing program 33 (id=7426): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000600)={'team0\x00', &(0x7f0000000500)=@ethtool_drvinfo={0x3, "dcf7983962915d8c0fe9db6917ce1759e9ef480b0d74be1614421fef43242ce1", "84110a8779a7c6d6548cdcc09748743340416e2f5830ed476d5fec8450df42ba", "4d0b88f64e03c5a4db042278adc080576cf28a008cf11d28f3cbab30e9106d7b", "4a06e2f091f5dc1045e37f32fbf10762aaf1c146aab735e0482aeda0718c79d7", "37d266b7eedde3a08baef3fa17cb380353cb8e66666f2f6bde9f380f9bb170d3", "69d7eed7e4d4e2f58ef6ff9e", 0x3, 0x0, 0xffff8001, 0xf07, 0x5}}) pipe(&(0x7f0000000000)) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007911480000000000711133000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) kernel console output (not intermixed with test programs): 183354][ T2601] ? call_instance+0x263/0x560 [ 1543.183379][ T2601] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1543.183406][ T2601] ? __kvmalloc_node_noprof+0x345/0x820 [ 1543.183431][ T2601] ? call_instance+0x263/0x560 [ 1543.183455][ T2601] ? call_instance+0x263/0x560 [ 1543.183488][ T2601] ? call_instance+0x42e/0x560 [ 1543.183523][ T2601] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1543.183555][ T2601] ? bpf_get_skb_set_tunnel_proto+0x42/0xc0 [ 1543.183678][ T2601] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1543.183713][ T2601] ? __kvmalloc_node_noprof+0x345/0x820 [ 1543.183738][ T2601] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1543.183764][ T2601] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1543.183807][ T2601] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1543.183857][ T2601] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1543.183898][ T2601] bpf_check+0x25ed/0x2e10 [ 1543.183936][ T2601] ? ktime_get_with_offset+0x93/0x2d0 [ 1543.183967][ T2601] ? __pfx_bpf_check+0x10/0x10 [ 1543.183996][ T2601] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1543.184034][ T2601] bpf_prog_load+0x14d6/0x1c20 [ 1543.184075][ T2601] ? __pfx_bpf_prog_load+0x10/0x10 [ 1543.184132][ T2601] __sys_bpf+0xd0d/0xd90 [ 1543.184168][ T2601] ? __pfx___sys_bpf+0x10/0x10 [ 1543.184196][ T2601] ? taprio_dequeue+0x250/0x540 [ 1543.184305][ T2601] ? sched_clock_cpu+0x74/0x440 [ 1543.184359][ T2601] ? __irq_exit_rcu+0xcb/0x220 [ 1543.184394][ T2601] ? handle_softirqs+0x720/0x860 [ 1543.184429][ T2601] __x64_sys_bpf+0xba/0xd0 [ 1543.184457][ T2601] do_syscall_64+0x166/0x520 [ 1543.184482][ T2601] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.184507][ T2601] ? clear_bhb_loop+0x70/0xc0 [ 1543.184536][ T2601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1543.184560][ T2601] RIP: 0033:0x7f9f0799e159 [ 1543.184582][ T2601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1543.184602][ T2601] RSP: 002b:00007f9f08887028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1543.184628][ T2601] RAX: ffffffffffffffda RBX: 00007f9f07c25fa0 RCX: 00007f9f0799e159 [ 1543.184646][ T2601] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1543.184661][ T2601] RBP: 00007f9f08887090 R08: 0000000000000000 R09: 0000000000000000 [ 1543.184677][ T2601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1543.184692][ T2601] R13: 00007f9f07c26038 R14: 00007f9f07c25fa0 R15: 00007ffd5084c698 [ 1543.184728][ T2601] [ 1543.241029][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1543.398123][ T2603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6819'. [ 1544.045937][ T2610] bridge_slave_0: default FDB implementation only supports local addresses [ 1544.171923][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1544.171951][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1544.171969][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1544.171985][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1544.172002][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1544.172017][ T2618] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1544.172033][ T2618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1544.172048][ T2618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6821'. [ 1544.280051][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1544.726199][ T2627] FAULT_INJECTION: forcing a failure. [ 1544.726199][ T2627] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.726247][ T2627] CPU: 1 UID: 0 PID: 2627 Comm: syz.2.6824 Not tainted syzkaller #0 PREEMPT(full) [ 1544.726275][ T2627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1544.726291][ T2627] Call Trace: [ 1544.726301][ T2627] [ 1544.726312][ T2627] dump_stack_lvl+0xe8/0x150 [ 1544.726354][ T2627] should_fail_ex+0x410/0x560 [ 1544.726386][ T2627] ? __alloc_skb+0x1db/0x7a0 [ 1544.726413][ T2627] should_failslab+0xa8/0x100 [ 1544.726444][ T2627] ? __alloc_skb+0x1db/0x7a0 [ 1544.726469][ T2627] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1544.726506][ T2627] ? __alloc_skb+0x18d/0x7a0 [ 1544.726534][ T2627] ? __alloc_skb+0x1db/0x7a0 [ 1544.726568][ T2627] __alloc_skb+0x1db/0x7a0 [ 1544.726600][ T2627] inet6_rtm_getaddr+0x5c6/0xa80 [ 1544.726735][ T2627] ? __pfx_inet6_rtm_getaddr+0x10/0x10 [ 1544.726788][ T2627] ? __pfx_inet6_rtm_getaddr+0x10/0x10 [ 1544.726818][ T2627] rtnetlink_rcv_msg+0x802/0xc00 [ 1544.726886][ T2627] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1544.726913][ T2627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1544.726940][ T2627] ? ref_tracker_free+0x689/0x830 [ 1544.727002][ T2627] ? __pfx_ref_tracker_free+0x10/0x10 [ 1544.727042][ T2627] netlink_rcv_skb+0x226/0x4a0 [ 1544.727094][ T2627] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1544.727124][ T2627] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1544.727173][ T2627] ? netlink_deliver_tap+0x2e/0x1b0 [ 1544.727207][ T2627] ? netlink_deliver_tap+0x2e/0x1b0 [ 1544.727255][ T2627] netlink_unicast+0x7bd/0x940 [ 1544.727299][ T2627] netlink_sendmsg+0x813/0xb40 [ 1544.727344][ T2627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1544.727387][ T2627] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1544.727416][ T2627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1544.727449][ T2627] sock_sendmsg_nosec+0x13a/0x180 [ 1544.727490][ T2627] ____sys_sendmsg+0x54e/0x850 [ 1544.727527][ T2627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1544.727568][ T2627] ? import_iovec+0x73/0xa0 [ 1544.727602][ T2627] ___sys_sendmsg+0x2a5/0x360 [ 1544.727632][ T2627] ? __lock_acquire+0x747/0x2de0 [ 1544.727661][ T2627] ? __pfx____sys_sendmsg+0x10/0x10 [ 1544.727731][ T2627] ? __fget_files+0x2a/0x420 [ 1544.727764][ T2627] ? __fget_files+0x3a2/0x420 [ 1544.727807][ T2627] __x64_sys_sendmsg+0x1b1/0x290 [ 1544.727842][ T2627] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1544.727897][ T2627] do_syscall_64+0x166/0x520 [ 1544.727923][ T2627] ? trace_irq_disable+0x3b/0x140 [ 1544.727947][ T2627] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.727972][ T2627] ? clear_bhb_loop+0x70/0xc0 [ 1544.728002][ T2627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.728027][ T2627] RIP: 0033:0x7f42dff9e159 [ 1544.728049][ T2627] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.728070][ T2627] RSP: 002b:00007f42e0df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1544.728097][ T2627] RAX: ffffffffffffffda RBX: 00007f42e0225fa0 RCX: 00007f42dff9e159 [ 1544.728115][ T2627] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1544.728131][ T2627] RBP: 00007f42e0df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.728147][ T2627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1544.728162][ T2627] R13: 00007f42e0226038 R14: 00007f42e0225fa0 R15: 00007fffea4e53a8 [ 1544.728199][ T2627] [ 1544.781046][T28019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.113575][T21393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.323454][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1545.686582][ T2641] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1545.768017][ T2641] netlink: 'syz.1.6830': attribute type 1 has an invalid length. [ 1546.162830][ T2641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1546.392370][ T757] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1546.535397][ T2663] tipc: Started in network mode [ 1546.535434][ T2663] tipc: Node identity 56f92910d049, cluster identity 4711 [ 1546.535600][ T2663] tipc: Enabled bearer , priority 0 [ 1547.214900][ T2661] syzkaller0: entered promiscuous mode [ 1547.214966][ T2661] syzkaller0: entered allmulticast mode [ 1547.240759][ T2661] tipc: Resetting bearer [ 1547.398734][ T763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1547.633878][ T2681] netlink: 'syz.5.6836': attribute type 3 has an invalid length. [ 1548.122307][T21393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1548.285087][ T8330] tipc: Resetting bearer [ 1548.287229][ T2682] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1548.434204][ T2660] tipc: Resetting bearer [ 1548.438506][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1549.485097][ T763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1550.543797][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.178445][T28008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1551.573218][ T761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1552.604766][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1553.644877][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.137160][ T2660] tipc: Disabling bearer [ 1554.150294][T28007] tipc: Node number set to 2259691792 [ 1554.222493][T28007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.364700][T28007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1554.495444][ T2743] FAULT_INJECTION: forcing a failure. [ 1554.495444][ T2743] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.495482][ T2743] CPU: 1 UID: 0 PID: 2743 Comm: syz.4.6846 Not tainted syzkaller #0 PREEMPT(full) [ 1554.495511][ T2743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1554.495525][ T2743] Call Trace: [ 1554.495536][ T2743] [ 1554.495546][ T2743] dump_stack_lvl+0xe8/0x150 [ 1554.495591][ T2743] should_fail_ex+0x410/0x560 [ 1554.495626][ T2743] should_failslab+0xa8/0x100 [ 1554.495657][ T2743] ? skb_clone+0x212/0x3a0 [ 1554.495696][ T2743] kmem_cache_alloc_noprof+0xa1/0x600 [ 1554.495737][ T2743] ? skb_clone+0x212/0x3a0 [ 1554.495775][ T2743] skb_clone+0x212/0x3a0 [ 1554.495811][ T2743] __netlink_deliver_tap+0x413/0x860 [ 1554.495869][ T2743] ? netlink_deliver_tap+0x2e/0x1b0 [ 1554.495906][ T2743] netlink_deliver_tap+0x19c/0x1b0 [ 1554.495942][ T2743] netlink_sendskb+0x68/0x140 [ 1554.495975][ T2743] rtnl_unicast+0x4e/0x60 [ 1554.496089][ T2743] inet6_rtm_getaddr+0x624/0xa80 [ 1554.496131][ T2743] ? __pfx_inet6_rtm_getaddr+0x10/0x10 [ 1554.496186][ T2743] ? __pfx_inet6_rtm_getaddr+0x10/0x10 [ 1554.496215][ T2743] rtnetlink_rcv_msg+0x802/0xc00 [ 1554.496247][ T2743] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1554.496274][ T2743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1554.496300][ T2743] ? ref_tracker_free+0x689/0x830 [ 1554.496332][ T2743] ? __pfx_ref_tracker_free+0x10/0x10 [ 1554.496371][ T2743] netlink_rcv_skb+0x226/0x4a0 [ 1554.496406][ T2743] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1554.496437][ T2743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1554.496486][ T2743] ? netlink_deliver_tap+0x2e/0x1b0 [ 1554.496520][ T2743] ? netlink_deliver_tap+0x2e/0x1b0 [ 1554.496561][ T2743] netlink_unicast+0x7bd/0x940 [ 1554.496605][ T2743] netlink_sendmsg+0x813/0xb40 [ 1554.496651][ T2743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.496695][ T2743] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1554.496727][ T2743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.496761][ T2743] sock_sendmsg_nosec+0x13a/0x180 [ 1554.496803][ T2743] ____sys_sendmsg+0x54e/0x850 [ 1554.496841][ T2743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1554.496890][ T2743] ? import_iovec+0x73/0xa0 [ 1554.496926][ T2743] ___sys_sendmsg+0x2a5/0x360 [ 1554.496955][ T2743] ? __lock_acquire+0x747/0x2de0 [ 1554.496987][ T2743] ? __pfx____sys_sendmsg+0x10/0x10 [ 1554.497058][ T2743] ? __fget_files+0x2a/0x420 [ 1554.497091][ T2743] ? __fget_files+0x3a2/0x420 [ 1554.497136][ T2743] __x64_sys_sendmsg+0x1b1/0x290 [ 1554.497171][ T2743] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1554.497227][ T2743] do_syscall_64+0x166/0x520 [ 1554.497256][ T2743] ? trace_irq_disable+0x3b/0x140 [ 1554.497281][ T2743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.497307][ T2743] ? clear_bhb_loop+0x70/0xc0 [ 1554.497337][ T2743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.497362][ T2743] RIP: 0033:0x7f3e1179e159 [ 1554.497385][ T2743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.497405][ T2743] RSP: 002b:00007f3e125a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1554.497431][ T2743] RAX: ffffffffffffffda RBX: 00007f3e11a25fa0 RCX: 00007f3e1179e159 [ 1554.497449][ T2743] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1554.497465][ T2743] RBP: 00007f3e125a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.497481][ T2743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.497495][ T2743] R13: 00007f3e11a26038 R14: 00007f3e11a25fa0 R15: 00007ffc2fd62268 [ 1554.497532][ T2743] [ 1554.681529][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.073856][ T2752] __nla_validate_parse: 13 callbacks suppressed [ 1555.073911][ T2752] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6848'. [ 1555.179590][ T2756] netlink: 'syz.2.6848': attribute type 62 has an invalid length. [ 1555.182540][ T2745] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6847'. [ 1555.231155][ T2758] FAULT_INJECTION: forcing a failure. [ 1555.231155][ T2758] name failslab, interval 1, probability 0, space 0, times 0 [ 1555.231194][ T2758] CPU: 1 UID: 0 PID: 2758 Comm: syz.4.6850 Not tainted syzkaller #0 PREEMPT(full) [ 1555.231232][ T2758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1555.231247][ T2758] Call Trace: [ 1555.231256][ T2758] [ 1555.231267][ T2758] dump_stack_lvl+0xe8/0x150 [ 1555.231308][ T2758] should_fail_ex+0x410/0x560 [ 1555.231342][ T2758] should_failslab+0xa8/0x100 [ 1555.231375][ T2758] __kvmalloc_node_noprof+0x176/0x820 [ 1555.231403][ T2758] ? arg_track_eq+0x7b/0x7a0 [ 1555.231432][ T2758] ? record_stack_access+0xc71/0x1110 [ 1555.231460][ T2758] ? record_stack_access+0xc71/0x1110 [ 1555.231496][ T2758] record_stack_access+0xc71/0x1110 [ 1555.231537][ T2758] ? __pfx_arg_track_join+0x10/0x10 [ 1555.231569][ T2758] ? __pfx_record_stack_access+0x10/0x10 [ 1555.231600][ T2758] ? analyze_subprog+0x8ac/0x9e00 [ 1555.231625][ T2758] ? analyze_subprog+0x8ac/0x9e00 [ 1555.231659][ T2758] analyze_subprog+0x4544/0x9e00 [ 1555.231687][ T2758] ? probe_event_enable+0x6df/0xae0 [ 1555.231770][ T2758] ? __pfx_analyze_subprog+0x10/0x10 [ 1555.231796][ T2758] ? __x64_sys_bpf+0xba/0xd0 [ 1555.231817][ T2758] ? do_syscall_64+0x166/0x520 [ 1555.231843][ T2758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.231911][ T2758] ? call_instance+0x263/0x560 [ 1555.231937][ T2758] ? rcu_is_watching+0x16/0xb0 [ 1555.231967][ T2758] ? call_instance+0x263/0x560 [ 1555.231991][ T2758] ? trace_kmalloc+0x2a/0xf0 [ 1555.232029][ T2758] ? call_instance+0x263/0x560 [ 1555.232054][ T2758] ? __kvmalloc_node_noprof+0x52f/0x820 [ 1555.232081][ T2758] ? __kvmalloc_node_noprof+0x345/0x820 [ 1555.232106][ T2758] ? call_instance+0x263/0x560 [ 1555.232131][ T2758] ? call_instance+0x263/0x560 [ 1555.232176][ T2758] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 1555.232216][ T2758] ? bpf_get_skb_set_tunnel_proto+0x42/0xc0 [ 1555.232269][ T2758] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 1555.232304][ T2758] ? __kvmalloc_node_noprof+0x345/0x820 [ 1555.232330][ T2758] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1555.232357][ T2758] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 1555.232393][ T2758] bpf_compute_live_registers+0x8d3/0x1ff0 [ 1555.232444][ T2758] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 1555.232485][ T2758] bpf_check+0x25ed/0x2e10 [ 1555.232524][ T2758] ? ktime_get_with_offset+0x93/0x2d0 [ 1555.232555][ T2758] ? __pfx_bpf_check+0x10/0x10 [ 1555.232584][ T2758] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1555.232622][ T2758] bpf_prog_load+0x14d6/0x1c20 [ 1555.232662][ T2758] ? __pfx_bpf_prog_load+0x10/0x10 [ 1555.232716][ T2758] __sys_bpf+0xd0d/0xd90 [ 1555.232754][ T2758] ? __pfx___sys_bpf+0x10/0x10 [ 1555.232793][ T2758] ? __fget_files+0x2a/0x420 [ 1555.232847][ T2758] ? ksys_write+0x242/0x270 [ 1555.232886][ T2758] ? __pfx_ksys_write+0x10/0x10 [ 1555.232928][ T2758] __x64_sys_bpf+0xba/0xd0 [ 1555.232955][ T2758] do_syscall_64+0x166/0x520 [ 1555.232981][ T2758] ? trace_irq_disable+0x3b/0x140 [ 1555.233006][ T2758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.233030][ T2758] ? clear_bhb_loop+0x70/0xc0 [ 1555.233060][ T2758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1555.233084][ T2758] RIP: 0033:0x7f3e1179e159 [ 1555.233106][ T2758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1555.233128][ T2758] RSP: 002b:00007f3e125a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1555.233154][ T2758] RAX: ffffffffffffffda RBX: 00007f3e11a25fa0 RCX: 00007f3e1179e159 [ 1555.233173][ T2758] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1555.233189][ T2758] RBP: 00007f3e125a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1555.233204][ T2758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1555.233228][ T2758] R13: 00007f3e11a26038 R14: 00007f3e11a25fa0 R15: 00007ffc2fd62268 [ 1555.233265][ T2758] [ 1555.506354][ T2752] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1555.719588][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1555.861758][ T2752] macvlan3: entered promiscuous mode [ 1555.861788][ T2752] macvlan3: entered allmulticast mode [ 1555.891003][ T2752] bond10: entered promiscuous mode [ 1555.904389][ T2752] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1555.954656][ T2752] bond10: left promiscuous mode [ 1556.101501][ T2777] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1556.160427][ T2775] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1556.488639][ T2784] tipc: New replicast peer: 127.0.0.1 [ 1556.493068][ T2784] tipc: Enabled bearer , priority 26 [ 1556.674296][ T2788] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6856'. [ 1556.760647][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.249969][T28007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1557.492067][ T2819] netlink: 32 bytes leftover after parsing attributes in process `syz.5.6863'. [ 1557.801891][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1558.015806][ T2836] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6867'. [ 1558.026266][ T2836] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6867'. [ 1558.088595][ T2841] FAULT_INJECTION: forcing a failure. [ 1558.088595][ T2841] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.088669][ T2841] CPU: 0 UID: 0 PID: 2841 Comm: syz.4.6869 Not tainted syzkaller #0 PREEMPT(full) [ 1558.088699][ T2841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1558.088714][ T2841] Call Trace: [ 1558.088724][ T2841] [ 1558.088734][ T2841] dump_stack_lvl+0xe8/0x150 [ 1558.088775][ T2841] should_fail_ex+0x410/0x560 [ 1558.088809][ T2841] should_failslab+0xa8/0x100 [ 1558.088841][ T2841] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1558.088868][ T2841] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1558.088893][ T2841] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1558.088921][ T2841] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1558.088947][ T2841] krealloc_node_align_noprof+0x19a/0x390 [ 1558.088982][ T2841] ? __kasan_kmalloc+0x93/0xb0 [ 1558.089012][ T2841] bpf_push_jmp_history+0x26c/0x6d0 [ 1558.089047][ T2841] do_check_common+0x2a0a/0x5d30 [ 1558.089125][ T2841] ? __pfx_do_check_common+0x10/0x10 [ 1558.089170][ T2841] bpf_check+0x2639/0x2e10 [ 1558.089207][ T2841] ? ktime_get_with_offset+0x93/0x2d0 [ 1558.089237][ T2841] ? __pfx_bpf_check+0x10/0x10 [ 1558.089266][ T2841] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1558.089304][ T2841] bpf_prog_load+0x14d6/0x1c20 [ 1558.089345][ T2841] ? __pfx_bpf_prog_load+0x10/0x10 [ 1558.089401][ T2841] __sys_bpf+0xd0d/0xd90 [ 1558.089436][ T2841] ? __pfx___sys_bpf+0x10/0x10 [ 1558.089476][ T2841] ? __fget_files+0x2a/0x420 [ 1558.089526][ T2841] ? ksys_write+0x242/0x270 [ 1558.089561][ T2841] ? __pfx_ksys_write+0x10/0x10 [ 1558.089598][ T2841] __x64_sys_bpf+0xba/0xd0 [ 1558.089625][ T2841] do_syscall_64+0x166/0x520 [ 1558.089652][ T2841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.089676][ T2841] ? clear_bhb_loop+0x70/0xc0 [ 1558.089705][ T2841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.089728][ T2841] RIP: 0033:0x7f3e1179e159 [ 1558.089758][ T2841] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1558.089779][ T2841] RSP: 002b:00007f3e125a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1558.089805][ T2841] RAX: ffffffffffffffda RBX: 00007f3e11a25fa0 RCX: 00007f3e1179e159 [ 1558.089823][ T2841] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1558.089839][ T2841] RBP: 00007f3e125a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.089854][ T2841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1558.089869][ T2841] R13: 00007f3e11a26038 R14: 00007f3e11a25fa0 R15: 00007ffc2fd62268 [ 1558.089906][ T2841] [ 1558.230516][ T2842] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6870'. [ 1558.525310][ T2845] netlink: 'syz.5.6871': attribute type 8 has an invalid length. [ 1558.596315][ T2851] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6873'. [ 1558.628158][ T2851] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1558.670877][ T2851] netlink: 'syz.1.6873': attribute type 1 has an invalid length. [ 1558.771477][ T2865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6875'. [ 1558.827119][ T2851] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1558.845999][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.028524][ T2867] bond5: (slave gretap1): making interface the new active one [ 1559.029697][ T2867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.032236][ T2867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.075060][ T2867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.075378][ T2867] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.075692][ T2867] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 1559.141633][T28008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.472864][T13936] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.621289][ T2899] wg2 speed is unknown, defaulting to 1000 [ 1559.881982][T28007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1559.912316][ T760] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.053866][T13945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1560.324547][ T2916] __nla_validate_parse: 2 callbacks suppressed [ 1560.324572][ T2916] netlink: 56 bytes leftover after parsing attributes in process `syz.5.6883'. [ 1560.408136][ T2901] wg2 speed is unknown, defaulting to 1000 [ 1560.519535][ T2919] FAULT_INJECTION: forcing a failure. [ 1560.519535][ T2919] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.519845][ T2919] CPU: 0 UID: 0 PID: 2919 Comm: syz.3.6882 Not tainted syzkaller #0 PREEMPT(full) [ 1560.519873][ T2919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1560.519888][ T2919] Call Trace: [ 1560.519898][ T2919] [ 1560.519908][ T2919] dump_stack_lvl+0xe8/0x150 [ 1560.519949][ T2919] should_fail_ex+0x410/0x560 [ 1560.520007][ T2919] should_failslab+0xa8/0x100 [ 1560.520040][ T2919] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1560.520073][ T2919] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1560.520097][ T2919] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1560.520139][ T2919] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1560.520166][ T2919] krealloc_node_align_noprof+0x19a/0x390 [ 1560.520198][ T2919] bpf_push_jmp_history+0x26c/0x6d0 [ 1560.520233][ T2919] do_check_common+0x2a0a/0x5d30 [ 1560.520302][ T2919] ? __pfx_do_check_common+0x10/0x10 [ 1560.520345][ T2919] bpf_check+0x2639/0x2e10 [ 1560.520382][ T2919] ? ktime_get_with_offset+0x93/0x2d0 [ 1560.520419][ T2919] ? __pfx_bpf_check+0x10/0x10 [ 1560.520447][ T2919] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1560.520484][ T2919] bpf_prog_load+0x14d6/0x1c20 [ 1560.520523][ T2919] ? __pfx_bpf_prog_load+0x10/0x10 [ 1560.520577][ T2919] __sys_bpf+0xd0d/0xd90 [ 1560.520612][ T2919] ? __pfx___sys_bpf+0x10/0x10 [ 1560.520638][ T2919] ? taprio_dequeue+0x250/0x540 [ 1560.520681][ T2919] ? sched_clock_cpu+0x74/0x440 [ 1560.520726][ T2919] ? __irq_exit_rcu+0xcb/0x220 [ 1560.520760][ T2919] ? handle_softirqs+0x720/0x860 [ 1560.520794][ T2919] __x64_sys_bpf+0xba/0xd0 [ 1560.520821][ T2919] do_syscall_64+0x166/0x520 [ 1560.520847][ T2919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.520872][ T2919] ? clear_bhb_loop+0x70/0xc0 [ 1560.520901][ T2919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.520924][ T2919] RIP: 0033:0x7f616359e159 [ 1560.520946][ T2919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.520967][ T2919] RSP: 002b:00007f616437f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1560.520993][ T2919] RAX: ffffffffffffffda RBX: 00007f6163825fa0 RCX: 00007f616359e159 [ 1560.521011][ T2919] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 1560.521027][ T2919] RBP: 00007f616437f090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.521042][ T2919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1560.521057][ T2919] R13: 00007f6163826038 R14: 00007f6163825fa0 R15: 00007ffc1d36f5f8 [ 1560.521093][ T2919] [ 1560.690003][ T2921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6881'. [ 1560.829803][ T2922] netlink: 'syz.4.6881': attribute type 83 has an invalid length. [ 1561.068517][ T2921] bridge_slave_1: left allmulticast mode [ 1561.068552][ T2921] bridge_slave_1: left promiscuous mode [ 1561.068825][ T2921] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.102389][ T2921] bridge_slave_0: left allmulticast mode [ 1561.102419][ T2921] bridge_slave_0: left promiscuous mode [ 1561.102664][ T2921] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.269929][ T2928] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6884'. [ 1561.271650][ T2933] netlink: 'syz.2.6885': attribute type 10 has an invalid length. [ 1561.293915][ T2933] team0: Port device dummy0 added [ 1561.752219][ T2948] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1561.805816][ T2948] netlink: 'syz.5.6890': attribute type 1 has an invalid length. [ 1561.996553][ T2957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6893'. [ 1562.172663][ T2948] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1563.225591][ T2985] netlink: 116 bytes leftover after parsing attributes in process `syz.5.6900'. [ 1563.477294][ T2987] bridge_slave_0: default FDB implementation only supports local addresses [ 1563.818059][ T2993] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6902'. [ 1563.922665][ T3003] bridge0: port 3(veth0) entered blocking state [ 1563.922868][ T3003] bridge0: port 3(veth0) entered disabled state [ 1563.923058][ T3003] veth0: entered allmulticast mode [ 1563.952967][ T3003] veth0: entered promiscuous mode [ 1563.953634][ T3003] bridge0: port 3(veth0) entered blocking state [ 1563.953751][ T3003] bridge0: port 3(veth0) entered forwarding state [ 1563.982980][ T3003] bridge0: port 4(veth1) entered blocking state [ 1563.983095][ T3003] bridge0: port 4(veth1) entered disabled state [ 1563.983271][ T3003] veth1: entered allmulticast mode [ 1564.019425][ T3003] veth1: entered promiscuous mode [ 1564.021562][ T3003] bridge0: port 4(veth1) entered blocking state [ 1564.021815][ T3003] bridge0: port 4(veth1) entered forwarding state [ 1564.045487][T21393] net_ratelimit: 16 callbacks suppressed [ 1564.045539][T21393] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.074979][ T761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.831568][ T3016] netlink: 'syz.3.6907': attribute type 29 has an invalid length. [ 1564.831595][ T3016] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6907'. [ 1564.859268][ T8330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1564.859532][ T8330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.113713][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.192375][ T5279] veth0_macvtap: left promiscuous mode [ 1565.241679][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.243734][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1565.306210][ T3029] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6911'. [ 1565.443444][ T3031] tipc: Started in network mode [ 1565.443482][ T3031] tipc: Node identity ac14140f, cluster identity 4711 [ 1565.443822][ T3031] tipc: New replicast peer: 255.255.255.255 [ 1565.444528][ T3031] tipc: Enabled bearer , priority 26 [ 1565.475821][ T3035] 0: reclassify loop, rule prio 0, protocol 03 [ 1565.561780][ T3033] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6912'. [ 1565.709417][ T3043] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6917'. [ 1565.709456][ T3043] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 1565.999277][T13939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1566.072468][ T3051] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6916'. [ 1566.140726][ T3058] FAULT_INJECTION: forcing a failure. [ 1566.140726][ T3058] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.140764][ T3058] CPU: 1 UID: 0 PID: 3058 Comm: syz.1.6920 Not tainted syzkaller #0 PREEMPT(full) [ 1566.140791][ T3058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1566.140805][ T3058] Call Trace: [ 1566.140815][ T3058] [ 1566.140826][ T3058] dump_stack_lvl+0xe8/0x150 [ 1566.140865][ T3058] should_fail_ex+0x410/0x560 [ 1566.140898][ T3058] _copy_from_user+0x2d/0xb0 [ 1566.140929][ T3058] ___sys_sendmsg+0x1c6/0x360 [ 1566.140960][ T3058] ? __lock_acquire+0x747/0x2de0 [ 1566.140991][ T3058] ? __pfx____sys_sendmsg+0x10/0x10 [ 1566.141060][ T3058] ? __fget_files+0x2a/0x420 [ 1566.141093][ T3058] ? __fget_files+0x3a2/0x420 [ 1566.141137][ T3058] __x64_sys_sendmsg+0x1b1/0x290 [ 1566.141172][ T3058] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1566.141225][ T3058] do_syscall_64+0x166/0x520 [ 1566.141251][ T3058] ? trace_irq_disable+0x3b/0x140 [ 1566.141285][ T3058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.141309][ T3058] ? clear_bhb_loop+0x70/0xc0 [ 1566.141339][ T3058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.141362][ T3058] RIP: 0033:0x7fbda619e159 [ 1566.141384][ T3058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1566.141405][ T3058] RSP: 002b:00007fbda7043028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1566.141430][ T3058] RAX: ffffffffffffffda RBX: 00007fbda6425fa0 RCX: 00007fbda619e159 [ 1566.141448][ T3058] RDX: 0000000000000040 RSI: 0000200000002c80 RDI: 0000000000000006 [ 1566.141463][ T3058] RBP: 00007fbda7043090 R08: 0000000000000000 R09: 0000000000000000 [ 1566.141478][ T3058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.141492][ T3058] R13: 00007fbda6426038 R14: 00007fbda6425fa0 R15: 00007ffe73cef678 [ 1566.141529][ T3058] [ 1566.370446][ T3052] syzkaller1: entered promiscuous mode [ 1566.370471][ T3052] syzkaller1: entered allmulticast mode [ 1566.374793][ T3055] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6918'. [ 1566.557694][ T759] tipc: Node number set to 2886997007 [ 1566.562369][ T3052] netlink: 'syz.3.6916': attribute type 1 has an invalid length. [ 1566.717687][ T3073] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6923'. [ 1566.764335][ T3075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6919'. [ 1566.767170][ T3073] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1566.903230][ T3073] netlink: 'syz.2.6923': attribute type 1 has an invalid length. [ 1567.003743][ T3086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1567.115249][ T3086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1567.153906][ T3086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1567.155548][ T3086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1567.234820][ T3086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1567.259892][ T3086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1567.261394][ T3086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1567.315293][ T3073] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1567.343223][ T3086] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1567.804961][ T3110] IPVS: set_ctl: invalid protocol: 58 255.255.255.255:20001 [ 1568.154568][ T3115] netlink: 116 bytes leftover after parsing attributes in process `syz.2.6928'. [ 1568.155136][ T3116] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6927'. [ 1568.657275][ T3124] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6929'. [ 1568.713612][ T3130] netlink: 'syz.1.6932': attribute type 2 has an invalid length. [ 1568.792001][ T3130] D†'|o: entered promiscuous mode [ 1569.101996][ T3143] netlink: 'syz.1.6932': attribute type 27 has an invalid length. [ 1569.265001][ T763] net_ratelimit: 11 callbacks suppressed [ 1569.265027][ T763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.401606][T28008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.443339][ T3151] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6936'. [ 1569.474583][ T8330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.476676][ T8330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1569.556471][ T3149] bond12: entered promiscuous mode [ 1569.556497][ T3149] bond12: entered allmulticast mode [ 1569.730521][ T3154] vlan4: entered promiscuous mode [ 1569.730549][ T3154] bond0: entered promiscuous mode [ 1569.730566][ T3154] bond_slave_0: entered promiscuous mode [ 1569.730800][ T3154] bond_slave_1: entered promiscuous mode [ 1570.257041][ T3169] syzkaller0: entered promiscuous mode [ 1570.257070][ T3169] syzkaller0: entered allmulticast mode [ 1570.293284][ T763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.600481][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.603301][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1570.690905][ T31] audit: type=1804 audit(1789265847.612:19): pid=3205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6945" name="/newroot/147/cgroup.controllers" dev="tmpfs" ino=779 res=1 errno=0 [ 1570.691462][ T31] audit: type=1800 audit(1789265847.612:20): pid=3205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6945" name="cgroup.controllers" dev="tmpfs" ino=779 res=0 errno=0 [ 1571.303125][ T3220] __nla_validate_parse: 1 callbacks suppressed [ 1571.303188][ T3220] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6946'. [ 1571.331134][ T763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.441914][ T3233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6948'. [ 1571.681144][ T3250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1571.681987][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1572.278094][ T3260] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 1572.535538][ T3257] batman_adv: batadv0: Adding interface: syzkaller0 [ 1572.535559][ T3257] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (299) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1572.535674][ T3257] batman_adv: batadv0: Interface activated: syzkaller0 [ 1572.825133][ T3241] wg2 speed is unknown, defaulting to 1000 [ 1572.972806][ T3277] netlink: 'syz.3.6955': attribute type 1 has an invalid length. [ 1573.179021][ T3283] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6958'. [ 1573.261557][ T3277] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1573.682577][ T3284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6955'. [ 1573.682641][ T3284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6955'. [ 1573.924403][ T3290] bond6: (slave dummy0): making interface the new active one [ 1574.012553][ T3290] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 1574.015680][ T3277] : renamed from dummy0 (while UP) [ 1574.228573][ T3297] bridge0: port 4(wlan1) entered blocking state [ 1574.228805][ T3297] bridge0: port 4(wlan1) entered disabled state [ 1574.229232][ T3297] mac80211_hwsim hwsim88 wlan1: entered allmulticast mode [ 1574.343952][ T3297] mac80211_hwsim hwsim88 wlan1: entered promiscuous mode [ 1574.364762][ T3297] bridge0: port 4(wlan1) entered blocking state [ 1574.364865][ T3297] bridge0: port 4(wlan1) entered forwarding state [ 1574.483326][ T3298] bridge0: port 4(wlan1) entered disabled state [ 1574.508995][ T3298] mac80211_hwsim hwsim88 wlan1 (unregistering): left allmulticast mode [ 1574.509039][ T3298] mac80211_hwsim hwsim88 wlan1 (unregistering): left promiscuous mode [ 1574.509269][ T3298] bridge0: port 4(wlan1) entered disabled state [ 1574.580324][ T761] net_ratelimit: 11 callbacks suppressed [ 1574.580348][ T761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1574.785892][ T3286] wg2 speed is unknown, defaulting to 1000 [ 1575.110616][ T3320] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6966'. [ 1575.257056][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.258102][ T977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.486144][T28008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.646185][ T763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.729690][ T3333] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1575.732611][ T3333] netlink: 'syz.5.6971': attribute type 1 has an invalid length. [ 1576.098883][ T3333] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1576.118819][T28007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.120935][ T7117] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.122104][T28019] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.124224][T28007] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.445242][ T8331] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.834562][ T3355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6977'. [ 1577.737046][ T3390] netlink: 'syz.5.6983': attribute type 3 has an invalid length. [ 1577.768556][ T3392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1577.770476][ T3392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6985'. [ 1577.912352][ T3393] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1577.993186][ T3397] netlink: 'syz.4.6986': attribute type 1 has an invalid length. [ 1578.043103][ T3397] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1578.098873][ T3397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6986'. [ 1578.101618][ T3397] netlink: 48 bytes leftover after parsing attributes in process `syz.4.6986'. [ 1578.263431][ T3402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6988'. [ 1578.839819][T27723] Bluetooth: hci4: command 0x0406 tx timeout [ 1579.345189][ T3411] x_tables: duplicate underflow at hook 1 [ 1579.799855][ T761] net_ratelimit: 9 callbacks suppressed [ 1579.799880][ T761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.800600][T13945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1579.804637][T13945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.382708][ T3451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7001'. [ 1580.406812][ T3451] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1580.472868][ T3451] netlink: 'syz.3.7001': attribute type 1 has an invalid length. [ 1580.668207][ T3451] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1580.840435][ T759] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.901727][T13947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.921995][T13947] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.071949][ T3457] bond7: (slave gretap1): making interface the new active one [ 1581.105354][ T3468] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7003'. [ 1581.148164][ T3457] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1581.474469][ T3471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6998'. [ 1581.504232][ T3477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1581.571024][T28008] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.909236][ T761] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.917215][ T3492] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7006'. [ 1582.141647][T13945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.141917][T13945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1582.601380][ T3505] netlink: 72 bytes leftover after parsing attributes in process `syz.2.7008'. [ 1582.664739][ T3511] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7009'. [ 1583.233435][ T3528] netlink: 'syz.3.7015': attribute type 3 has an invalid length. [ 1583.305652][ T3526] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7014'. [ 1583.509766][ T3531] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1583.512222][ T3531] IPv6: NLM_F_CREATE should be set when creating new route [ 1583.512378][ T3531] IPv6: NLM_F_CREATE should be set when creating new route [ 1583.994455][ T3531] bond15: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1584.020498][ T3531] bond15 (unregistering): Released all slaves [ 1584.135940][ T3554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7020'. [ 1584.335133][ T3558] geneve2: entered promiscuous mode [ 1584.847949][ T3573] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7024'. [ 1584.848015][ T3573] nbd: must specify at least one socket [ 1584.943081][ T3578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7026'. [ 1585.607241][ T3590] netlink: NAT attribute has 4 unknown bytes [ 1585.607282][ T3590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1585.784926][ T759] batman_adv: batadv0: Interface deactivated: vlan4 [ 1585.848758][ T3580] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1585.848786][ T3580] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1585.850877][ T3591] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7029'. [ 1586.025520][ T3580] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1586.025548][ T3580] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1586.100510][ T3597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1586.123929][ T3595] IPVS: set_ctl: invalid protocol: 576 0.32.0.0:8192 [ 1586.152506][ T3597] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1586.156100][ T3598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1586.266852][ T3580] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1586.266880][ T3580] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1586.465501][ T3580] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1586.465770][ T3580] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1586.557113][ T3580] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1586.557142][ T3580] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1586.631063][ T3611] bridge_slave_0: default FDB implementation only supports local addresses [ 1586.846870][ T3615] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7034'. [ 1586.846909][ T3615] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7034'. [ 1587.202662][ T3621] __nla_validate_parse: 1 callbacks suppressed [ 1587.202703][ T3621] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7035'. [ 1587.634588][ T3633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7036'. [ 1588.026052][ T3633] hsr_slave_1 (unregistering): left promiscuous mode [ 1588.940161][ T3664] vlan6: entered allmulticast mode [ 1588.982540][ T3665] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7042'. [ 1589.448456][ T3675] bridge_slave_0: default FDB implementation only supports local addresses [ 1589.965978][ T3691] syzkaller0: entered promiscuous mode [ 1589.966016][ T3691] syzkaller0: entered allmulticast mode [ 1590.308057][ T3696] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7049'. [ 1590.349799][ T3705] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7052'. [ 1590.603194][ T3693] netlink: 'syz.1.7049': attribute type 1 has an invalid length. [ 1590.603224][ T3693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7049'. [ 1590.724573][ T3720] lo: entered allmulticast mode [ 1590.949134][ T3729] lo: left allmulticast mode [ 1593.306707][ T3742] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7060'. [ 1593.558083][ T3746] xt_hashlimit: size too large, truncated to 1048576 [ 1593.844271][ T3745] xt_hashlimit: size too large, truncated to 1048576 [ 1593.965306][ T3767] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7068'. [ 1594.144705][ T3775] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7068'. [ 1595.201028][ T3787] wg2 speed is unknown, defaulting to 1000 [ 1595.460445][ T3798] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7075'. [ 1595.571861][ T3800] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 1595.591854][ T3800] netlink: 188 bytes leftover after parsing attributes in process `syz.2.7074'. [ 1596.184166][ T3815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7080'. [ 1596.465824][ T3819] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7083'. [ 1596.797841][ T3830] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1597.134974][ T3836] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7085'. [ 1597.435653][ T3840] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7087'. [ 1597.723080][ T3846] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7089'. [ 1598.407284][ T3857] netlink: 'syz.1.7093': attribute type 2 has an invalid length. [ 1598.426696][ T3857] netlink: 'syz.1.7093': attribute type 2 has an invalid length. [ 1598.426725][ T3857] __nla_validate_parse: 1 callbacks suppressed [ 1598.426740][ T3857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7093'. [ 1598.736746][ T3862] SET target dimension over the limit! [ 1598.853536][ T3866] SET target dimension over the limit! [ 1599.286759][ T3874] IPVS: set_ctl: invalid protocol: 115 172.30.0.5:20001 [ 1599.424316][ T3879] nbd: couldn't find device at index 65536 [ 1599.511176][ T3889] hsr0: entered allmulticast mode [ 1599.511203][ T3889] hsr_slave_0: entered allmulticast mode [ 1599.511225][ T3889] hsr_slave_1: entered allmulticast mode [ 1599.514537][ T3886] hsr0: left allmulticast mode [ 1599.514561][ T3886] hsr_slave_0: left allmulticast mode [ 1599.514587][ T3886] hsr_slave_1: left allmulticast mode [ 1599.560663][ T3888] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7098'. [ 1599.915906][ T3895] netlink: 'syz.5.7102': attribute type 1 has an invalid length. [ 1599.915932][ T3895] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7102'. [ 1599.915966][ T3895] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7102'. [ 1600.343446][ T3910] netlink: 148 bytes leftover after parsing attributes in process `syz.2.7107'. [ 1600.343615][ T3910] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7107'. [ 1600.343690][ T3910] netlink: 'syz.2.7107': attribute type 1 has an invalid length. [ 1601.570708][ T3962] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7119'. [ 1601.811139][ T3946] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7116'. [ 1602.146089][ T3980] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7122'. [ 1603.621568][ T4003] siw: device registration error -23 [ 1603.623789][ T4003] netlink: 68 bytes leftover after parsing attributes in process `syz.2.7126'. [ 1604.615216][ T4011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1604.615246][ T4011] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1604.615468][ T4011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1604.615488][ T4011] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1604.615680][ T4011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1604.615701][ T4011] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1604.680040][ T4011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1604.680070][ T4011] netlink: 164 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1604.680284][ T4011] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7128'. [ 1605.302754][ T4033] netlink: 'syz.4.7134': attribute type 4 has an invalid length. [ 1605.675479][ T4039] netlink: 'syz.4.7136': attribute type 2 has an invalid length. [ 1605.953349][ T4049] syzkaller0: entered promiscuous mode [ 1605.953377][ T4049] syzkaller0: entered allmulticast mode [ 1606.223363][ T4064] siw: device registration error -23 [ 1606.463022][ T4063] FAULT_INJECTION: forcing a failure. [ 1606.463022][ T4063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1606.463061][ T4063] CPU: 1 UID: 0 PID: 4063 Comm: syz.2.7142 Not tainted syzkaller #0 PREEMPT(full) [ 1606.463088][ T4063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1606.463102][ T4063] Call Trace: [ 1606.463113][ T4063] [ 1606.463123][ T4063] dump_stack_lvl+0xe8/0x150 [ 1606.463165][ T4063] should_fail_ex+0x410/0x560 [ 1606.463198][ T4063] _copy_from_user+0x2d/0xb0 [ 1606.463241][ T4063] ___sys_sendmsg+0x1c6/0x360 [ 1606.463272][ T4063] ? __lock_acquire+0x747/0x2de0 [ 1606.463302][ T4063] ? __pfx____sys_sendmsg+0x10/0x10 [ 1606.463373][ T4063] ? __fget_files+0x2a/0x420 [ 1606.463404][ T4063] ? __fget_files+0x3a2/0x420 [ 1606.463446][ T4063] __x64_sys_sendmsg+0x1b1/0x290 [ 1606.463481][ T4063] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1606.463535][ T4063] do_syscall_64+0x166/0x520 [ 1606.463561][ T4063] ? trace_irq_disable+0x3b/0x140 [ 1606.463585][ T4063] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.463610][ T4063] ? clear_bhb_loop+0x70/0xc0 [ 1606.463639][ T4063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1606.463664][ T4063] RIP: 0033:0x7f42dff9e159 [ 1606.463685][ T4063] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1606.463706][ T4063] RSP: 002b:00007f42e0dd5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1606.463733][ T4063] RAX: ffffffffffffffda RBX: 00007f42e0226090 RCX: 00007f42dff9e159 [ 1606.463751][ T4063] RDX: 0000000000040004 RSI: 0000200000000280 RDI: 0000000000000008 [ 1606.463767][ T4063] RBP: 00007f42e0dd5090 R08: 0000000000000000 R09: 0000000000000000 [ 1606.463783][ T4063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1606.463797][ T4063] R13: 00007f42e0226128 R14: 00007f42e0226090 R15: 00007fffea4e53a8 [ 1606.463833][ T4063] [ 1607.034554][ T4054] vlan11: entered allmulticast mode [ 1607.034583][ T4054] geneve0: entered allmulticast mode [ 1609.188856][ T4089] __nla_validate_parse: 131 callbacks suppressed [ 1609.188881][ T4089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7150'. [ 1609.188904][ T4089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7150'. [ 1609.188950][ T4089] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7150'. [ 1609.189553][ T4096] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7151'. [ 1612.474665][ T4113] Bluetooth: hci0: unsupported parameter 5135 [ 1612.474727][ T4113] Bluetooth: hci0: unsupported parameter 8192 [ 1612.474792][ T4113] Bluetooth: hci0: unsupported parameter 5135 [ 1612.474828][ T4113] Bluetooth: hci0: unsupported parameter 8192 [ 1612.661803][ T4113] Bluetooth: hci0: unsupported parameter 5135 [ 1612.661868][ T4113] Bluetooth: hci0: unsupported parameter 8192 [ 1612.661903][ T4113] Bluetooth: hci0: unsupported parameter 5135 [ 1612.661939][ T4113] Bluetooth: hci0: unsupported parameter 8192 [ 1612.957318][ T4117] IPVS: set_ctl: invalid protocol: 12 172.20.20.170:20003 [ 1613.532802][ T4128] FAULT_INJECTION: forcing a failure. [ 1613.532802][ T4128] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.532875][ T4128] CPU: 0 UID: 0 PID: 4128 Comm: syz.3.7159 Not tainted syzkaller #0 PREEMPT(full) [ 1613.532905][ T4128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1613.532920][ T4128] Call Trace: [ 1613.532930][ T4128] [ 1613.532940][ T4128] dump_stack_lvl+0xe8/0x150 [ 1613.532980][ T4128] should_fail_ex+0x410/0x560 [ 1613.533013][ T4128] should_failslab+0xa8/0x100 [ 1613.533043][ T4128] ? skb_clone+0x212/0x3a0 [ 1613.533075][ T4128] kmem_cache_alloc_noprof+0xa1/0x600 [ 1613.533121][ T4128] ? skb_clone+0x212/0x3a0 [ 1613.533160][ T4128] skb_clone+0x212/0x3a0 [ 1613.533195][ T4128] __netlink_deliver_tap+0x413/0x860 [ 1613.533243][ T4128] ? netlink_deliver_tap+0x2e/0x1b0 [ 1613.533279][ T4128] netlink_deliver_tap+0x19c/0x1b0 [ 1613.533314][ T4128] netlink_unicast+0x781/0x940 [ 1613.533358][ T4128] netlink_sendmsg+0x813/0xb40 [ 1613.533403][ T4128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.533446][ T4128] ? apparmor_socket_sendmsg+0x98/0x360 [ 1613.533475][ T4128] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.533508][ T4128] sock_sendmsg_nosec+0x13a/0x180 [ 1613.533549][ T4128] ____sys_sendmsg+0x54e/0x850 [ 1613.533586][ T4128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1613.533626][ T4128] ? import_iovec+0x73/0xa0 [ 1613.533660][ T4128] ___sys_sendmsg+0x2a5/0x360 [ 1613.533688][ T4128] ? __lock_acquire+0x747/0x2de0 [ 1613.533717][ T4128] ? __pfx____sys_sendmsg+0x10/0x10 [ 1613.533787][ T4128] ? __fget_files+0x2a/0x420 [ 1613.533819][ T4128] ? __fget_files+0x3a2/0x420 [ 1613.533863][ T4128] __x64_sys_sendmsg+0x1b1/0x290 [ 1613.533895][ T4128] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1613.533946][ T4128] do_syscall_64+0x166/0x520 [ 1613.533972][ T4128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.533996][ T4128] ? clear_bhb_loop+0x70/0xc0 [ 1613.534024][ T4128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.534046][ T4128] RIP: 0033:0x7f616359e159 [ 1613.534067][ T4128] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.534087][ T4128] RSP: 002b:00007f616437f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.534121][ T4128] RAX: ffffffffffffffda RBX: 00007f6163825fa0 RCX: 00007f616359e159 [ 1613.534138][ T4128] RDX: 0000000000000800 RSI: 0000200000004340 RDI: 0000000000000003 [ 1613.534153][ T4128] RBP: 00007f616437f090 R08: 0000000000000000 R09: 0000000000000000 [ 1613.534168][ T4128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1613.534182][ T4128] R13: 00007f6163826038 R14: 00007f6163825fa0 R15: 00007ffc1d36f5f8 [ 1613.534218][ T4128] [ 1614.238253][ T31] audit: type=1800 audit(1789265891.152:21): pid=4133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7160" name="memory.events" dev="tmpfs" ino=2417 res=0 errno=0 [ 1614.239566][ T31] audit: type=1804 audit(1789265891.162:22): pid=4133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7160" name="/newroot/470/memory.events" dev="tmpfs" ino=2417 res=1 errno=0 [ 1614.514830][ T4137] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7162'. [ 1614.565619][ T4120] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1614.789242][ T4137] netlink: 'syz.3.7162': attribute type 106 has an invalid length. [ 1615.876614][ T4141] netlink: 165 bytes leftover after parsing attributes in process `syz.4.7163'. [ 1615.980646][ T4144] netlink: 388 bytes leftover after parsing attributes in process `syz.1.7164'. [ 1616.646708][ T4164] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7167'. [ 1617.724702][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1617.728441][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1617.735417][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1617.741836][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1617.746543][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1617.754384][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1617.757967][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1617.765880][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1617.772105][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1617.775233][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1620.483794][ T4185] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7169'. [ 1620.739860][ T4188] netlink: 'syz.4.7170': attribute type 2 has an invalid length. [ 1620.739922][ T4188] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7170'. [ 1621.100121][ T4190] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7171'. [ 1621.173458][ T4190] syzkaller0: entered promiscuous mode [ 1621.173522][ T4190] syzkaller0: entered allmulticast mode [ 1622.284054][ T4193] FAULT_INJECTION: forcing a failure. [ 1622.284054][ T4193] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.284128][ T4193] CPU: 0 UID: 0 PID: 4193 Comm: syz.5.7172 Not tainted syzkaller #0 PREEMPT(full) [ 1622.284159][ T4193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1622.284174][ T4193] Call Trace: [ 1622.284184][ T4193] [ 1622.284194][ T4193] dump_stack_lvl+0xe8/0x150 [ 1622.284235][ T4193] should_fail_ex+0x410/0x560 [ 1622.284268][ T4193] should_failslab+0xa8/0x100 [ 1622.284299][ T4193] __kmalloc_cache_noprof+0xa3/0x600 [ 1622.284322][ T4193] ? __pfx___mutex_lock+0x10/0x10 [ 1622.284351][ T4193] ? genl_start+0x1c9/0x6d0 [ 1622.284375][ T4193] ? genl_start+0x1c9/0x6d0 [ 1622.284407][ T4193] genl_start+0x1c9/0x6d0 [ 1622.284450][ T4193] __netlink_dump_start+0x442/0x7b0 [ 1622.284491][ T4193] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1622.284524][ T4193] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1622.284560][ T4193] ? __pfx_genl_start+0x10/0x10 [ 1622.284583][ T4193] ? __pfx_genl_dumpit+0x10/0x10 [ 1622.284607][ T4193] ? __pfx_genl_done+0x10/0x10 [ 1622.284637][ T4193] ? bpf_lsm_capable+0x9/0x20 [ 1622.284659][ T4193] ? security_capable+0x7e/0x2c0 [ 1622.284695][ T4193] genl_rcv_msg+0x5e1/0x7a0 [ 1622.284729][ T4193] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1622.284755][ T4193] ? __pfx_batadv_orig_dump+0x10/0x10 [ 1622.284898][ T4193] netlink_rcv_skb+0x226/0x4a0 [ 1622.284933][ T4193] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1622.284962][ T4193] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1622.285013][ T4193] ? down_read+0x2be/0x330 [ 1622.285045][ T4193] genl_rcv+0x28/0x40 [ 1622.285069][ T4193] netlink_unicast+0x7bd/0x940 [ 1622.285112][ T4193] netlink_sendmsg+0x813/0xb40 [ 1622.285157][ T4193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.285201][ T4193] ? apparmor_socket_sendmsg+0x98/0x360 [ 1622.285230][ T4193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.285264][ T4193] sock_sendmsg_nosec+0x13a/0x180 [ 1622.285304][ T4193] ____sys_sendmsg+0x54e/0x850 [ 1622.285340][ T4193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1622.285382][ T4193] ? import_iovec+0x73/0xa0 [ 1622.285415][ T4193] ___sys_sendmsg+0x2a5/0x360 [ 1622.285452][ T4193] ? __lock_acquire+0x747/0x2de0 [ 1622.285482][ T4193] ? __pfx____sys_sendmsg+0x10/0x10 [ 1622.285556][ T4193] ? kasan_check_range+0x97/0x2c0 [ 1622.285596][ T4193] __x64_sys_sendmsg+0x1b1/0x290 [ 1622.285631][ T4193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1622.285686][ T4193] do_syscall_64+0x166/0x520 [ 1622.285712][ T4193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.285737][ T4193] ? clear_bhb_loop+0x70/0xc0 [ 1622.285767][ T4193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.285791][ T4193] RIP: 0033:0x7f9f0799e159 [ 1622.285813][ T4193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.285834][ T4193] RSP: 002b:00007f9f08887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.285860][ T4193] RAX: ffffffffffffffda RBX: 00007f9f07c25fa0 RCX: 00007f9f0799e159 [ 1622.285876][ T4193] RDX: 0000000000000800 RSI: 0000200000004340 RDI: 0000000000000003 [ 1622.285890][ T4193] RBP: 00007f9f08887090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.285905][ T4193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.285919][ T4193] R13: 00007f9f07c26038 R14: 00007f9f07c25fa0 R15: 00007ffd5084c698 [ 1622.285954][ T4193] [ 1622.728469][ C1] net_ratelimit: 1311 callbacks suppressed [ 1622.728492][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1622.735872][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1622.740345][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1622.743688][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1622.747067][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1622.754063][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1622.758752][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1622.767698][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1622.776194][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1622.781450][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1623.658560][ T4195] xt_IDLETIMER: timeout value is too big [ 1625.650385][ T4205] wg2 speed is unknown, defaulting to 1000 [ 1626.490419][ T4212] netlink: 100 bytes leftover after parsing attributes in process `syz.3.7179'. [ 1626.490717][ T4212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7179'. [ 1627.247083][ T4216] wg2 speed is unknown, defaulting to 1000 [ 1627.737930][ C1] net_ratelimit: 3062 callbacks suppressed [ 1627.737957][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1627.738692][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1627.743303][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1627.744146][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1627.744950][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1627.756729][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1627.758926][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1627.760791][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1627.767944][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1627.768674][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1629.335604][ T4235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7181'. [ 1629.516636][ T4235] gre0: left promiscuous mode [ 1629.516698][ T4235] gre0: left allmulticast mode [ 1630.471424][ T4242] netlink: 71 bytes leftover after parsing attributes in process `syz.5.7183'. [ 1630.563999][ T4235] bridge0: port 4(veth1) entered disabled state [ 1630.566421][ T4235] bridge0: port 3(veth0) entered disabled state [ 1630.569144][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 1630.571066][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 1630.759983][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1630.780855][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1631.055812][ T4235] veth7: left allmulticast mode [ 1631.073242][ T4235] bridge1: left promiscuous mode [ 1631.086011][ T4235] veth9: left promiscuous mode [ 1631.094233][ T4235] bridge2: left promiscuous mode [ 1631.094262][ T4235] bridge2: left allmulticast mode [ 1631.188453][T13947] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 256 - 0 [ 1631.188497][T13947] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.188547][T13947] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 256 - 0 [ 1631.188579][T13947] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.188622][T13947] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 256 - 0 [ 1631.188661][T13947] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1631.188703][T13947] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 256 - 0 [ 1631.188734][T13947] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1632.330673][ T4268] nbd7: detected capacity change from 0 to 63 [ 1632.336911][ T4268] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7190'. [ 1632.346399][T27723] block nbd7: Receive control failed (result -32) [ 1632.361168][ T1695] block nbd7: Dead connection, failed to find a fallback [ 1632.361239][ T1695] block nbd7: shutting down sockets [ 1632.361283][ T1695] blk_print_req_error: 129 callbacks suppressed [ 1632.361320][ T1695] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.361408][ T1695] buffer_io_error: 138 callbacks suppressed [ 1632.361442][ T1695] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1632.418940][ T4945] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.418980][ T4945] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1632.419126][ T4945] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.419155][ T4945] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1632.419262][ T4945] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.422808][ T4945] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1632.423043][ T4945] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.423122][ T4945] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1632.423237][ T4945] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.423266][ T4945] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1632.423371][ T4945] I/O error, dev nbd7, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.423399][ T4945] Buffer I/O error on dev nbd7, logical block 2, async page read [ 1632.423503][ T4945] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.423531][ T4945] Buffer I/O error on dev nbd7, logical block 3, async page read [ 1632.423647][ T4945] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.423676][ T4945] Buffer I/O error on dev nbd7, logical block 0, async page read [ 1632.423775][ T4945] I/O error, dev nbd7, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1632.423801][ T4945] Buffer I/O error on dev nbd7, logical block 1, async page read [ 1632.487982][ T4181] ldm_validate_partition_table(): Disk read failed. [ 1632.507474][ T4181] Dev nbd7: unable to read RDB block 0 [ 1632.586860][ T4181] nbd7: unable to read partition table [ 1632.653140][ T4258] wg2 speed is unknown, defaulting to 1000 [ 1632.716293][ T4181] ldm_validate_partition_table(): Disk read failed. [ 1632.741860][ T4181] Dev nbd7: unable to read RDB block 0 [ 1632.743751][ T4181] nbd7: unable to read partition table [ 1633.456540][ T4281] netlink: 'syz.5.7193': attribute type 21 has an invalid length. [ 1634.263849][ T4296] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7196'. [ 1635.380872][ T4314] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7200'. [ 1635.380941][ T4314] netlink: 'syz.1.7200': attribute type 9 has an invalid length. [ 1635.972070][ T4329] FAULT_INJECTION: forcing a failure. [ 1635.972070][ T4329] name failslab, interval 1, probability 0, space 0, times 0 [ 1635.972109][ T4329] CPU: 1 UID: 0 PID: 4329 Comm: syz.4.7204 Not tainted syzkaller #0 PREEMPT(full) [ 1635.972136][ T4329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1635.972151][ T4329] Call Trace: [ 1635.972162][ T4329] [ 1635.972172][ T4329] dump_stack_lvl+0xe8/0x150 [ 1635.972214][ T4329] should_fail_ex+0x410/0x560 [ 1635.972256][ T4329] should_failslab+0xa8/0x100 [ 1635.972287][ T4329] ? skb_clone+0x212/0x3a0 [ 1635.972320][ T4329] kmem_cache_alloc_noprof+0xa1/0x600 [ 1635.972361][ T4329] ? skb_clone+0x212/0x3a0 [ 1635.972400][ T4329] skb_clone+0x212/0x3a0 [ 1635.972436][ T4329] __netlink_deliver_tap+0x413/0x860 [ 1635.972484][ T4329] ? netlink_deliver_tap+0x2e/0x1b0 [ 1635.972521][ T4329] netlink_deliver_tap+0x19c/0x1b0 [ 1635.972561][ T4329] __netlink_sendskb+0x47/0x90 [ 1635.972594][ T4329] netlink_dump+0xa8c/0xee0 [ 1635.972642][ T4329] ? __pfx_netlink_dump+0x10/0x10 [ 1635.972690][ T4329] ? genl_start+0x497/0x6d0 [ 1635.972724][ T4329] __netlink_dump_start+0x589/0x7b0 [ 1635.972766][ T4329] genl_family_rcv_msg_dumpit+0x213/0x310 [ 1635.972800][ T4329] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 1635.972838][ T4329] ? __pfx_genl_start+0x10/0x10 [ 1635.972862][ T4329] ? __pfx_genl_dumpit+0x10/0x10 [ 1635.972885][ T4329] ? __pfx_genl_done+0x10/0x10 [ 1635.972917][ T4329] ? bpf_lsm_capable+0x9/0x20 [ 1635.972939][ T4329] ? security_capable+0x7e/0x2c0 [ 1635.972975][ T4329] genl_rcv_msg+0x5e1/0x7a0 [ 1635.973010][ T4329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1635.973037][ T4329] ? __pfx_batadv_orig_dump+0x10/0x10 [ 1635.973081][ T4329] netlink_rcv_skb+0x226/0x4a0 [ 1635.973117][ T4329] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1635.973146][ T4329] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1635.973200][ T4329] ? down_read+0x2be/0x330 [ 1635.973234][ T4329] genl_rcv+0x28/0x40 [ 1635.973266][ T4329] netlink_unicast+0x7bd/0x940 [ 1635.973311][ T4329] netlink_sendmsg+0x813/0xb40 [ 1635.973376][ T4329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1635.973423][ T4329] ? apparmor_socket_sendmsg+0x98/0x360 [ 1635.973452][ T4329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1635.973487][ T4329] sock_sendmsg_nosec+0x13a/0x180 [ 1635.973529][ T4329] ____sys_sendmsg+0x54e/0x850 [ 1635.973566][ T4329] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1635.973609][ T4329] ? import_iovec+0x73/0xa0 [ 1635.973644][ T4329] ___sys_sendmsg+0x2a5/0x360 [ 1635.973674][ T4329] ? __lock_acquire+0x747/0x2de0 [ 1635.973705][ T4329] ? __pfx____sys_sendmsg+0x10/0x10 [ 1635.973779][ T4329] ? __fget_files+0x2a/0x420 [ 1635.973813][ T4329] ? __fget_files+0x3a2/0x420 [ 1635.973859][ T4329] __x64_sys_sendmsg+0x1b1/0x290 [ 1635.973894][ T4329] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1635.973953][ T4329] do_syscall_64+0x166/0x520 [ 1635.973978][ T4329] ? trace_irq_disable+0x3b/0x140 [ 1635.974002][ T4329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.974028][ T4329] ? clear_bhb_loop+0x70/0xc0 [ 1635.974058][ T4329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1635.974083][ T4329] RIP: 0033:0x7f3e1179e159 [ 1635.974107][ T4329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1635.974128][ T4329] RSP: 002b:00007f3e125a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1635.974155][ T4329] RAX: ffffffffffffffda RBX: 00007f3e11a25fa0 RCX: 00007f3e1179e159 [ 1635.974173][ T4329] RDX: 0000000000000800 RSI: 0000200000004340 RDI: 0000000000000003 [ 1635.974189][ T4329] RBP: 00007f3e125a7090 R08: 0000000000000000 R09: 0000000000000000 [ 1635.974204][ T4329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1635.974219][ T4329] R13: 00007f3e11a26038 R14: 00007f3e11a25fa0 R15: 00007ffc2fd62268 [ 1635.974266][ T4329] [ 1636.476409][ T4333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7207'. [ 1636.564379][ T4330] siw: device registration error -23 [ 1637.085150][ T4357] netlink: 'syz.4.7212': attribute type 10 has an invalid length. [ 1637.132093][ T4357] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.151426][ T4357] bond0: (slave team0): Enslaving as an active interface with an up link [ 1637.760281][ T4384] xt_policy: output policy not valid in PREROUTING and INPUT [ 1637.775638][ T4384] netlink: 'syz.3.7216': attribute type 1 has an invalid length. [ 1637.861908][ T4388] netlink: 'syz.5.7215': attribute type 1 has an invalid length. [ 1637.862140][ T4388] netlink: 224 bytes leftover after parsing attributes in process `syz.5.7215'. [ 1638.022743][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1638.040057][ T4374] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1638.127306][ T4394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7218'. [ 1638.284111][ T4388] netlink: 'syz.5.7215': attribute type 2 has an invalid length. [ 1638.466500][ T4394] bond8: option broadcast_neighbor: invalid value (3) [ 1638.493533][ T4394] bond8 (unregistering): Released all slaves [ 1638.781376][ T4401] bond7: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1638.853758][ T4420] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7219'. [ 1638.875128][ T4404] siw: device registration error -23 [ 1639.106105][ T4425] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7222'. [ 1639.599089][ T4401] bond7 (unregistering): Released all slaves [ 1639.894837][ T4420] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1639.902876][ T8331] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.963981][ T4439] veth0_virt_wifi: entered promiscuous mode [ 1640.028132][ T4439] veth0_virt_wifi: left promiscuous mode [ 1640.088560][ T8331] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.103414][ T8331] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.103513][ T8331] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.542063][ T4464] netlink: 'syz.2.7229': attribute type 1 has an invalid length. [ 1640.653970][ T4464] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1640.964680][ T4464] bond13: (slave geneve2): making interface the new active one [ 1640.989131][ T4464] bond13: (slave geneve2): Enslaving as an active interface with an up link [ 1641.121522][ T4474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7230'. [ 1641.609674][ T4484] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1641.726891][ T4484] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1641.735219][ T4484] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1641.735495][ T4484] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1641.762492][ T4484] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1641.762751][ T4484] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1641.823842][ T4484] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1641.824091][ T4484] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1641.824317][ T4484] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1641.859026][ T4484] netlink: 'syz.1.7234': attribute type 1 has an invalid length. [ 1641.972099][ T4498] dummy0: entered promiscuous mode [ 1641.972127][ T4498] dummy0: entered allmulticast mode [ 1642.008792][ T4498] team0: Port device dummy0 removed [ 1642.009352][ T4498] net_ratelimit: 2111 callbacks suppressed [ 1642.009370][ T4498] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1642.342063][ T4508] siw: device registration error -23 [ 1642.733692][ T4517] netlink: 228 bytes leftover after parsing attributes in process `syz.2.7238'. [ 1642.955421][ T4521] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 1643.130653][ T4524] vxcan2: entered allmulticast mode [ 1643.645109][ T4541] netlink: 256 bytes leftover after parsing attributes in process `syz.3.7247'. [ 1644.076607][ T4563] xt_ecn: cannot match TCP bits for non-tcp packets [ 1644.190709][ T4566] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1644.194014][ T4566] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1645.090255][ T4576] siw: device registration error -23 [ 1646.416304][ T4616] batadv_slave_1: entered promiscuous mode [ 1646.509462][ T4623] validate_nla: 25 callbacks suppressed [ 1646.509487][ T4623] netlink: 'syz.2.7264': attribute type 1 has an invalid length. [ 1647.387919][ T4647] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7268'. [ 1648.199553][ T4656] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 1648.631016][ T4672] netlink: 116 bytes leftover after parsing attributes in process `syz.2.7275'. [ 1648.756684][ T4675] netlink: 84 bytes leftover after parsing attributes in process `syz.2.7278'. [ 1648.975911][ T4680] vxcan1: entered promiscuous mode [ 1649.592284][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7283'. [ 1649.610312][ T4697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7283'. [ 1649.821414][ T4705] x_tables: duplicate underflow at hook 3 [ 1649.833437][ T4702] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7282'. [ 1649.972379][ T4701] ip6erspan0: entered allmulticast mode [ 1650.372782][ T4702] vlan6: entered promiscuous mode [ 1650.372846][ T4702] ip6gretap0: entered promiscuous mode [ 1650.408694][ T4706] syzkaller1: entered allmulticast mode [ 1655.166811][ T4717] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1655.371639][ T4730] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7289'. [ 1655.607158][ T4743] netlink: 'syz.4.7295': attribute type 1 has an invalid length. [ 1655.800238][ T4749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7295'. [ 1655.894655][ T4743] macvlan2: entered promiscuous mode [ 1655.894716][ T4743] macvlan2: entered allmulticast mode [ 1656.112566][ T4761] netlink: 'syz.5.7296': attribute type 1 has an invalid length. [ 1656.143992][ T4759] netlink: 'syz.3.7297': attribute type 12 has an invalid length. [ 1656.824013][ T4780] xt_hashlimit: size too large, truncated to 1048576 [ 1657.254845][ T4795] ip_tables: iptables: counters copy to user failed while replacing table [ 1658.241871][ T4829] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7305'. [ 1658.241903][ T4829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7305'. [ 1658.830097][ T4856] netlink: 332 bytes leftover after parsing attributes in process `syz.4.7309'. [ 1658.830255][ T4856] netlink: 'syz.4.7309': attribute type 9 has an invalid length. [ 1658.830289][ T4856] netlink: 108 bytes leftover after parsing attributes in process `syz.4.7309'. [ 1658.830323][ T4856] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7309'. [ 1659.168143][ T4860] nbd5: detected capacity change from 0 to 63 [ 1659.213081][ T4863] block nbd5: NBD_DISCONNECT [ 1659.241419][ T4863] block nbd5: Disconnected due to user request. [ 1659.241484][ T4863] block nbd5: shutting down sockets [ 1659.260035][ T1695] blk_print_req_error: 78 callbacks suppressed [ 1659.260057][ T1695] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1659.260098][ T1695] buffer_io_error: 138 callbacks suppressed [ 1659.260112][ T1695] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1659.301262][ C0] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 3 prio class 2 [ 1659.301355][ C0] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1659.301413][ C0] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1659.301468][ C0] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1659.303562][ T1695] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1659.303597][ T1695] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1659.303729][ T1695] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1659.303758][ T1695] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1659.303858][ T1695] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1659.303886][ T1695] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1659.303988][ T1695] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1659.304016][ T1695] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1659.311354][ T1695] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1659.311442][ T1695] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1659.311495][ T1695] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1659.316270][ T1695] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1659.354147][ T1695] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1659.354897][ T1695] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 1659.362766][ T4767] ldm_validate_partition_table(): Disk read failed. [ 1659.369718][ T4767] Dev nbd5: unable to read RDB block 0 [ 1659.370481][ T4767] nbd5: unable to read partition table [ 1659.555991][ T4767] ldm_validate_partition_table(): Disk read failed. [ 1659.565337][ T4860] netlink: 'syz.5.7312': attribute type 1 has an invalid length. [ 1659.565573][ T4767] Dev nbd5: unable to read RDB block 0 [ 1659.582675][ T4767] nbd5: unable to read partition table [ 1659.923575][ T4860] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1660.036319][ T4863] bond15: (slave veth3): Enslaving as an active interface with a down link [ 1660.163218][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.163304][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.285862][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.289720][ T4865] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1660.289828][ T4865] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1660.289953][ T4865] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1660.511001][ T4865] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 1660.607181][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.622653][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.635349][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.637288][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.639213][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.667721][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.755958][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.812916][ T4865] lo speed is unknown, defaulting to 1000 [ 1660.862527][ T4865] lo speed is unknown, defaulting to 1000 [ 1661.209626][ T4886] debugfs: '.�PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 1661.356535][ T4890] netlink: 'syz.3.7319': attribute type 1 has an invalid length. [ 1661.565911][ T4898] netlink: 'syz.3.7319': attribute type 1 has an invalid length. [ 1661.615169][ T4890] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1661.755840][ T4894] macvlan2: entered promiscuous mode [ 1661.755904][ T4894] macvlan2: entered allmulticast mode [ 1661.780072][ T4894] bond8: entered promiscuous mode [ 1661.780753][ T4894] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1661.875361][ T4894] bond8: left promiscuous mode [ 1662.103998][ T4902] macvlan2: entered promiscuous mode [ 1662.104026][ T4902] macvlan2: entered allmulticast mode [ 1662.106263][ T4902] bond8: entered promiscuous mode [ 1662.133360][ T4902] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1662.214670][ T4902] bond8: left promiscuous mode [ 1662.999181][ T4934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7326'. [ 1663.038621][ T4926] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7325'. [ 1663.828619][ T4959] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7330'. [ 1663.842171][ T4959] x_tables: unsorted entry at hook 1 [ 1664.696685][ T4980] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7335'. [ 1664.936372][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1664.949111][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1664.949387][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1664.949652][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1664.949904][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1664.950157][ T4978] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7334'. [ 1665.126916][ T4995] openvswitch: netlink: EtherType 300 is less than min 600 [ 1665.555101][ T5004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1667.411366][ T5054] Bluetooth: hci0: unsupported parameter 5135 [ 1667.411394][ T5054] Bluetooth: hci0: invalid length 2, exp 1 for type 31 [ 1667.483781][ T5052] syzkaller0: entered promiscuous mode [ 1667.483807][ T5052] syzkaller0: entered allmulticast mode [ 1668.120266][ T5067] netlink: 'syz.1.7357': attribute type 1 has an invalid length. [ 1668.441448][ T5067] bond8: entered promiscuous mode [ 1668.442007][ T5067] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1669.119837][ T5074] bond8: (slave bridge4): making interface the new active one [ 1669.119869][ T5074] bridge4: entered promiscuous mode [ 1669.121802][ T5074] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 1669.170321][ T5082] __nla_validate_parse: 32 callbacks suppressed [ 1669.170349][ T5082] netlink: 820 bytes leftover after parsing attributes in process `syz.5.7361'. [ 1669.284844][ T5082] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7361'. [ 1669.686729][ T5088] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1669.876512][ T5096] netlink: 'syz.4.7362': attribute type 3 has an invalid length. [ 1669.876540][ T5096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7362'. [ 1669.898244][ T5088] ovs-s: entered promiscuous mode [ 1669.923158][ T5095] openvswitch: ovs-s: Dropping previously announced user features [ 1669.975973][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7366'. [ 1670.260661][ T5106] netlink: 'syz.3.7367': attribute type 10 has an invalid length. [ 1670.267081][ T5106] bond6: (slave ): Releasing active interface [ 1670.355647][ T5108] netlink: 'syz.3.7367': attribute type 10 has an invalid length. [ 1670.398059][ T5106] team0: Port device  added [ 1670.624306][ T5120] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7369'. [ 1671.057052][ T5108] team0: Port device  removed [ 1671.899492][ T3374] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.899597][ T3374] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.899639][ T3374] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1671.899679][ T3374] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1672.313557][ T5160] netlink: 116 bytes leftover after parsing attributes in process `syz.5.7381'. [ 1672.406061][ T5167] netlink: 'syz.3.7382': attribute type 1 has an invalid length. [ 1672.804665][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7385'. [ 1672.804706][ T5179] netlink: 'syz.1.7385': attribute type 32 has an invalid length. [ 1672.806229][ T5179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7385'. [ 1672.806261][ T5179] netlink: 'syz.1.7385': attribute type 32 has an invalid length. [ 1672.960638][ T5182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7386'. [ 1673.049737][ T5184] netlink: 'syz.5.7387': attribute type 1 has an invalid length. [ 1673.050781][ T5185] netlink: 'syz.5.7387': attribute type 1 has an invalid length. [ 1673.177105][ T5184] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1674.130586][ T5233] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1674.130653][ T5233] IPv6: NLM_F_CREATE should be set when creating new route [ 1674.133310][ T5233] IPv6: NLM_F_CREATE should be set when creating new route [ 1674.648733][ T5248] netlink: 'syz.2.7400': attribute type 1 has an invalid length. [ 1674.650306][ T5247] netlink: 'syz.2.7400': attribute type 1 has an invalid length. [ 1674.885165][ T5253] ip6erspan0: entered allmulticast mode [ 1674.952533][ T5258] bond17: option ad_user_port_key: invalid value (65535) [ 1674.952564][ T5258] bond17: option ad_user_port_key: allowed values 0 - 1023 [ 1674.978356][ T5258] bond17 (unregistering): Released all slaves [ 1675.045989][ T5262] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1675.411236][ T5273] __nla_validate_parse: 4 callbacks suppressed [ 1675.411260][ T5273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7408'. [ 1675.411283][ T5273] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7408'. [ 1675.528421][ T5276] macvtap1: entered allmulticast mode [ 1675.528484][ T5276] veth0_to_bridge: entered allmulticast mode [ 1675.612936][ T5276] veth0_to_bridge: left allmulticast mode [ 1676.963094][ T5310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1676.975911][ T5310] 8021q: adding VLAN 0 to HW filter on device team0 [ 1676.994276][ T5310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1677.017700][ T5321] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7418'. [ 1677.101332][ T5326] netlink: 64 bytes leftover after parsing attributes in process `syz.1.7416'. [ 1677.223550][ T5310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1677.235862][ T5310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1677.268155][ T5310] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1677.268185][ T5310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1677.274997][ T5310] veth1_vlan: left promiscuous mode [ 1677.276632][ T5310] veth0_vlan: left promiscuous mode [ 1677.313889][ T5310] veth0_vlan: entered promiscuous mode [ 1677.316813][ T5310] veth1_vlan: entered promiscuous mode [ 1677.336546][ T5310] veth1_macvtap: left promiscuous mode [ 1677.344551][ T5310] veth0_macvtap: left promiscuous mode [ 1677.346286][ T5310] veth0_macvtap: entered promiscuous mode [ 1677.360528][ T5310] veth1_macvtap: entered promiscuous mode [ 1677.378417][ T5310] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1677.379772][ T5310] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1677.381087][ T5310] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1677.383003][ T5310] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1677.419234][ T5310] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1677.426750][ T5310] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1677.444232][ T5310] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1677.455184][ T5310] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1677.472973][ T5310] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1677.489118][ T5310] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1677.494165][ T5310] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1677.516181][ T3373] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1677.520744][ T5310] vlan6: left promiscuous mode [ 1677.520769][ T5310] ip6gretap0: left promiscuous mode [ 1677.552947][T13947] bond1: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 1677.553277][T13947] bond1: (slave veth7): making interface the new active one [ 1677.574260][T13947] bond1: active interface up! [ 1677.581111][ T761] gretap1: entered promiscuous mode [ 1677.586864][ T1119] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 1677.586900][ T1119] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1677.586930][ T1119] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.586974][ T1119] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 1677.587003][ T1119] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1677.587032][ T1119] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.587118][ T1119] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 1677.587146][ T1119] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1677.587175][ T1119] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.587651][ T1119] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 1677.587683][ T1119] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1677.587712][ T1119] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1677.592999][ T3373] bond4: (slave ip6gretap1): link status up again after 0 ms [ 1677.593078][ T3373] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 1677.709322][ T3373] bond4: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 1677.756233][ T3373] bond4: active interface up! [ 1677.768907][ T3373] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1677.913530][T13936] bridge0: port 4(veth1) entered blocking state [ 1677.913660][T13936] bridge0: port 4(veth1) entered forwarding state [ 1677.932736][ T5331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7419'. [ 1677.933799][T13936] bridge0: port 3(veth0) entered blocking state [ 1677.933933][T13936] bridge0: port 3(veth0) entered forwarding state [ 1677.972591][T13936] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.972748][T13936] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1677.999594][T13936] bridge0: port 2(bridge_slave_1) entered blocking state [ 1677.999926][T13936] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1678.232951][ T5344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7422'. [ 1678.298661][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.299522][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.300640][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.301312][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1678.301996][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.047443][ C1] net_ratelimit: 2978 callbacks suppressed [ 1680.047466][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.048099][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.048699][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.049304][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.050876][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.051593][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.052215][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.052827][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.053428][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1680.054074][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1685.057680][ C1] net_ratelimit: 10476 callbacks suppressed [ 1685.057706][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1685.057897][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1685.058417][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1685.059086][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1685.059103][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1685.059780][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1685.060267][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1685.060450][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1685.061114][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1685.061414][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1685.358689][ C1] sched: DL replenish lagged too much [ 1690.067495][ C1] net_ratelimit: 10847 callbacks suppressed [ 1690.067520][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1690.068288][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1690.068345][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1690.068968][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1690.069624][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1690.069654][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1690.070289][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1690.070901][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1690.071005][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1690.071660][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1695.077649][ C0] net_ratelimit: 11000 callbacks suppressed [ 1695.077696][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1695.077793][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1695.078406][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1695.079018][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1695.079041][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1695.079664][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1695.080204][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1695.080279][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1695.080943][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1695.081500][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1700.087378][ C1] net_ratelimit: 11940 callbacks suppressed [ 1700.087404][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1700.087496][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1700.088057][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1700.088681][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1700.088733][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1700.089304][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1700.089925][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1700.089960][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1700.090586][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1700.091162][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1705.097368][ C1] net_ratelimit: 11629 callbacks suppressed [ 1705.097381][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1705.097393][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1705.098299][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1705.098730][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1705.099009][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1705.099678][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1705.100105][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1705.100347][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1705.101049][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1705.101535][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1710.107358][ C1] net_ratelimit: 10813 callbacks suppressed [ 1710.107386][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1710.107793][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1710.108002][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1710.108678][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1710.109225][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1710.109324][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1710.109938][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1710.110559][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1710.110609][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1710.111169][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1715.117495][ C0] net_ratelimit: 11041 callbacks suppressed [ 1715.117540][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1715.117577][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1715.118719][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1715.118865][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1715.119396][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1715.120059][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1715.120167][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1715.120765][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1715.121435][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1715.121516][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1720.128227][ C0] net_ratelimit: 10777 callbacks suppressed [ 1720.128287][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1720.131956][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1720.132452][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1720.133086][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1720.133337][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1720.133692][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1720.134304][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1720.134806][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1720.134915][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1720.135527][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1725.137539][ C1] net_ratelimit: 11277 callbacks suppressed [ 1725.137566][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1725.137806][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1725.138258][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1725.138909][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1725.139096][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1725.139567][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1725.140221][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1725.140406][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1725.141353][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1725.141773][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1730.147771][ C1] net_ratelimit: 10835 callbacks suppressed [ 1730.147799][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.148349][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1730.148432][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.149072][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.149663][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1730.149709][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.150347][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.150979][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1730.150990][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1730.151631][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.157785][ C0] net_ratelimit: 10953 callbacks suppressed [ 1735.157838][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1735.157850][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.158636][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.159409][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.159454][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1735.160149][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.160907][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.160962][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1735.162739][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1735.163454][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.167480][ C1] net_ratelimit: 10938 callbacks suppressed [ 1740.167507][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.168089][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.168670][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.168711][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1740.169242][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.169821][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.170084][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1740.170390][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.171013][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1740.171462][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1745.177681][ C0] net_ratelimit: 10737 callbacks suppressed [ 1745.177721][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1745.178087][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1745.179022][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1745.180302][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1745.180354][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1745.181033][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1745.181543][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1745.181707][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1745.182766][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1745.184006][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1750.187673][ C0] net_ratelimit: 7824 callbacks suppressed [ 1750.187727][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1750.189171][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1750.189535][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1750.190144][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1750.190612][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1750.190748][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1750.192022][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1750.192797][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1750.193420][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1750.193539][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1755.198374][ C0] net_ratelimit: 8018 callbacks suppressed [ 1755.198415][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1755.199034][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1755.199592][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1755.199653][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1755.200231][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1755.200791][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1755.201505][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1755.201973][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1755.202107][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1755.203191][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1760.207385][ C1] net_ratelimit: 8239 callbacks suppressed [ 1760.207412][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1760.207995][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1760.208924][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1760.210126][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1760.210759][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1760.211308][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1760.211340][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1760.211932][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1760.212496][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1760.213227][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1765.217512][ C1] net_ratelimit: 8201 callbacks suppressed [ 1765.217539][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1765.217884][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1765.219359][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1765.220396][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1765.220699][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1765.221014][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1765.221631][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1765.222087][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1765.222991][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1765.223624][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1770.228197][ C0] net_ratelimit: 8112 callbacks suppressed [ 1770.228238][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1770.228808][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1770.229476][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1770.229707][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1770.230206][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1770.231079][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1770.231766][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1770.232457][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1770.232463][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1770.233832][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1775.237344][ C0] net_ratelimit: 8570 callbacks suppressed [ 1775.237390][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1775.237586][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1775.238248][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1775.238801][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1775.238875][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1775.240130][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1775.241258][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1775.242502][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1775.242611][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1775.243134][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1780.247567][ C1] net_ratelimit: 8684 callbacks suppressed [ 1780.247592][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1780.248099][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1780.249174][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1780.249372][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1780.249837][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1780.250461][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1780.250886][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1780.252263][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1780.252525][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1780.253118][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1785.257600][ C1] net_ratelimit: 8431 callbacks suppressed [ 1785.257627][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1785.257860][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1785.258309][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1785.258976][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1785.259263][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1785.259643][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1785.260713][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1785.261081][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1785.261810][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1785.262219][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1789.427306][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1789.434326][ C0] rcu: (detected by 0, t=10502 jiffies, g=257701, q=2450 ncpus=2) [ 1789.442272][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 814 (4295116052-4295115238), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1789.455523][ C0] rcu: rcu_preempt kthread starved for 815 jiffies! g257701 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1789.466504][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1789.476603][ C0] rcu: RCU grace-period kthread stack dump: [ 1789.482540][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1789.496088][ C0] Call Trace: [ 1789.499413][ C0] [ 1789.502388][ C0] __schedule+0x17db/0x58f0 [ 1789.506967][ C0] ? __lock_acquire+0x747/0x2de0 [ 1789.511968][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1789.517142][ C0] ? __pfx___schedule+0x10/0x10 [ 1789.522048][ C0] ? lock_acquire+0x115/0x350 [ 1789.526780][ C0] ? schedule+0x90/0x2b0 [ 1789.531066][ C0] schedule+0x164/0x2b0 [ 1789.535275][ C0] schedule_timeout+0x152/0x2c0 [ 1789.540213][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1789.545724][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1789.551072][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1789.556936][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1789.562544][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1789.567457][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1789.573656][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1789.578980][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1789.584253][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1789.588923][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1789.594171][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1789.599165][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1789.604278][ C0] kthread+0x38b/0x480 [ 1789.608397][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1789.613638][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.618282][ C0] ret_from_fork+0x514/0xb70 [ 1789.623107][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1789.628314][ C0] ? __switch_to+0xc89/0x1420 [ 1789.633157][ C0] ? __pfx_kthread+0x10/0x10 [ 1789.637890][ C0] ret_from_fork_asm+0x1a/0x30 [ 1789.642755][ C0] [ 1789.645820][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1789.652197][ C0] CPU: 0 UID: 0 PID: 21393 Comm: kworker/0:37 Not tainted syzkaller #0 PREEMPT(full) [ 1789.661826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1789.671936][ C0] Workqueue: events ovs_dp_masks_rebalance [ 1789.677942][ C0] RIP: 0010:rcu_lockdep_current_cpu_online+0x84/0x120 [ 1789.684784][ C0] Code: c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 64 26 8b 00 48 8b 03 48 8d 98 40 bb 96 93 48 8d b8 68 bb 96 93 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 40 26 8b 00 4c 8b 7b 28 48 83 c3 20 48 89 [ 1789.704439][ C0] RSP: 0018:ffffc90000006910 EFLAGS: 00000a02 [ 1789.710553][ C0] RAX: 1ffff110170c796d RBX: ffff8880b863cb40 RCX: 8000000000000101 [ 1789.718570][ C0] RDX: 8000000000000100 RSI: ffffffff8c6d9c60 RDI: ffff8880b863cb68 [ 1789.726579][ C0] RBP: ffffc90000006a98 R08: 0000000000000100 R09: ffffc90000006bd0 [ 1789.734588][ C0] R10: ffffc90000006a20 R11: fffff52000000d46 R12: 1ffff1100a4c210c [ 1789.742598][ C0] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffffc90000006b98 [ 1789.750617][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 1789.759590][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1789.766226][ C0] CR2: 00007f9f07c25fa4 CR3: 0000000021bf0000 CR4: 00000000003526f0 [ 1789.774246][ C0] Call Trace: [ 1789.777565][ C0] [ 1789.780464][ C0] rcu_read_lock_held+0x1e/0x50 [ 1789.785373][ C0] __find_rr_leaf+0x34d/0x740 [ 1789.790189][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 1789.795436][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 1789.800853][ C0] ? kthread+0x38b/0x480 [ 1789.805155][ C0] ? __lock_acquire+0x747/0x2de0 [ 1789.810150][ C0] fib6_table_lookup+0x3c6/0xae0 [ 1789.815182][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 1789.820710][ C0] ip6_pol_route+0x229/0x14d0 [ 1789.825480][ C0] ? ip6_pol_route+0x163/0x14d0 [ 1789.830397][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 1789.835581][ C0] ? lock_acquire+0x115/0x350 [ 1789.840320][ C0] fib6_rule_lookup+0x556/0x730 [ 1789.845296][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 1789.850989][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 1789.856418][ C0] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 1789.862617][ C0] ? ktime_get+0x1f5/0x220 [ 1789.867081][ C0] ? lapic_next_event+0x11/0x20 [ 1789.872005][ C0] ? clockevents_program_event+0x491/0x630 [ 1789.877886][ C0] ? __pfx_clockevents_program_event+0x10/0x10 [ 1789.884103][ C0] ip6_route_input+0x78d/0xb20 [ 1789.888956][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 1789.894310][ C0] ? irqentry_exit+0x218/0x910 [ 1789.899139][ C0] ? ip6_parse_tlv+0xae4/0x1f20 [ 1789.904139][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 1789.909573][ C0] ip6_rcv_finish+0x141/0x280 [ 1789.914330][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1789.919596][ C0] ip_sabotage_in+0x1e1/0x270 [ 1789.924449][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1789.929790][ C0] nf_hook_slow+0xc5/0x220 [ 1789.934319][ C0] NF_HOOK+0x21f/0x3c0 [ 1789.938442][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1789.943686][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1789.947890][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1789.952524][ C0] ? ip6_rcv_core+0xa1/0x1870 [ 1789.957252][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1789.962505][ C0] ? netif_receive_skb+0x102/0xbf0 [ 1789.967782][ C0] netif_receive_skb+0x278/0xbf0 [ 1789.972772][ C0] ? lock_acquire+0x115/0x350 [ 1789.977496][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1789.983016][ C0] ? br_netif_receive_skb+0x126/0x190 [ 1789.988536][ C0] NF_HOOK+0xa4/0x3a0 [ 1789.992571][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1789.998340][ C0] ? NF_HOOK+0xfa/0x3a0 [ 1790.002549][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1790.007193][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1790.012976][ C0] ? br_pass_frame_up+0x275/0x420 [ 1790.018058][ C0] br_handle_frame_finish+0x1136/0x1950 [ 1790.023678][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1790.029645][ C0] ? nf_hook_slow+0x176/0x220 [ 1790.034378][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1790.040321][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1790.045314][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1790.050679][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1790.056194][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1790.062233][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1790.067503][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1790.073540][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1790.079496][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1790.084922][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1790.090531][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1790.096484][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1790.103080][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 1790.108346][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1790.113858][ C0] br_handle_frame+0x1329/0x1600 [ 1790.118869][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1790.124214][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1790.130160][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 1790.135492][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 1790.140752][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1790.146096][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 1790.151861][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1790.157971][ C0] ? ip6_rcv_finish+0x265/0x280 [ 1790.162876][ C0] ? NF_HOOK+0x336/0x3c0 [ 1790.167203][ C0] ? process_backlog+0x3de/0x18b0 [ 1790.172270][ C0] ? process_backlog+0x3de/0x18b0 [ 1790.177356][ C0] process_backlog+0x727/0x18b0 [ 1790.182271][ C0] ? process_backlog+0x3de/0x18b0 [ 1790.187359][ C0] __napi_poll+0xaa/0x330 [ 1790.191738][ C0] net_rx_action+0x61d/0xf50 [ 1790.196392][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1790.201545][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 1790.206745][ C0] ? net_tx_action+0xbff/0xc30 [ 1790.211560][ C0] handle_softirqs+0x226/0x860 [ 1790.216392][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1790.221222][ C0] __irq_exit_rcu+0xcb/0x220 [ 1790.225866][ C0] irq_exit_rcu+0x9/0x30 [ 1790.230153][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1790.235830][ C0] [ 1790.238815][ C0] [ 1790.241790][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1790.247817][ C0] RIP: 0010:__slab_free+0xc3/0x2c0 [ 1790.253066][ C0] Code: f6 74 41 45 31 e4 41 f6 46 0a 40 74 66 48 8b 44 24 50 48 8b 54 24 58 48 89 de 48 8b 5c 24 40 48 8b 4c 24 48 f0 48 0f c7 4e 20 <48> 89 f3 0f 84 e8 00 00 00 48 89 44 24 50 48 89 54 24 58 f3 90 e9 [ 1790.269322][ C1] net_ratelimit: 8115 callbacks suppressed [ 1790.269387][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1790.271745][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1790.273486][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1790.278857][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1790.282166][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1790.283732][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1790.285252][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1790.286764][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1790.288522][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1790.290133][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1790.390291][ C0] RSP: 0018:ffffc90003dcf840 EFLAGS: 00000242 [ 1790.396406][ C0] RAX: ffff88808bf5ab40 RBX: ffff88808bf5aa00 RCX: 00000002000c0008 [ 1790.404422][ C0] RDX: 00000002000c0009 RSI: ffffea00022fd680 RDI: ffff8881404138c0 [ 1790.412443][ C0] RBP: ffffc90003dcf8d8 R08: 0000000000000000 R09: ffffffff8237dcae [ 1790.420471][ C0] R10: dffffc0000000000 R11: fffffbfff20f4630 R12: 0000000000000000 [ 1790.428490][ C0] R13: ffff88808bf5ab40 R14: ffff8881404138c0 R15: 0000000000000000 [ 1790.436512][ C0] ? qlist_free_all+0x8e/0x100 [ 1790.441352][ C0] qlist_free_all+0x99/0x100 [ 1790.445999][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1790.451510][ C0] __kasan_slab_alloc+0x22/0x80 [ 1790.456413][ C0] __kmalloc_noprof+0x307/0x720 [ 1790.461306][ C0] ? __kmalloc_noprof+0x1ab/0x720 [ 1790.466411][ C0] ? ovs_flow_masks_rebalance+0xf4/0xc70 [ 1790.472137][ C0] ? ovs_flow_masks_rebalance+0xf4/0xc70 [ 1790.477842][ C0] ovs_flow_masks_rebalance+0xf4/0xc70 [ 1790.483355][ C0] ? lock_acquire+0x115/0x350 [ 1790.488096][ C0] ovs_dp_masks_rebalance+0x5d/0x120 [ 1790.493435][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1790.499287][ C0] process_scheduled_works+0xc3d/0x1630 [ 1790.504942][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1790.510993][ C0] ? assign_work+0x3cf/0x5d0 [ 1790.515641][ C0] worker_thread+0xa47/0xfb0 [ 1790.520317][ C0] kthread+0x38b/0x480 [ 1790.524447][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1790.529614][ C0] ? __pfx_kthread+0x10/0x10 [ 1790.534251][ C0] ret_from_fork+0x514/0xb70 [ 1790.538887][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1790.544057][ C0] ? __switch_to+0xc89/0x1420 [ 1790.548797][ C0] ? __pfx_kthread+0x10/0x10 [ 1790.553435][ C0] ret_from_fork_asm+0x1a/0x30 [ 1790.558269][ C0]