last executing test programs: 1m30.650415994s ago: executing program 2 (id=5367): syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xf}, {0x1, 0xc}, {0xfff3, 0x8}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_OVERHEAD={0x8, 0x6, 0xffffffffffffffd3}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104"], 0x50}}, 0x4000084) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x100, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x24, &(0x7f0000000780)=0x10094, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m29.328794251s ago: executing program 2 (id=5374): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYRES64=r0], 0x48) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x2, r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000000edff00000000000000cb3e8bdbd0fb6058217b00850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa10000000000000701"], 0x0, 0x2, 0xfffffffffffffd9a, 0x0, 0x0, 0x0, '\x00', r3, @fallback=0x3, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$packet(0x11, 0x2, 0x300) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x4000004}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000000)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@map, 0xffffffffffffffff, 0xf3c5227cb953423c, 0x2010, 0x0, @value=r6}, 0x20) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r4, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) 1m26.85930744s ago: executing program 2 (id=5397): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x76a9bba1a690db0f, 0x0, 0x0, {0xa, 0x0, 0x2005}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3cb140bb}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_USERDATA={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @loopback}, 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f00000003c0)={0x108, 0x1, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, [@CTA_ID={0x8}, @CTA_TUPLE_MASTER={0x60, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_SEQ_ADJ_ORIG={0x24, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0xa}]}, @CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}}}]}]}, 0x108}, 0x1, 0x0, 0x0, 0x4800}, 0x40080) 1m26.518803047s ago: executing program 2 (id=5403): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a3100000c0008000a40fffffffc440000000c0a010100000000000000000a0000070900020073797a31000005000900010073797a3100000000180003801400008008000340000000020500064006000000140000001100010000000000000000000100000a"], 0xa8}, 0x1, 0x0, 0x0, 0x24000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000ae2f9c24e9efaa798263f2de8f66d8ee00000020900020073797a3000581d670000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) r2 = socket(0x40000000015, 0x805, 0x0) getsockopt(r2, 0x114, 0x5, &(0x7f0000019100)=""/102399, &(0x7f00000000c0)=0x18fff) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x24, 0x18, 0x1, 0x2, 0x0, {0x5}, [@typed={0x4, 0xcf}, @typed={0xb, 0x22, 0x0, 0x0, @str='batadv\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) unshare(0x8040480) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, &(0x7f0000000000)={0x6, 'veth1_to_team\x00', {}, 0x9}) r6 = socket$tipc(0x1e, 0x5, 0x0) listen(r6, 0x1) close(r6) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'batadv0\x00', {0x3}, 0x1}) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x157f}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}]}, 0x34}}, 0x20000840) 1m25.594209387s ago: executing program 2 (id=5408): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000c00)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0xfff3, 0xffe0}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0xb3a, 0x6, 0x26, 0x7, 0x9, 0x10000, 0x42, 0xdec, 0x10001, 0x40, 0x2, 0x2, 0x7, 0x0, 0xfffeffff, 0x0, 0xffffff84, 0xf, 0x5, 0xfffffffd, 0x2, 0x3, 0x9, 0x1, 0x92, 0x7, 0x4, 0x7, 0xe, 0x7, 0x0, 0x5, 0x8, 0x355d, 0x5, 0x9, 0x10000, 0x3, 0x97, 0x0, 0x5, 0xaa4, 0x4, 0x5, 0x8, 0xfd, 0x9, 0x400, 0x5, 0x9, 0x74, 0xfc79, 0x20000, 0x10, 0x4, 0x80, 0x7, 0x81, 0x6, 0x7, 0xb06e, 0x3, 0x2, 0x8, 0x7fffffff, 0x80000001, 0x1000, 0x3, 0x7fffffff, 0x2, 0x8, 0x8001, 0x7fffffff, 0x0, 0x3, 0xc, 0xffff, 0x1000, 0x2bca, 0x57, 0x9, 0x9, 0xfffffffd, 0x0, 0x1, 0x9, 0x5, 0x101, 0xcd1c, 0x2, 0x2, 0x4, 0xfffffffa, 0x450, 0x9, 0x8, 0x9, 0x80, 0x6, 0x0, 0x0, 0x5, 0x5, 0x22462e3c, 0x1, 0xb, 0xfffffff8, 0x3, 0x2, 0x10001, 0x3, 0x1, 0xe7b, 0x4, 0x6, 0xfff, 0x3, 0x6d, 0xffffffff, 0xa, 0x80, 0x8001, 0x9, 0x3, 0x7, 0x7, 0x9, 0x1a93, 0x248, 0x66f, 0x8, 0x2800000, 0x2, 0x2, 0x4, 0x3, 0x200, 0x1, 0x8, 0x80000001, 0xb, 0xab64, 0x7fff, 0x4, 0x8, 0xc, 0x6, 0x200, 0x401, 0x1, 0xfffffffd, 0x5537, 0x4, 0x0, 0x73c9, 0xdad5, 0x9, 0x9, 0x5, 0x7f, 0xffff7190, 0x7, 0x1, 0x16, 0x5, 0x1000, 0x7, 0xffffffff, 0x4, 0x28f, 0x1dd0, 0x8001, 0x5, 0x6, 0x6, 0x80, 0xb, 0xed, 0x10001, 0x3, 0x9, 0x5, 0x2, 0x8, 0x23, 0x0, 0x401, 0xc, 0xfffffffc, 0x2, 0x7, 0x893, 0x6, 0x9, 0x0, 0x8001, 0x100, 0xb7c, 0x9, 0x4, 0x435, 0x2d4f, 0xffffffff, 0x400, 0x3, 0x8a, 0xfff, 0x1, 0x3, 0x7f, 0x7, 0x6, 0x2, 0x7, 0x694, 0x1, 0xe94, 0x67, 0x7, 0x7, 0x6, 0x9, 0xfffff001, 0x9, 0x2, 0x343, 0x8000, 0xfff, 0x0, 0x20, 0x10, 0x7, 0x6, 0x5, 0x8, 0x6, 0x9, 0x2232, 0x3, 0x2, 0xfe79800, 0x0, 0x4f6, 0x3, 0x8, 0x260c, 0xaedb, 0xd084, 0x1, 0x8, 0x2, 0x1000, 0x400, 0x6000, 0x0, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0xffffff81, 0x9, 0x2, 0x3, 0x5, 0xffffff01, 0x0, 0x1599, 0x7ff, 0xb, 0x209c, 0x436c, 0x2, 0x42d2, 0x6, 0x5678f281, 0x100, 0x7, 0xee, 0x5, 0x0, 0x8001, 0x80000, 0x8, 0xc425, 0x88, 0x401, 0x8, 0xffffffff, 0x3, 0x1, 0xffffffff, 0x80, 0xf7f, 0x9, 0x3, 0x3, 0xfffffff9, 0x80000000, 0x75a5, 0x0, 0x3, 0x1, 0xe, 0xfffffff7, 0x400, 0x1ff, 0x2, 0x9, 0x5, 0x54e, 0x4, 0x2, 0x7, 0xb166, 0x2, 0x36c, 0x5, 0x200, 0x9, 0xffff, 0x1, 0x5, 0xc86, 0xfffffff1, 0x1, 0x67, 0x2, 0xffff, 0x1, 0x9, 0x10001, 0x0, 0xc4a, 0x80000001, 0xfffffffd, 0x366, 0xd, 0x0, 0x9, 0xea, 0xd7, 0x2, 0x9, 0x1, 0x77, 0x2, 0x3, 0x2, 0x3, 0x4, 0x3, 0x4, 0x7, 0x1000, 0x2c21, 0x3a41, 0x2e90, 0x0, 0x3000000, 0x5, 0x1, 0xe60, 0x6, 0xa, 0x1, 0xfffffffa, 0x5, 0x0, 0x2, 0x40, 0x9, 0x100, 0x27e1, 0x8000000, 0x9, 0x4, 0xd, 0x1, 0x8, 0x3e83, 0xb7, 0x3, 0x20000000, 0x3, 0xd, 0x10, 0x1, 0xffffffe0, 0x200, 0x5, 0xffffffff, 0x8, 0x6, 0x40, 0x1, 0x10, 0x3, 0x9, 0x1000000, 0x9, 0x1, 0x2, 0x7, 0x2, 0xfffffff9, 0x10001, 0x4c2, 0xfff, 0x8, 0x4d76, 0x7f, 0x5, 0x1, 0x3366, 0x2, 0x4, 0x800, 0x800, 0x3, 0x6, 0xe, 0xff, 0x80000001, 0xe, 0x51, 0x2, 0x6, 0xfffffffb, 0x6, 0x4, 0xec49, 0x101, 0x97, 0x0, 0xfff, 0x5, 0xd, 0x8, 0xa, 0x6, 0x8, 0x7, 0x81, 0xe61, 0x1, 0x7, 0x4, 0x2, 0x1, 0x9, 0x0, 0xfffffffd, 0x800, 0x4, 0x0, 0x1, 0x4, 0x1, 0x10001, 0xb, 0xe, 0xcd, 0x4, 0x9, 0x6, 0x9, 0x7, 0x0, 0x9, 0x3, 0x6, 0xec16, 0xa443, 0x9, 0x6, 0x5, 0x8, 0x1, 0x9, 0x7, 0x2, 0x5, 0x3, 0x58, 0x40, 0x81, 0xbf1f, 0x6, 0x40, 0x5, 0x9c, 0x1, 0x9, 0x22472c26, 0xfffffffb, 0x0, 0x7, 0x1, 0x5, 0x1, 0x5, 0x6, 0x9, 0x9, 0x80000001, 0x1, 0x1, 0x65d3, 0x2, 0x1, 0xffff8001, 0x5, 0xb, 0x8, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0xffffffffffffffff, 0x7a94, 0x7, 0xb, {0x7, 0x0, 0x1, 0x80, 0x6572, 0x6}, {0x1, 0x1, 0x400, 0x8, 0x8, 0x401}, 0x3, 0x4, 0x7fffffff}}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x1, 0xd, 0x5da1, 0x0}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={r11, @in={{0x2, 0x4e24, @remote}}, 0x81, 0xfff7, 0xf, 0x200, 0x0, 0x9, 0x4}, 0x9c) connect$inet6(r10, &(0x7f0000000100)={0xa, 0x4e60, 0x0, @mcast2, 0xd}, 0x1c) sendmmsg$inet6(r10, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)="23e7eed6693aba77f3f40ac4a7b27b4e288e4f90f4b7f40d91036f2e3184e5e2fc104d98c19c1eeeb7f3ca6ac512e7a4f4a661b230558c7c8edf946ed26a2b6994d8026bc5c38fe0461b92f5264bfb92941609bde52123765b7b4d34b85584c15318dca5465db4e4d07ad34decddb847087b38336582df6c7ac9bcbae32ffeb5a4e5c2f4134f289d8b92ffc9d7e1c7024a2b1916ef93d9ca134af1751b96ba435b842b57d98d48461966350d4ace4a281014489df53e90d4cf39a36769946ed84a394e", 0xc3}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000002900000008000000030000005d5c25c7"], 0x18}}], 0x1, 0x4400c800) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 1m22.88618225s ago: executing program 2 (id=5414): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200002000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) (async) unshare(0x64041080) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x325, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)='nr0\x00', 0x7fffffffffffffff, 0x3, 0x6754}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48) (async) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) (async) close(0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000340)="b2000000", 0x4}, {&(0x7f00000003c0)="040062db7ba1", 0x6}], 0x2) (async, rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="b1d83a0871605f588d0118be167f5f009eb13d2df1f2525557aa5720c147ca30a043bf6abc0ffd38100d03cae27973955b45f3434bdf05c15646139d8771eaaf99ffaa78df1ee7b7784c93ed699b352037d4d37a3639538e71eadff41ca87fb6d49648db60f50f51e3bea9cdc86cf491083e21240b0ba98985efabacddf1fe813c390b9b3b35153a9dec1f4be8e2cb6081516ba33dd0caa7b35b0e75b4cb32f29caa042f472f67ec181e7c62c6c055558f67443a68db28ac0cf0d2cdb09d91459de3de1985e73ffb2eae8de889630bb809a34d673b570e89485d54349804006cb131e53c59c16a1170df111f8d4be54fc1ff000000f2a4a0883c21f7970aee924c1c9b6be5cca1a16ee93ed5bdd434ed24e122ab47e917e88f7a9f19b0e429ea2c3f30c385137d654daaedf1f09fe6af0aa98bbf33cd01041c8f9831c547e2540940d1e2af000000000000", @ANYRES16=r2, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f0000000140), &(0x7f00000002c0)=0x4) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) read(r8, &(0x7f0000000000)=""/31, 0x1f) (async) connect$pppl2tp(r6, 0x0, 0x0) 1m11.353496271s ago: executing program 0 (id=5507): r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @netrom}, [@null, @default, @null, @netrom, @default, @rose, @remote, @netrom]}, &(0x7f0000000080)=0x48, 0x80000) setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0)=0x10, 0x4) sendmmsg(r0, &(0x7f0000000100), 0x0, 0x10) socketpair(0x9, 0x6, 0x2, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r2) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f00000001c0)={0x6, @loopback, 0x4e22, 0x0, 'sed\x00', 0x7, 0x14000000, 0x22}, 0x2c) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'pimreg1\x00', 0x0}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300)={0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4}, &(0x7f00000002c0), &(0x7f0000000340)=r5}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000d40)=[{{&(0x7f00000003c0)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000000400)="d372803f6acb6265054d560d8c9b965c59d311ff4e44567dd94a6782c2f48f4c15d3547d74746ac72b2b0e29675d24e655294b311ee646d3ef848b599a4408f2cf12abfc1277e02c9a9f976a4c5cb0d41773d0b88796c880791c40eb7603cdd27446194e9677c492fef3e7fb906cdda0422a961d472c07effb4847287c4de27e3aef0b4f7c0d72e1863638b8cc4b59d150d7cbefa4054dcfa0c21bb30b538bedeabcf811", 0xa4}, {&(0x7f00000004c0)="3b17334359ab38c9e1d0bdf685ee8e9b0bbf05cd9a783f2a9663995401761cf30760705b3ba078b81bcc8df37ef49c57e66f7d87cb59d5d69ae58ab7ebd0e50d9f670409f0dc3c3e2196aaca556982b54617092cd7a420628e51681e891de8641875a4b2685efd5e941dde13ca235ce5bd1f80e56e3c58e7418748c818b81ad75749d88feffe254d9e83beac828b93529f07ff451dd6aeca13aef48eb6b3abdad4ad465583f2012de15c7851ee0c8c6ea68dd4ac2b1681f56b0c9dda84908561d72872fa9e8fb7f95215f585f063d9a0bcccd89cc593b54239a36f685c32ef040fcac43a5c0a692616ccbec6335b42c6", 0xf0}], 0x2, &(0x7f0000000600)=[@dstopts_2292={{0x20, 0x29, 0x4, {0x8, 0x0, '\x00', [@padn={0x1, 0x3, [0x0, 0x0, 0x0]}]}}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x2f, 0xb, '\x00', [@hao={0xc9, 0x10, @private0}, @calipso={0x7, 0x30, {0x3, 0xa, 0x8, 0x1000, [0x6, 0xffffffffffffff4b, 0x800000000000000, 0x7, 0x4]}}, @ra={0x5, 0x2, 0x6}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0xe}}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x7312}}, @tclass={{0x14, 0x29, 0x43, 0x79}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x88, 0xc, 0x1, 0x5, 0x0, [@mcast2, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @local, @mcast1, @local]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}, @pktinfo={{0x24, 0x29, 0x32, {@empty, r3}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dstopts={{0x58, 0x29, 0x37, {0x3b, 0x8, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @broadcast}}, @ra={0x5, 0x2, 0x8}, @jumbo={0xc2, 0x4, 0x1}, @ra={0x5, 0x2, 0xfff8}, @enc_lim={0x4, 0x1, 0x2}, @jumbo={0xc2, 0x4, 0xaf9}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x208}}, {{&(0x7f0000000840)={0xa, 0x4e24, 0x1, @mcast1, 0x3}, 0x1c, &(0x7f0000000ac0)=[{&(0x7f0000000880)="da020423b89c9763efa1874379c2f493551dd4a1125cf62977bad8aa3c6f61514698b8f80c618e9776ab6ea637467b0816cfc5d3f4bf928f3233c0a5b2d024d8389f4bb2a1d1d0460411a25159b71893d3f93a3d2f1fafec998ff2c2e818fdb288db174736982ef07441a1d690ec6a3863ac197a468f9133e92129719ac62b865e2e0a23400f1714895d056c42c76f92a23a546934367840377837a22f6d5195928fa625755e766f1ae69036c18fbddc9ef161484521e525bdfc10e057f0fee7cacf3c8d8ca8340cf1d237c425f853089e569aac5e6a669da33e70442deaf87f7c575efb5e36c3de", 0xe8}, {&(0x7f0000000980)="189f2d12f3d9521e90aeee649708365543a03e4c13b080f2e1e0bd87cdd2ecfe8db86da8ca2df7d8b2edcb4a8cf2a654331d4d6f3ae9d810d6cff4b96f7b66c76518e3fd35fd71af39ee786e2c72fa3bf4070e6fed03b45e7ccd46d4871423969a456f9cfd75fe3200f5db753faf604492566882ddcd3003a46445ec6db3ccea35899bc62c1e2438a4be5b3d20d684b067d87dc24e8733d306978fa8765d180f67987f17ce41a4f33cb05b7e0b70aeafcd898d533f4f9287f6de31c5b7b6ecee6e19abbe74e08e6c6d038e08c96ceb29ad0037d7b7eac5ac03efbb", 0xdb}, {&(0x7f0000000a80)="32a79bf4aa0bd346b5466bd4e33b0c23ce79f373b1cdf3e3c85f3ac0054dde5e287ad6", 0x23}], 0x3, &(0x7f0000000b00)=[@rthdr={{0x48, 0x29, 0x39, {0x2f, 0x6, 0x0, 0x8, 0x0, [@empty, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x9}}], 0x60}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0x2, @private0, 0x1}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="489627372137588bd7e11736385d163db78cc99bc422f74230ffe2bf477d80db6c3efa0e89633b115776007921eb9c8d3f64e036a4bd544afbd7fba2d216005a6f64278c7727a4ebed0dc5d61d45054cf3b4cb452be8ae5386d91d4c07c7c5291fdaa91dbdc237bd58506e8d57940e80a1821d12000885a120263989cfb6158d1d5e46a9afd786165e4650f8d6a305317e7d0a0ec1ba996b703a63043ff39281effc164ca4426120316a0251d8877becf7c56a283bbbbae2436f2d383193713845845695caaa4385e9b3db2b4e8aff", 0xcf}], 0x1, &(0x7f0000000d00)=[@hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0x18}}], 0x3, 0x2000c400) recvfrom$ax25(r2, &(0x7f0000000e00)=""/30, 0x1e, 0x20, &(0x7f0000000e40)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) clock_gettime(0x0, &(0x7f00000026c0)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000002640)=[{{&(0x7f0000000ec0)=@qipcrtr, 0x80, &(0x7f0000001100)=[{&(0x7f0000000f40)=""/216, 0xd8}, {&(0x7f0000001040)=""/182, 0xb6}], 0x2}, 0xfffffffa}, {{&(0x7f0000001140)=@pptp={0x18, 0x2, {0x0, @multicast2}}, 0x80, &(0x7f00000025c0)=[{&(0x7f00000011c0)=""/161, 0xa1}, {&(0x7f0000001280)=""/202, 0xca}, {&(0x7f0000001380)=""/239, 0xef}, {&(0x7f0000001480)=""/4096, 0x1000}, {&(0x7f0000002480)=""/234, 0xea}, {&(0x7f0000002580)=""/15, 0xf}], 0x6}, 0x1}], 0x2, 0x20, &(0x7f0000002700)={r6, r7+60000000}) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000002740)) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SIOCGSTAMPNS(r8, 0x8907, &(0x7f0000002780)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r9, &(0x7f0000002880)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x23000}, 0xc, &(0x7f0000002840)={&(0x7f0000002800)={0x20, 0x15, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x48080) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$tipc(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000002b40)=[{&(0x7f00000028c0)="a8d75f84c2db6a91e51983d783a1acb180421c643d5ebf72a450c74b337610a347de9625576b0b1d1cb825c7f030fbfcbecc3a8877456928b14d87b7c0a9a37afef6dc562f41f0adc344c5bae7616ecae24d4f2169200c445188a965fab10c9c3e628df23107e5f97f7a5b20b92324c0cc88bef4705250f222ec26491be1843821b7d2254975004201732a3174261c2349d5f94ab07bd8ab4287a3f3148a4abb47708c2adaafe8a087871ff9a26cde7a9029532e8e6b66225da35883245f5a085388cda2e1f1", 0xc6}, {&(0x7f00000029c0)="2da324edbe35d64574ffcf00a216a16ad2e9ebf91ac95d0066899c0a857b167b75227b6569355b1cd16b449de29537a6211c8afbb4484ac318eb9e839684f02c24f552a479243fcbe7caf206b2d781dd895ce4f8b50baf0259c997503524299bdf0c812e77e63edc7972075e9cf062b3e762694cdae4d7280d563aa427bc7b33ea1f9adb9b8dced793fda4cb9ef46395a61c5b93532c697b72a7", 0x9a}, {&(0x7f0000002a80)="f5e318290a5281b9308af7a3b4ab1ff0fb234912176bcf30b7db59aebea6331e028ef573ad8ab49b92b96fe79e1ea01f35c461e0d78c74ca079cf8ebfc355259b904a5deca74d8f00fb894727f4211f4e0f3d6f1492abe27528e8509cb5de8595731114e326226454ad97d63948b165a57a725d45f9a412e48c3520f490e69b1d614e123d51cbeb5e817fe8eb3f91fcad65f7820cc9383e4578c984a05674698b3c168845a8fd83e30b4d260adeae2d5ec86aba2be2dae5e", 0xb8}], 0x3, 0x0, 0x0, 0x4c000}, 0x24000000) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002c00), r10) sendmsg$WG_CMD_GET_DEVICE(r11, &(0x7f0000003180)={&(0x7f0000002bc0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000003140)={&(0x7f0000002c40)={0x4d8, r12, 0xd30, 0x70bd27, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PEERS={0x484, 0x8, 0x0, 0x1, [{0x46c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xf, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @empty}}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x6}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x25}}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x1e12, @mcast1, 0xb4bb}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @empty}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x4d8}, 0x1, 0x0, 0x0, 0xee1cd367d5bdad9f}, 0x40) r13 = accept4$netrom(r0, &(0x7f00000031c0)={{}, [@default, @null, @rose, @rose, @netrom, @netrom, @netrom, @null]}, &(0x7f0000003240)=0x48, 0x800) ioctl$SIOCNRDECOBS(r13, 0x89e2) accept4$ax25(r2, &(0x7f0000003280)={{0x3, @rose}, [@netrom, @bcast, @rose, @default, @bcast, @default, @rose, @bcast]}, &(0x7f0000003300)=0x48, 0x0) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003380), r2) sendmsg$IPVS_CMD_SET_SERVICE(r11, &(0x7f0000003440)={&(0x7f0000003340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003400)={&(0x7f00000033c0)={0x1c, r14, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c040}, 0x40) setsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000003480)={0x96, 0x1}, 0x2) 1m11.21343684s ago: executing program 3 (id=5509): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000080)=0x203, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x20008010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000020601020000000000000000000000000900020073797a32000000000500010007000000050005000200000014000300686173683a69912c706f72742c69700014000780080006000000000008001340ffffffe40500040003000000"], 0x60}}, 0x20000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0xd}, {0xffff, 0xffff}, {0x7}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x7f}}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x59}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412b", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000800000000a5c000000060a0b040000000000000000"], 0x84}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="38000000070a010100000006000000000a0040010900010073797a3100000000090002"], 0x38}, 0x1, 0x0, 0x0, 0x200008d0}, 0x44054) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x24, 0x66, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x9, 0xffe0}, {0x10, 0xffff}, {0xffe0}}}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000004a00030029bd7000fddbdf"], 0x24}}, 0x40004040) 1m11.100477591s ago: executing program 0 (id=5512): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e0fcff082100000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000000000000000100000000000080b4000000000000000500000000000000"], 0x128}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be000000200000000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb"], 0x104}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x400, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)={@map, 0xffffffffffffffff, 0xd}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000020", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x10}, 0x18) socket(0x10, 0x80002, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x73, &(0x7f0000000340)=[{}, {}], 0x10, 0x10, &(0x7f0000000380), &(0x7f0000000400), 0x8, 0x3f, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="050000000000000000000000ea99053db646af39b0b902c44b0e7274c08c3d15dbfb5a022cfaaa15fce03c0e83bd751dac706b75d80a66cc5e475920bcf15cdc3959182eebece2c76a5ee3c287159b73e92b7d33f228e0333b7f10c7c38fc1c170bb9ce06fb153ddfc9d925db27efdd99b299fda6a77236318318fb6191c8f2522fb423026ec2d48ea4bd5a2dcab79c4e0eb41e6defbd653de3206a64f4d4b4dac9b1cf15b8e39d51fe3b200"/186, @ANYRES16=r6, @ANYRES32, @ANYBLOB="01000000020000000400"/28], 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000840)=r8, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4000000010003b150c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008000100677470000c00028008000200", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00g'], 0x40}}, 0x48010) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r10, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r10, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"/276], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 1m11.07823071s ago: executing program 4 (id=5513): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0x1ff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0xfffffefa) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000180)={'geneve0\x00', &(0x7f0000000100)=@ethtool_coalesce={0xf, 0x6, 0x80, 0xe698, 0xf37, 0x6, 0x400, 0x4, 0x94a, 0xd12, 0x9, 0x13b6, 0x714, 0x1, 0x2, 0x8, 0x0, 0x40, 0x4, 0x800, 0x2, 0x81}}) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbfbbbbbbbaaaaaaaaaaaa86dd60f4adf700082c00fe800000000000000000000000000000ff020000000000000000000000000001810090780000000028d6307aab7d0a4a0778fef71d"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="70000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="ffef0000400000003c00198014e5312c0fd80500060000000000080001005bd020a014000400ebce8f5367f70be03f91b19aa00bd67d1400030069703667726530000000000000000000000000000000000000000000000045cb9203976e22b54f9d3c109867bc139f11a4a693aeeec06b9772d34d88187667186f741353328b17a1d571773d8705c10ba6fcf438294f04ef94343ab309ed04b2a43bf09bf77f4c95108910a57e7a454fb1544e390838e2666cc99433a7c91b7bce9d0aafdb02aaf72977639ca2a6e70e63448c90c180e3518204e94298b54d508d7d87f3390d6727d7e2c8e07b43393c60b2ce1e7df8f96542fabab25d129f"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r5, 0x0, 0x10000008ebc, 0x0) socket$inet(0x2, 0x80001, 0x84) sendmsg(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)="73f9c98c", 0x4}, {&(0x7f0000000500)="6cfac4e9341e2c683e900d3c0ab4351aec5a32a15a8275fd9b4fa66d5c9df4c5ac3e768f42b87861f578ed862cd006265c3d5dc76a016f4f1035557c6f771fe707e1e52360bd9de0516a18d5fc81cc73b00dff5c82af1c37267afab20779893d6db4d345fb6a5656db91bacb92ea32418b6b", 0x72}, {&(0x7f0000001b00)="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", 0xf8b}], 0x3}, 0x4) splice(r4, 0x0, r7, 0x0, 0x25a5, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x2500, 0x2500, 0xffffffdc, 0x0, {{0x7, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x3, 0x7d, 0x4, 0x0, @empty, @empty, {[@generic={0x0, 0x5, "0a42e6"}]}}}}}) 1m10.825110122s ago: executing program 1 (id=5515): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f00000000c0)={@multicast1=0x1c, @empty=0xe0000300, 0x0, "8a79348df081496d0420922f45a71c1daa8b610468cd140526c41efcd3a4a422", 0x3, 0x1, 0x85}, 0x3c) 1m10.822132763s ago: executing program 0 (id=5516): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10040800) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000400)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10) (async) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10040800) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) (async) getsockopt$inet_tcp_buf(r0, 0x6, 0xb, 0x0, &(0x7f0000000400)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) (async) 1m10.801714117s ago: executing program 1 (id=5517): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3d0228bd7000fddbdf250f00000005000f00fa00000005000f000600000008000300", @ANYRES32=r3, @ANYBLOB="7d6a1a56e19790bb8d93acb041dd1fd2925cbff452f7238a955201bfd5fb3b"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002380), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000023c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f00000024c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002400)={0x38, r5, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10008}, 0x8000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000001740)={0xffffffffffffffff, 0xcbb5, 0x5, 0x9}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x8, &(0x7f00000012c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x4}, [@tail_call]}, &(0x7f0000001300)='syzkaller\x00', 0x1000, 0x6, &(0x7f0000001340)=""/6, 0x41100, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f00000015c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000001600)={0x5, 0xf, 0xc, 0xff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000001780)=[r7], 0x0, 0x10, 0x2}, 0x94) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a00), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r10, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000040)={0x30, r9, 0x1, 0x0, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000011c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001180)={&(0x7f00000010c0)={0x24, r1, 0x100, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000841}, 0x20008810) r12 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r12, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r13) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r14, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r15, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8040) r16 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r13, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r16, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmmsg$inet(r12, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="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", 0xba7}], 0x5}}], 0x300, 0x0) r17 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r17, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETVNETHDRSZ(r17, 0x400454d8, &(0x7f0000000040)=0x2) getsockopt$TIPC_SRC_DROPPABLE(r12, 0x10f, 0x89, &(0x7f0000001100), &(0x7f0000001140)=0x4) 1m10.796470317s ago: executing program 4 (id=5518): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x70bd28, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x300}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x610}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0xc) 1m10.789477576s ago: executing program 3 (id=5519): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004b0000400000000000059078ac1414040a01010044140503ffffffff00000000ac1414bb000000008303000000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="0108000000000000"], 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x304}, "41328ac33100", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89a06afff55f00fd"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x6}}], 0x18}, 0x0) socket(0x2, 0x80805, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0xa02000000000000, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@multicast1, @rand_addr=0x64010102, 0xffff00, 0xff000000, 0x7, 0x7, {@empty, {[0x0, 0xff, 0x0, 0xff]}}, {@mac=@broadcast, {[0x0, 0x0, 0xff, 0xff]}}, 0x4d00, 0x7, 0x5, 0xfffd, 0x4, 0x3, 'hsr0\x00', 'veth0_to_team\x00', {0xff}, {}, 0x0, 0x128}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast1, @local, 0xf}}}, {{@arp={@initdev={0xac, 0x1e, 0x11, 0x0}, @broadcast, 0xffffffff, 0xff0000ff, 0xc, 0x1, {@empty, {[0x0, 0x2064f8bb0fa89a85, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x10, 0x4, 0x6, 0xffff, 0x42, 0x8001, 'batadv_slave_1\x00', 'ipvlan0\x00', {}, {0xff}}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0xd7}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r5}, &(0x7f0000000500), &(0x7f00000002c0)=r4}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r7) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r8, 0x104, 0x4, &(0x7f0000000040)=0xffffffff, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="060000000010"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) 1m10.657614418s ago: executing program 4 (id=5520): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=@newlink={0xb8, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x90, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x80, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x10001}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffd, 0xa}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000000, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x8}}]}, @IFLA_VLAN_INGRESS_QOS={0x40, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4c, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0xc0e}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0xffffc5e1}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0xb8}}, 0x0) 1m10.550894097s ago: executing program 0 (id=5521): socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x22, 0x800, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket(0x8000000010, 0x2, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) sendmmsg$unix(r2, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000100)="00301d0000000009cb10014a98956b45a81b9a4400000000", 0x18}, {&(0x7f00000001c0)='\f', 0x1}], 0x2}}], 0x1, 0x20040050) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r6 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='bridge0\x00') r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000140)) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000180)={0x1f, 0x2, 0x1}, 0x6) write(r9, &(0x7f0000000040)="07000000010003", 0x7) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x10, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) 1m10.550451194s ago: executing program 4 (id=5522): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) unshare(0x8040600) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r1, 0x104, 0x5, &(0x7f0000000040)=0x8f, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1, 0x28001, 0x80) sendfile(r2, r0, 0x0, 0xf03a0005) 1m10.436806434s ago: executing program 4 (id=5523): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x80, 0x2, 0xf7e, 0x48, @empty, @ipv4={'\x00', '\xff\xff', @private=0x8000}, 0x8, 0x40, 0xb2e042d, 0x3077}}) recvfrom(r0, &(0x7f0000000000)=""/4, 0x4, 0x10141, &(0x7f0000000100)=@ll={0x11, 0x8, r1, 0x1, 0xff, 0x6, @remote}, 0x80) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400808}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x30, 0x69, 0x100, 0x70bd27, 0x25dfdbfb, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) r3 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f00000002c0)) r4 = accept4(r2, &(0x7f0000000300)=@vsock={0x28, 0x0, 0x0, @local}, &(0x7f0000000380)=0x80, 0x1000) accept$alg(r4, 0x0, 0x0) recvmsg$unix(r4, &(0x7f0000001a80)={&(0x7f00000003c0), 0x6e, &(0x7f0000001880)=[{&(0x7f0000000440)}, {&(0x7f0000000480)=""/44, 0x2c}, {&(0x7f00000004c0)=""/195, 0xc3}, {&(0x7f00000005c0)=""/240, 0xf0}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/92, 0x5c}, {&(0x7f0000001740)=""/84, 0x54}, {&(0x7f00000017c0)=""/172, 0xac}], 0x8, &(0x7f0000001900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}, @cred={{0x1c}}], 0x148}, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r12, 0x84, 0xf, &(0x7f0000001ac0)={0x0, @in6={{0xa, 0x4e22, 0xfffffff7, @loopback, 0x9}}, 0x8000, 0x8c, 0x9, 0x7dd8a158, 0x5e}, &(0x7f0000001b80)=0x98) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r12, 0x84, 0x7c, &(0x7f0000001bc0)={r18, 0x0, 0x8}, 0x8) connect$inet6(r2, &(0x7f0000001c00)={0xa, 0x4e20, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) sendto(r0, &(0x7f0000001c40)="dd6ce887b7428b66db6a57f4ce052036f9569b7a9e575a2364cfb4fa937f6c97bfb3cddcd923f64f8239e2612a0cedd313b2e2c0799c6724012e182f3c9865b8b1f14e6221cf3283770f117224fa1b", 0x4f, 0x44005, &(0x7f0000001cc0)=@ll={0x11, 0x1a, r1, 0x1, 0x29, 0x6, @remote}, 0x80) ioctl$EXT4_IOC_GET_ES_CACHE(r6, 0xc020662a, &(0x7f0000001d40)={0x0, 0x100, 0x3, 0x4, 0x7, 0x0, [{0xb, 0x4, 0x0, '\x00', 0x680}, {0x2, 0x6, 0xfff, '\x00', 0x2800}, {0x6, 0xfffffffffffffffc, 0xfffffffffffffff9, '\x00', 0x800}, {0x2, 0x8, 0x6, '\x00', 0x80a}, {0x9, 0x2, 0x2, '\x00', 0x8}, {0x6, 0x5ce3, 0x8000000000000000, '\x00', 0x884}, {0xc, 0x9e6, 0x2, '\x00', 0x9}]}) r19 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r19, 0x117, 0x5, 0x0, 0x9) readv(r14, &(0x7f0000004240)=[{&(0x7f0000001f00)=""/204, 0xcc}, {&(0x7f0000002000)=""/154, 0x9a}, {&(0x7f00000020c0)=""/4096, 0x1000}, {&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000040c0)=""/198, 0xc6}, {&(0x7f00000041c0)=""/45, 0x2d}, {&(0x7f0000004200)=""/60, 0x3c}], 0x7) r20 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r20, &(0x7f00000043c0)={&(0x7f00000042c0), 0xc, &(0x7f0000004380)={&(0x7f0000004300)={0x58, 0x9, 0x6, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x4}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1000}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x4}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x8}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x10}, 0x40001) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r13, 0x8933, &(0x7f0000004400)={'batadv0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000004b40)={&(0x7f0000004440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000004b00)={&(0x7f0000004480)=@newsa={0x67c, 0x10, 0x400, 0x70bd2d, 0x25dfdbfe, {{@in=@dev={0xac, 0x14, 0x14, 0x3f}, @in=@rand_addr=0x64010100, 0x4e23, 0x800, 0x4e24, 0x0, 0x2, 0x90, 0x0, 0x1, r1, r16}, {@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x2b}, @in=@multicast1, {0x80000000, 0x401, 0x5, 0x5, 0x3, 0x4, 0x3a1be360, 0x80000000}, {0x7fffffff, 0xfffffffffffffff8, 0x8, 0xfff}, {0x2, 0x8, 0x81}, 0x70bd28, 0x3503, 0x2, 0x0, 0x20, 0x64}, [@tmpl={0x104, 0x5, [{{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d2, 0xff}, 0xa, @in6=@empty, 0x3507, 0x4, 0x0, 0x5, 0x800, 0x0, 0x8}, {{@in=@loopback, 0x4d3, 0x32}, 0x2, @in6=@mcast1, 0x3502, 0x3, 0x0, 0x6, 0x5f2, 0x1, 0x800}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x3c}, 0x2, @in6=@loopback, 0x3501, 0x1, 0x3, 0x4, 0x64, 0x71c, 0x7}, {{@in=@multicast2, 0x4d5, 0x6c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x15}, 0x3505, 0x0, 0x0, 0x7, 0x0, 0x80000001, 0x9}]}, @algo_comp={0x107, 0x3, {{'deflate\x00'}, 0x5f8, "cec034cd1a364b7d0aad839833976117c358ce7b52de635a07978ce39fb5d180b8e3729ac4b8930b71b23a60d7043ab6e1a4452bd0ccebe3a59deda144e976e88f846d7d0d2177bc3ba92191c4548124f8f91ad9fb8a0c2a3ac24694bc3641a08c75aa5523078f13534023da1999a90a616a655372a36d0fc6b58df9cb2e56dbc6b4b77c7a9b44b200bba4cd8e625c4743f0fa606180b21821871679ea30c02a15b941b6e57b5f393e6f0e1eea0346c917f2f47cf6f74ceeefff5504bd0b94"}}, @replay_thresh={0x8, 0xb, 0x8}, @srcaddr={0x14, 0xd, @in=@multicast1}, @policy={0xac, 0x7, {{@in=@remote, @in6=@mcast2, 0x4e21, 0x0, 0x4e23, 0x5e32, 0xa, 0x80, 0xa0, 0x33, r21, r17}, {0x0, 0xf6, 0x4, 0x6, 0x3, 0x33f, 0x0, 0x4}, {0xffffffffffff8001, 0x3, 0xa12, 0x95e1}, 0x5, 0x0, 0x2, 0x0, 0x1, 0x3}}, @tfcpad={0x8, 0x16, 0x40}, @sa={0xe4, 0x6, {{@in6=@private1, @in6=@local, 0x4e20, 0xa, 0x4e22, 0x24, 0xa, 0xa0, 0x80, 0x2, 0x0, r16}, {@in6=@mcast1, 0x4d5, 0x33}, @in=@multicast2, {0xffffffffffffffff, 0x100000001, 0x4, 0x3, 0x4, 0xf8, 0x400, 0x2}, {0x7, 0x2, 0x10001}, {0x4, 0x4, 0x585}, 0x70bd2d, 0x3506, 0x2, 0x1, 0x4, 0x13}}, @migrate={0x1cc, 0x11, [{@in=@private=0xa010100, @in=@remote, @in=@loopback, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2b, 0x4, 0x0, 0x3505, 0x0, 0xa}, {@in=@rand_addr=0x64010102, @in6=@empty, @in=@multicast1, @in6=@rand_addr=' \x01\x00', 0x32, 0x4, 0x0, 0x3500, 0xa, 0xa}, {@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@mcast2, @in6=@mcast1, @in6=@local, 0x0, 0x4, 0x0, 0x3506, 0xa, 0x2}, {@in=@dev={0xac, 0x14, 0x14, 0x34}, @in=@private=0xa010100, @in6=@mcast1, @in=@multicast1, 0x2b, 0x3, 0x0, 0x34ff, 0x2, 0xa}, {@in=@remote, @in6=@private0, @in6=@mcast2, @in=@broadcast, 0x3c, 0x0, 0x0, 0x3506, 0x2, 0x2}, {@in6=@mcast1, @in=@empty, @in6=@loopback, @in6=@private1, 0x32, 0x0, 0x0, 0x0, 0x2, 0xa}]}]}, 0x67c}, 0x1, 0x0, 0x0, 0x44080}, 0x20000800) accept(r8, &(0x7f0000004b80)=@nfc, &(0x7f0000004c00)=0x80) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r11, 0x84, 0x22, &(0x7f0000004c40)={0x4, 0x2, 0xfffffff9, 0x1, r18}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000005140)={r7, 0xe0, &(0x7f0000005040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000004e80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000004ec0)=[0x0, 0x0], &(0x7f0000004f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x14, &(0x7f0000004f40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000004f80), &(0x7f0000004fc0), 0x8, 0x48, 0x8, 0x8, &(0x7f0000005000)}}, 0x10) r23 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000051c0)=@o_path={&(0x7f0000005180)='./file0\x00', 0x0, 0x0, r13}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000005280)={0xa, 0x5, &(0x7f0000004c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0xee, 0x0, 0x0, 0x0, 0xd0}, [@map_idx={0x18, 0x5, 0x5, 0x0, 0x9}]}, &(0x7f0000004cc0)='syzkaller\x00', 0x9, 0xe1, &(0x7f0000004d00)=""/225, 0x41000, 0x8, '\x00', r21, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000004e00)={0x0, 0x5}, 0x8, 0x10, &(0x7f0000004e40)={0x2, 0xc, 0x8}, 0x10, r22, r15, 0x2, &(0x7f0000005200)=[r7, r23, r5], &(0x7f0000005240)=[{0x1, 0x2, 0x10, 0x2}, {0x1, 0x3, 0x7, 0xa}], 0x10, 0xc9}, 0x94) r24 = syz_genetlink_get_family_id$batadv(&(0x7f0000005380), r9) sendmsg$BATADV_CMD_SET_HARDIF(r10, &(0x7f0000005440)={&(0x7f0000005340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000005400)={&(0x7f00000053c0)={0x24, r24, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_HOP_PENALTY={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r11, &(0x7f0000005540)={&(0x7f0000005480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000005500)={&(0x7f00000054c0)={0x34, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x2}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x34}, 0x1, 0x0, 0x0, 0x28084}, 0x40000) 1m10.286162907s ago: executing program 3 (id=5524): unshare(0x20000400) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000002bc0)={@nfc_llcp={0x27, 0x0, 0x0, 0x1, 0x9, 0xff, "ec76a331a87fbc970991a8ff120deb85f45a4f7acdc8b424f5d251b1556285ebc47ff540daa3544de7a40e63ca3e40303cc0e93ed9531ecfa0388f60bff7cb", 0x37}, {0x0}, 0x0, 0x18}, 0xa0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x891b, &(0x7f0000000580)={{0x2, 0x5e22, @local}, {0x6, @remote}, 0x8, {0x2, 0x4e24, @remote}, 'veth0_to_bond\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfc}}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x61, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m10.285039868s ago: executing program 4 (id=5525): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose, 0x8}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r1, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r2 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) unshare(0x400) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xa, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x15, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) unshare(0x62040200) 1m10.284468726s ago: executing program 1 (id=5526): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x101a40, 0x0) (async) r1 = socket$inet(0x2, 0x5, 0x0) pread64(r1, &(0x7f0000000100)=""/80, 0x50, 0x80000000) (async) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000000000) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000400)=0x3, 0x4) (async) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10) (async) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) 1m10.177464491s ago: executing program 0 (id=5527): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) getsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f00000004c0), &(0x7f0000000540)=0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000ff0100000000000000000018110000bdcbf15663d4802f5aa96c6eddf5cd613adebac206df431d99e44cd1b906f7e5992a8499675d3bbdfd5a7738a5912872f8c2b4d1e7dd6dd31c65300f21f414e717459236361463879066d1d9d46c89c05f44b4", @ANYRESOCT=r1, @ANYRESOCT=r1], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000580)='siox_get_data\x00', r2, 0x0, 0x40001843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r3}, 0x18) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000004d40)={&(0x7f00000000c0)={0x28, 0x3ea, 0x400, 0x70bd20, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}}, 0x28}, 0x1, 0x0, 0x0, 0x20000844}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) connect$inet(0xffffffffffffffff, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x1, 0x40004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'gretap0\x00'}) r5 = socket(0x8000000010, 0x2, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) write(r5, &(0x7f00000002c0)="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", 0xfc) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, 0x0, 0xff00) r7 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r7, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) writev(0xffffffffffffffff, &(0x7f00000003c0), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m10.166839993s ago: executing program 1 (id=5528): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) shutdown(r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreq(r2, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @local}, &(0x7f00000000c0)=0x8) r3 = gettid() r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000140)={@broadcast, @multicast1, 0x0}, &(0x7f0000000180)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@bridge_delneigh={0x1c, 0x1d, 0x800, 0x70bd28, 0x25dfdbff, {0x1c, 0x0, 0x0, r5, 0x4, 0x40, 0x7}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000800}, 0x20004040) r6 = accept(r0, 0x0, &(0x7f0000000280)) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_virt_wifi\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r6, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1b0, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20040000}, 0x40) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000600)={r3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000005c0)='pim6reg\x00'}, 0x30) r9 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_ZERO(r9, 0x0, 0x48f, &(0x7f0000000640)={0x88, @remote, 0x4e24, 0x3, 'none\x00', 0x1, 0x2, 0x13}, 0x2c) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000680)={0x0, 0x21}, &(0x7f00000006c0)=0x8) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r11, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x8, 0x8, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x0, 0xa}, [@typed={0x14, 0xe2, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}, @typed={0x37, 0x13e, 0x0, 0x0, @binary="0103f5899099d24cf585ec389535602b082ae71e174d011d4e0e2bf3d481e20eb677faddea6b324ed5efab7bb78ef4388eb85a"}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000880}, 0x44000) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000a40)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xe0, 0xe0, 0x4, [@func={0x3, 0x0, 0x0, 0xc, 0x2}, @struct={0xe, 0x4, 0x0, 0x4, 0x1, 0x100, [{0xe, 0x5, 0xfffffffb}, {0x3, 0x0, 0x4}, {0x8, 0x3, 0xa96}, {0x7c41, 0x2, 0x9}]}, @func={0xc, 0x0, 0x0, 0xc, 0x4}, @volatile={0x3, 0x0, 0x0, 0x9, 0x5}, @struct={0xc, 0x7, 0x0, 0x4, 0x1, 0x0, [{0xc, 0x2, 0xb0f}, {0x1, 0x3, 0x6}, {0xc, 0x1, 0x7}, {0x5, 0x4, 0x3}, {0x7, 0x3, 0xffffffff}, {0x1, 0x4, 0x10}, {0xd, 0x5, 0x1ff}]}, @enum={0xc, 0x1, 0x0, 0x6, 0x4, [{0x8, 0x2}]}, @typedef={0xa}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000940)=""/208, 0xfc, 0xd0, 0x0, 0x2}, 0x28) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r13, 0x11, 0x1, &(0x7f0000000a80)=0x1, 0x4) connect$unix(r6, &(0x7f0000000ac0)=@file={0x0, './file0\x00'}, 0x6e) sendmsg$nl_route(r6, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@ipv6_getaddr={0x68, 0x16, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x1f, 0x20, 0xff, r5}, [@IFA_RT_PRIORITY={0x8}, @IFA_FLAGS={0x8, 0x8, 0x40}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffff0}, @IFA_LOCAL={0x14, 0x2, @remote}, @IFA_FLAGS={0x8, 0x8, 0x101}, @IFA_FLAGS={0x8, 0x8, 0x204}, @IFA_CACHEINFO={0x14, 0x6, {0x2, 0x1, 0x6, 0x80000001}}]}, 0x68}, 0x1, 0x0, 0x0, 0x41}, 0x880) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000ec0)={0x0}, &(0x7f0000000f00)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r6, 0x29, 0x22, &(0x7f0000000f40)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@empty}}, &(0x7f0000001040)=0xe8) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000001080)={0x0, 0x0, 0x0}, &(0x7f00000010c0)=0xc) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001100)={0x0, 0x1, 0x10}, 0xc) sendmmsg$unix(r6, &(0x7f0000001f80)=[{{&(0x7f0000000c80)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000e80)=[{&(0x7f0000000d00)="3dbc683dc6c8f909a9baa8ab619f021bd51c7a07d1d0a61433a5e0abef15469968e36f15fa117a90565b5f2c501696bd6971be03542f5b8bd23889fe31d63c97747cb3bd5104375fa63d8e1577851094cac048419663b0db88694f860b2c2ff124c066e45a00db4843cb5443fed030b6cf619316bc06c38c3adb6e861cbb8ae782504a65fff71aa203784f5f4db702d24e0362286ec70734aaabde", 0x9b}, {&(0x7f0000000dc0)="69df956df50ed7c7bc7f212b4e251b2598a0252d4e838ba92e6342553975d9be53788a2ad838dea5ff35701dfe1d3a8a6a0e9ecd0c952078a751ff5481f14c2df8b83800f0922c14ed4a920e1a762fb7f82f3b4d4e97f3160447519d304bb843706519e4836a5e81431a194442c3c3a127a06e30912a3920e6b8b026dcab4332b23aa2", 0x83}], 0x2, &(0x7f0000001140)=[@rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x20, 0x1, 0x1, [r9, r11, r6, r12]}}, @rights={{0x18, 0x1, 0x1, [r2, r10]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x20, 0x1, 0x1, [r6, r12, r17, r13]}}], 0x90, 0x4040001}}, {{&(0x7f0000001200)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001280), 0x0, &(0x7f00000012c0), 0x0, 0x8044010}}, {{&(0x7f0000001300)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001a00)=[{&(0x7f0000001380)="aa855d6d3c656366b41d866e40a49fd56e8f44cb49301e56ae9660be51f1cadf99930ce992360be1af4b4c84673338da6b5e21412c8bb2d065b0be09c8f953b0a0995d29fc3e604670c5a1a29ceed969631361b2f63b7d7e3d83250059539fc3bd2c77b161e3a966ae1d325671e32b4ff54a603e1e2ff54ea8f10f3fdd798924b3aed7b86f4fca1918f1483e2dfbf3093cc54f040d13e0efa898a4e800a389256daa1cfd13a513d06b6973b737d3ebbbd30710e66c5690ada2d6f1", 0xbb}, {&(0x7f0000001440)="419b2e67d8e177e8366e276dfa0faa7660fd67b25245b51e0ae47eb69becafa90b9044669501e526740a52382122fc589517c7afae3b0c280076ce746238e363f95053d4df0f7655bcd1113908d69ef221a2bff2d7fa9e871ea6d61a366bf1", 0x5f}, {&(0x7f00000014c0)}, {&(0x7f0000001500)="890e0cf4c07e4f0590507b2bebc6524432c53e7a3e93e9eef1c0b219962280d788668a5af8e9142139ad9b91a8f732415bd2fc63021e80d6085da8443182f54bfeb6574378a13f6bd90470f42926ec15025ca290d9dd160a5ebd7ba7753c91963f01d94e0ca4ce4af3997ca0922b814beac89f2ad25149cf32c367027b98b6328b51b614cc9f2d3e3b36bf2956f6e27dea2ff4439d390191154c23185a93a8d6bad08ecf9198214d", 0xa8}, {&(0x7f00000015c0)="38a72f1b81e4adc0d071e70407de45adef98129051df09e83dbb06176cd976dcfc14a9c92adbc7fe8e0a2f060ccc9ff124677e013dd65b3661f6d2c8bdb2a2b7d5e10709fda22ac0e589a6f295fbabf32b70b3ae6e802bc3b35db798f0a799dcf034", 0x62}, {&(0x7f0000001640)="b1c38ef41e42d33fc705ee9b899aaddd7be50e133567cbddbfbefc18a4e324dcb7157fa264c572657d663a573c2e54a07ec136631820a5ee16adfd7db2c0c6c1942ed5adf20e01febdcacf508ebd32d6a73868844025299a7191f55513d45ed3c3cbb3aab4bd63d712eded2c402b88ab", 0x70}, {&(0x7f00000016c0)="e59b98f3ec6c209dd1668efa6928c7ce35514fc42d978fd682e7826e94deced95bf1bb6c5702f87872", 0x29}, {&(0x7f0000001700)="e7f5eac6dc7782a8612b001f86ec5607d4f03378dae963304234d938b62c5e61955ef2ead7e654aaff6d7c00026abfc5c73d81dbcff974a2bd449f8bacf76e8ee7a92cece404ccc330fb12e4520348dfea758b602e0df6a00240720bf0932206f4239e36a7321352849f51a56d359adbfc55d73898475664f53c1f9a05623849e9eaa4e684e2a9ca04c022b84c6b78c233530dd151b49dce48036f87dd162f054f3e05e0dd3a325710e0c1b01e963b6950cfa123962c4213924e39f6ba17e001659ce6b3a6182a131b5b24ab8c7793ace7394d26ac94c8df9d85ae7e9624736de47e448c2c041b6ffc4a1465cf535bd9f81f7f", 0xf3}, {&(0x7f0000001800)="91bb9d32088300a9d39870f0815fb23908c6ca157da0eeae9f3c33e9cf39d28145cd9bfaa7a0b1b16ea1f19d8f5e4a2b333263069cdcb34fe290ede61406b6771392e6362ca656f84c3cb0f632c47808fa06b70967b7e63fa04549b837fc7d7d261a49c65d4a8c821fcac397355bd11611fe7f47ed61a4032473e5fd0cdcf2ad49802cfb7c4eb916ffc5b7c4546543c84d6330952e43028364751f442005dc56aa667da777f89a547575655e13f25bf7a632caf4f79bf890c59e867b02b93d95d222ffa9bdb1e46492ab1a135e9541d8ff82da973dd5", 0xd6}, {&(0x7f0000001900)="be7d4baafae80ee307d2da573c4f6f9b7063fcb9f08a71062d5c04c005bbc47913eba6b5a7a44ca90985a9479217901a1c6e26f52dfd55d8907868015911bedca940a959059fd862a3375c0bd3b3c20d72ffff9d79ed90e41de088e8d4e1dd3a19e81ac675f9e31f209f84a36d4342494bb9b4b54a58053b412a750daf8dd867e11b7ecf8eb633755208b081d9c58c33873a337e1473002587454ae5e436e289f4bbf70f0f4534475432597fa48e0265b9d2d7e7e4c2465849eea8fb7fb978dcc603389f", 0xc4}], 0xa, &(0x7f0000001e80)=[@cred={{0x1c, 0x1, 0x2, {r3}}}, @rights={{0x2c, 0x1, 0x1, [r10, r11, r13, r9, 0xffffffffffffffff, r12, r6]}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c, 0x1, 0x2, {r3}}}, @cred={{0x1c}}], 0xc8, 0x8000}}], 0x3, 0x80) 1m10.103197424s ago: executing program 3 (id=5529): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000004380)=[{&(0x7f0000000000)=@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)='r', 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="20000000000000008400090000000000200100000000000000000000000000021800000000000000840000000000000000000900"], 0x38, 0x20000010}], 0x1, 0x4000) getsockopt$packet_int(r1, 0x107, 0x8, 0x0, &(0x7f0000000080)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x0, 0x0, 0x1, 0x3, 0xff01, 0x6}, 0x20) 1m10.017341648s ago: executing program 1 (id=5530): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x0, 0x101}, 0x18) write$tun(0xffffffffffffffff, &(0x7f0000000700)={@void, @val={0x1, 0x0, 0x0, 0x0, 0xfffe}, @ipv4=@generic={{0x1c, 0x4, 0x3, 0x1a, 0x14c, 0x67, 0x0, 0x2, 0x62, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x57, 0x3, [{0x6, 0x5, "a462af"}, {0x1, 0x12, "1324826d02e76490ab19cbdae0fe574c"}, {0x5, 0x8, "8eb21e05c26c"}, {0x7, 0x11, "abe4eaddda875c8e66e3f436aa6e26"}, {0x0, 0x4, "91eb"}, {0x6, 0x8, "2b212caf1dc9"}, {0x7, 0x9, "d85f638399fe56"}, {0x1, 0x3, 'y'}, {0x2, 0x2}, {0x7, 0x7, "a5f5cbd458"}]}]}}, "940662a63b7e9ac7768340156d653b24e7819a816c924ae92843e3ca8753d914b747ed70be8a8e30e2403769f237a1e8556827fe5d29ea067302cc0687d2e7ba693ea183b12665067c37ee211118f8d7b9f935ed3bc2bb18c51ebb5ee8ddac20f8b7682cec07da63f44f068a34ba3bbf75abfa4a22506be1dbdec0a9ebac2f231ca59c7e2e983aa37804bbf4861c3fc3903266577ffb026045e61b3ef4b513d2f8a1f33a6adb1f1f31eba22f39c1b1c4344bb84a332745544496631cc4f5203fbd9c052e18c2140870534cdbee047b83ec6862d02bf72879a1df05d8"}}, 0x156) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newlink={0x3c, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x6a1d}]}}}]}, 0x3c}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r1, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x1000) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) socket$packet(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r6, &(0x7f0000000300)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0xbe, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000300)=0x8) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x3, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2600fcffffbc43efa8698d0a881c51852e4451b57d037ad3c0459428242588eb17b53ae414015acd00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x800) sendmsg$nl_xfrm(r9, &(0x7f0000000a80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x4008000) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m9.968901296s ago: executing program 3 (id=5531): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0], 0x7c}}, 0x4000051) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_NG_MODULUS={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) 1m9.884568819s ago: executing program 3 (id=5532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 1m9.692741079s ago: executing program 1 (id=5533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r2, 0x0, 0x0, 0xee) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000180009006cbd7000000000001c140002"], 0x30}}, 0x4000000) r4 = socket$inet6(0xa, 0x80002, 0x0) listen(r4, 0x898c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x32, &(0x7f0000000240)=[{0x2000, 0x6, 0xaa, 0xb6c}, {0xf, 0x81, 0xc0, 0x3}, {0x40, 0xed, 0x4, 0x1}, {0x1ff, 0x2, 0xff, 0x1}, {0x410, 0x1c, 0xfd, 0x9}, {0x0, 0x1, 0xd, 0x6}, {0x2, 0x7f, 0x1, 0x7}, {0x6, 0x4, 0x0, 0x4}]}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000400000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x20, 0x1405, 0x100, 0x70bd28, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200488c0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 1m9.245594093s ago: executing program 0 (id=5534): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getpid() (async) r2 = getpid() socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYRES64=r1], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0xfffff010}, {0x28, 0x7, 0x0, 0xa56e}, {0x6, 0x0, 0x0, 0xa1a}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) r7 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@ipv4_newrule={0x1c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x20, 0x0, 0x3, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x20054824) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}, @IFLA_BR_MCAST_QUERY_RESPONSE_INTVL={0xc, 0x22, 0x6}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x81}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r7) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r11, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe00000000000029000000020c0008", 0xfe60) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r10, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x48, r10, 0x917, 0x1000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f00000003c0)={@remote, @empty}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x5, 0x7a, 0xd, @rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x2e}, 0x8, 0x700, 0xfffffff9, 0x8}}) r12 = socket(0x10, 0x803, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) (async) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002740)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x400, 0x7, 0x10, 0x2, 0x100, 0x5}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x201, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x16, 0x2}, {0xfff5, 0x7}, {0xffff, 0x10}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008004}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x2c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8000) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x36, &(0x7f0000000200)={&(0x7f0000000740)={0x4c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DATA_SEQ={0x2, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0x36, &(0x7f0000000200)={&(0x7f0000000740)={0x4c, r10, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7}, @L2TP_ATTR_DATA_SEQ={0x2, 0x4, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x20004040) 58.892068442s ago: executing program 32 (id=5414): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200002000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff0000000003000000000000000000000002000000000000000000000000000002030000000000000000000002"], 0x0, 0x56}, 0x20) (async) unshare(0x64041080) (async) ioctl$sock_inet_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000480)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x27}}, 0x325, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)='nr0\x00', 0x7fffffffffffffff, 0x3, 0x6754}) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48) (async) openat$cgroup_devices(r3, &(0x7f00000000c0)='devices.allow\x00', 0x2, 0x0) (async) close(0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) (async) writev(r4, &(0x7f0000000100)=[{&(0x7f0000000340)="b2000000", 0x4}, {&(0x7f00000003c0)="040062db7ba1", 0x6}], 0x2) (async, rerun: 64) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r2, @ANYRES16=r0, @ANYRES32=r1, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) (async, rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x18) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r7, 0x6b, 0x2, &(0x7f0000000140), &(0x7f00000002c0)=0x4) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) socket$nl_netfilter(0x10, 0x3, 0xc) close(r8) socket$l2tp6(0xa, 0x2, 0x73) shutdown(r8, 0x0) recvmmsg(r8, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) (async) read(r8, &(0x7f0000000000)=""/31, 0x1f) (async) connect$pppl2tp(r6, 0x0, 0x0) 45.867039049s ago: executing program 33 (id=5533): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r2, 0x0, 0x0, 0xee) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000040) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="30000000180009006cbd7000000000001c140002"], 0x30}}, 0x4000000) r4 = socket$inet6(0xa, 0x80002, 0x0) listen(r4, 0x898c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e2a, 0xffffffff, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x32, &(0x7f0000000240)=[{0x2000, 0x6, 0xaa, 0xb6c}, {0xf, 0x81, 0xc0, 0x3}, {0x40, 0xed, 0x4, 0x1}, {0x1ff, 0x2, 0xff, 0x1}, {0x410, 0x1c, 0xfd, 0x9}, {0x0, 0x1, 0xd, 0x6}, {0x2, 0x7f, 0x1, 0x7}, {0x6, 0x4, 0x0, 0x4}]}, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x38, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4008010) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000400000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000700000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x28) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x20, 0x1405, 0x100, 0x70bd28, 0x25dfdbff, "", [{{0x8, 0x1, 0x1}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x200488c0}, 0x80) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10}, 0x94) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r6) sendmsg$TIPC_NL_NET_SET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x20, r9, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x8000}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000801}, 0x20004804) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x5}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1_virt_wifi\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x70}, 0x1, 0x0, 0x0, 0x10000}, 0x8080) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x89}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x125}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) 0s ago: executing program 34 (id=5532): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000084}, 0x44084) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@getnexthop={0x20, 0x76, 0xb0d, 0x4000, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}]}, 0x20}}, 0x0) unshare(0x68040200) socket$inet(0x2, 0x3, 0x7) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000540)=ANY=[@ANYBLOB="cd1242bdc9ea000000000000080049000040000800000001907864010102ffffffff01940401009404000094048fcbd9118507be5db652aa53c800000000000308b07800067f4345170fff0065b9f9f5290008ac1e0001ac141404"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r6 = socket(0x1e, 0x4, 0x0) r7 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r7, &(0x7f0000000440)=[{{&(0x7f00000001c0)={0x2, 0x0, @local}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000200)="a1c0ffff000039a9029e2d34161c0000", 0x10}, {0x0, 0x2e}], 0x2}}], 0x1, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000980)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) setsockopt$SO_J1939_FILTER(r7, 0x6b, 0x1, &(0x7f00000003c0)=[{0x2, 0x0, {0x2, 0x1}, {0x0, 0x1}, 0xfd}, {0x0, 0x0, {0x1, 0x1, 0x1}, {0x1, 0xff, 0x3}, 0x2, 0xfe}, {0x2, 0x0, {0x1, 0xf0, 0x3}, {0x1, 0x1, 0x4}, 0xff, 0xfd}, {0x0, 0xffffffffffffffff, {0x1, 0xf0, 0x2}, {0x1, 0x0, 0x3}, 0x0, 0xff}, {0x2, 0x2, {0x2, 0xf0, 0x4}, {0x2, 0x1, 0x3}, 0xfe, 0xff}, {0x1, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0xf0, 0x1}, 0xfe, 0xfe}, {0x1, 0x1, {0x0, 0x1, 0x3}, {0x1, 0x0, 0x3}, 0x1, 0x2}, {0x3, 0x3, {0x0, 0xf0, 0x3}, {0x1, 0xf0}, 0x2}], 0x100) close(0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, 0xffffffffffffffff, 0xfffff000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f0000000040)=[{&(0x7f0000000100)="290000002000190f00003fffffffda060200000000e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) kernel console output (not intermixed with test programs): .115270][T23475] ip_set_ad+0x791/0x930 [ 592.115296][T23475] ? __pfx_ip_set_ad+0x10/0x10 [ 592.115364][T23475] nfnetlink_rcv_msg+0xb4d/0x1130 [ 592.115387][T23475] ? unwind_get_return_address+0x4d/0x90 [ 592.115405][T23475] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 592.115429][T23475] ? nfnetlink_rcv_msg+0x20d/0x1130 [ 592.115471][T23475] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 592.115540][T23475] netlink_rcv_skb+0x208/0x470 [ 592.115558][T23475] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 592.115583][T23475] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 592.115609][T23475] ? bpf_lsm_capable+0x9/0x20 [ 592.115624][T23475] ? security_capable+0x7e/0x2e0 [ 592.115655][T23475] nfnetlink_rcv+0x282/0x2590 [ 592.115679][T23475] ? __local_bh_enable_ip+0x12d/0x1c0 [ 592.115696][T23475] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 592.115719][T23475] ? __dev_queue_xmit+0x289/0x3140 [ 592.115736][T23475] ? __dev_queue_xmit+0x289/0x3140 [ 592.115754][T23475] ? __dev_queue_xmit+0x1955/0x3140 [ 592.115770][T23475] ? do_syscall_64+0xfa/0xf80 [ 592.115800][T23475] ? __dev_queue_xmit+0x289/0x3140 [ 592.115823][T23475] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 592.115853][T23475] ? __pfx___dev_queue_xmit+0x10/0x10 [ 592.115880][T23475] ? ref_tracker_free+0x63a/0x7d0 [ 592.115900][T23475] ? __asan_memcpy+0x40/0x70 [ 592.115920][T23475] ? __pfx_ref_tracker_free+0x10/0x10 [ 592.115956][T23475] ? skb_clone+0x246/0x3a0 [ 592.115977][T23475] ? __netlink_deliver_tap+0x807/0x850 [ 592.115993][T23475] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.116017][T23475] ? netlink_deliver_tap+0x2e/0x1b0 [ 592.116040][T23475] netlink_unicast+0x82f/0x9e0 [ 592.116074][T23475] ? __pfx_netlink_unicast+0x10/0x10 [ 592.116101][T23475] ? netlink_sendmsg+0x642/0xb30 [ 592.116115][T23475] ? skb_put+0x11b/0x210 [ 592.116142][T23475] netlink_sendmsg+0x805/0xb30 [ 592.116170][T23475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.116198][T23475] ? aa_sock_msg_perm+0xf1/0x1b0 [ 592.116217][T23475] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 592.116239][T23475] ? __pfx_netlink_sendmsg+0x10/0x10 [ 592.116258][T23475] __sock_sendmsg+0x21c/0x270 [ 592.116282][T23475] ____sys_sendmsg+0x505/0x820 [ 592.116311][T23475] ? __pfx_____sys_sendmsg+0x10/0x10 [ 592.116346][T23475] ? import_iovec+0x74/0xa0 [ 592.116371][T23475] ___sys_sendmsg+0x21f/0x2a0 [ 592.116397][T23475] ? __pfx____sys_sendmsg+0x10/0x10 [ 592.116427][T23475] ? futex_wake+0x4b2/0x560 [ 592.116475][T23475] ? __fget_files+0x2a/0x420 [ 592.116489][T23475] ? __fget_files+0x3a0/0x420 [ 592.116516][T23475] __x64_sys_sendmsg+0x19b/0x260 [ 592.116544][T23475] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 592.116587][T23475] ? do_syscall_64+0xbe/0xf80 [ 592.116611][T23475] do_syscall_64+0xfa/0xf80 [ 592.116640][T23475] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.116657][T23475] ? clear_bhb_loop+0x60/0xb0 [ 592.116678][T23475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.116694][T23475] RIP: 0033:0x7f9b33b8f749 [ 592.116711][T23475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.116726][T23475] RSP: 002b:00007f9b31dee038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 592.116746][T23475] RAX: ffffffffffffffda RBX: 00007f9b33de5fa0 RCX: 00007f9b33b8f749 [ 592.116759][T23475] RDX: 0000000000000090 RSI: 00002000000002c0 RDI: 000000000000000b [ 592.116770][T23475] RBP: 00007f9b33c13f91 R08: 0000000000000000 R09: 0000000000000000 [ 592.116781][T23475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 592.116791][T23475] R13: 00007f9b33de6038 R14: 00007f9b33de5fa0 R15: 00007ffd45211c48 [ 592.116823][T23475] [ 592.644028][T23475] Mem-Info: [ 592.651558][T23529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4561'. [ 592.676069][T15466] bond2: (slave bridge2): failed to get link speed/duplex [ 592.685329][T23475] active_anon:13049 inactive_anon:0 isolated_anon:0 [ 592.685329][T23475] active_file:3141 inactive_file:40075 isolated_file:0 [ 592.685329][T23475] unevictable:768 dirty:107 writeback:0 [ 592.685329][T23475] slab_reclaimable:13542 slab_unreclaimable:201758 [ 592.685329][T23475] mapped:29154 shmem:1357 pagetables:1235 [ 592.685329][T23475] sec_pagetables:0 bounce:0 [ 592.685329][T23475] kernel_misc_reclaimable:0 [ 592.685329][T23475] free:1201788 free_pcp:16431 free_cma:0 [ 592.735995][T23475] Node 0 active_anon:52396kB inactive_anon:0kB active_file:12564kB inactive_file:160096kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116616kB dirty:428kB writeback:0kB shmem:3892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15296kB pagetables:4896kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 592.786932][T15482] bond2: (slave bridge2): failed to get link speed/duplex [ 592.792954][T23475] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 592.824992][T23475] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.857264][T23475] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 592.863638][T23475] Node 0 DMA32 free:885204kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52640kB inactive_anon:0kB active_file:12564kB inactive_file:160096kB unevictable:1536kB writepending:384kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:54556kB local_pcp:21232kB free_cma:0kB [ 592.901789][T23475] lowmem_reserve[]: 0 0 0 0 0 [ 592.907161][T23475] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 592.937109][T23475] lowmem_reserve[]: 0 0 0 0 0 [ 592.946235][T15483] bond2: (slave bridge2): failed to get link speed/duplex [ 592.971896][T23475] Node 1 Normal free:3906732kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:10836kB local_pcp:5864kB free_cma:0kB [ 593.032822][T23475] lowmem_reserve[]: 0 0 0 0 0 [ 593.052461][T23475] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 593.103164][T23475] Node 0 DMA32: 3033*4kB (UM) 1568*8kB (UME) 813*16kB (UE) 1031*32kB (UME) 725*64kB (UE) 438*128kB (UM) 386*256kB (UME) 287*512kB (UM) 142*1024kB (UME) 9*2048kB (UM) 74*4096kB (UM) = 885844kB [ 593.122807][ T1341] bond2: (slave bridge2): failed to get link speed/duplex [ 593.153831][T23475] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 593.216884][T23475] Node 1 Normal: 4*4kB (UE) 22*8kB (UME) 32*16kB (UME) 143*32kB (UME) 43*64kB (UME) 17*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 949*4096kB (M) = 3906784kB [ 593.235607][ T2123] bond2: (slave bridge2): failed to get link speed/duplex [ 593.288641][T23475] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.302165][T23475] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.344064][T23475] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 593.346138][T15483] bond2: (slave bridge2): failed to get link speed/duplex [ 593.354963][T23475] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 593.371648][T23475] 44570 total pagecache pages [ 593.394498][T23475] 0 pages in swap cache [ 593.410979][T23475] Free swap = 124996kB [ 593.415322][T23475] Total swap = 124996kB [ 593.420360][T23475] 2097051 pages RAM [ 593.453789][T23475] 0 pages HighMem/MovableOnly [ 593.472125][T23572] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4568'. [ 593.475555][T23475] 424280 pages reserved [ 593.532233][T15466] bond2: (slave bridge2): failed to get link speed/duplex [ 593.533324][T23475] 0 pages cma reserved [ 593.722797][T23589] netlink: 'syz.0.4572': attribute type 20 has an invalid length. [ 593.730905][T23591] tipc: Enabling of bearer rejected, failed to enable media [ 593.829778][T23581] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 594.114418][T23612] wg1 speed is unknown, defaulting to 1000 [ 594.129800][T23614] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4578'. [ 594.146080][T23618] netlink: 'syz.1.4577': attribute type 1 has an invalid length. [ 594.190483][T23612] lo speed is unknown, defaulting to 1000 [ 594.319683][T23625] netlink: 'syz.2.4580': attribute type 3 has an invalid length. [ 594.615121][T23648] gretap2: entered promiscuous mode [ 594.623812][T23625] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4580'. [ 594.725771][T23664] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 594.774064][T23664] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4590'. [ 595.126072][ T73] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 595.179170][T23682] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 595.270097][T23690] : renamed from bond_slave_0 [ 595.298823][T23689] netlink: 'syz.4.4596': attribute type 1 has an invalid length. [ 595.419582][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4599'. [ 595.466574][T23700] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4599'. [ 595.521458][T23705] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4600'. [ 595.690864][T23701] xt_CT: No such helper "snmp" [ 595.818773][T23718] tipc: Enabling of bearer rejected, already enabled [ 595.844797][T23716] sctp: [Deprecated]: syz.3.4602 (pid 23716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 595.844797][T23716] Use struct sctp_sack_info instead [ 595.868331][T23718] rdma_rxe: rxe_newlink: failed to add bond0 [ 595.924796][T23720] netlink: 'syz.4.4604': attribute type 10 has an invalid length. [ 595.978168][T23720] team0: Port device syz_tun added [ 596.103886][T23732] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 596.311081][T23741] netlink: 'syz.1.4610': attribute type 10 has an invalid length. [ 596.508226][ T60] net_ratelimit: 20 callbacks suppressed [ 596.508246][ T60] bond2: (slave bridge2): failed to get link speed/duplex [ 596.564841][T23753] syzkaller0: entered promiscuous mode [ 596.606678][T23753] syzkaller0: entered allmulticast mode [ 596.636876][ T1341] bond2: (slave bridge2): failed to get link speed/duplex [ 596.776246][ T1341] bond2: (slave bridge2): failed to get link speed/duplex [ 596.967750][T15482] bond2: (slave bridge2): failed to get link speed/duplex [ 596.983120][T23771] veth1_macvtap: left promiscuous mode [ 597.006335][T23771] macsec0: entered allmulticast mode [ 597.030176][T23770] veth1_macvtap: entered promiscuous mode [ 597.048247][T23770] veth1_macvtap: entered allmulticast mode [ 597.066357][T23770] macsec0: left allmulticast mode [ 597.071430][T23770] veth1_macvtap: left allmulticast mode [ 597.086664][T15482] bond2: (slave bridge2): failed to get link speed/duplex [ 597.170463][T23782] macvtap1: entered promiscuous mode [ 597.176759][T23782] macvtap1: entered allmulticast mode [ 597.236221][T15466] bond2: (slave bridge2): failed to get link speed/duplex [ 597.257679][T23793] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 597.280678][T23794] __nla_validate_parse: 2 callbacks suppressed [ 597.280695][T23794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4624'. [ 597.320324][T23794] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4624'. [ 597.352092][T15457] bond2: (slave bridge2): failed to get link speed/duplex [ 597.496526][ T60] bond2: (slave bridge2): failed to get link speed/duplex [ 597.500522][T23818] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 597.571103][T23821] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4633'. [ 597.615870][ T60] bond2: (slave bridge2): failed to get link speed/duplex [ 597.696294][T23838] netlink: 'syz.1.4636': attribute type 1 has an invalid length. [ 597.707526][T23838] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4636'. [ 597.747416][T15457] bond2: (slave bridge2): failed to get link speed/duplex [ 597.921266][T23851] veth0_to_bridge: vlans aren't supported yet for dev_uc|mc_add() [ 597.921521][T23852] netlink: 'syz.2.4641': attribute type 1 has an invalid length. [ 598.417322][T23883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4648'. [ 598.490763][T23885] netlink: 'syz.4.4649': attribute type 4 has an invalid length. [ 598.503145][T23888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4651'. [ 598.601637][T23888] mac80211_hwsim hwsim54 wlan0: left promiscuous mode [ 598.622491][T23888] gtp0: left promiscuous mode [ 598.640715][T23888] ip6gre1: left promiscuous mode [ 598.649561][T23888] bond2: left promiscuous mode [ 598.894640][T23923] netlink: 'syz.4.4661': attribute type 1 has an invalid length. [ 598.930770][T23923] 8021q: adding VLAN 0 to HW filter on device bond6 [ 598.941757][T23923] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4661'. [ 599.013138][T23927] syzkaller0: entered promiscuous mode [ 599.019700][T23927] syzkaller0: entered allmulticast mode [ 599.042919][T23927] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4662'. [ 599.052889][T23927] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4662'. [ 599.088455][T23927] tipc: Enabled bearer , priority 0 [ 599.103760][T23926] tipc: Resetting bearer [ 599.186768][T23926] tipc: Disabling bearer [ 599.209888][T23935] tipc: Enabling of bearer rejected, already enabled [ 599.334776][T23951] IPVS: set_ctl: invalid protocol: 229 0.0.0.0:20001 [ 599.360925][T23951] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4671'. [ 599.397727][T23951] vlan1: entered allmulticast mode [ 599.451499][T23956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 599.469423][T23956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 599.485483][T23956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 599.518054][T23956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.722324][T24014] wg1 speed is unknown, defaulting to 1000 [ 600.734626][T24014] lo speed is unknown, defaulting to 1000 [ 600.909740][T24018] xt_CT: You must specify a L4 protocol and not use inversions on it [ 601.207781][T24026] wg1 speed is unknown, defaulting to 1000 [ 601.237664][T24026] lo speed is unknown, defaulting to 1000 [ 601.295594][ C0] bridge0: port 4(macsec0) entered learning state [ 601.371259][T24036] wg1 speed is unknown, defaulting to 1000 [ 601.424092][T24036] lo speed is unknown, defaulting to 1000 [ 601.518092][ T50] net_ratelimit: 25 callbacks suppressed [ 601.518188][ T50] bond2: (slave bridge2): failed to get link speed/duplex [ 602.014774][T24039] wg1 speed is unknown, defaulting to 1000 [ 602.058960][T24039] lo speed is unknown, defaulting to 1000 [ 602.068622][ T2123] bond2: (slave bridge2): failed to get link speed/duplex [ 602.511433][T24067] syzkaller0: entered promiscuous mode [ 602.518873][T24067] syzkaller0: entered allmulticast mode [ 602.691504][T24082] __nla_validate_parse: 4 callbacks suppressed [ 602.691520][T24082] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4703'. [ 602.705684][T15457] bond2: (slave bridge2): failed to get link speed/duplex [ 602.816033][ T50] bond2: (slave bridge2): failed to get link speed/duplex [ 603.187678][ T8922] bond2: (slave bridge2): failed to get link speed/duplex [ 603.445636][T15457] bond2: (slave bridge2): failed to get link speed/duplex [ 603.566527][ T1167] bond2: (slave bridge2): failed to get link speed/duplex [ 603.685826][ T8922] bond2: (slave bridge2): failed to get link speed/duplex [ 603.835751][ T2123] bond2: (slave bridge2): failed to get link speed/duplex [ 603.881823][T24121] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4713'. [ 603.923227][T24123] netlink: 'syz.2.4712': attribute type 1 has an invalid length. [ 604.000923][T24123] bond7: entered promiscuous mode [ 604.007162][T24123] 8021q: adding VLAN 0 to HW filter on device bond7 [ 604.028328][ T8922] bond2: (slave bridge2): failed to get link speed/duplex [ 604.119114][T24132] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4712'. [ 604.296179][T24147] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4719'. [ 604.314500][T24147] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4719'. [ 604.324251][T24150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4720'. [ 604.325468][T24147] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4719'. [ 604.352398][T24147] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4719'. [ 604.392345][T24150] team1: entered promiscuous mode [ 604.404207][T24150] team1: entered allmulticast mode [ 604.412143][T24150] 8021q: adding VLAN 0 to HW filter on device team1 [ 604.420875][T24147] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4719'. [ 604.443346][T24147] netlink: 1 bytes leftover after parsing attributes in process `syz.3.4719'. [ 604.491316][T24155] wg1 speed is unknown, defaulting to 1000 [ 604.502888][T24155] lo speed is unknown, defaulting to 1000 [ 604.914162][T24169] bond11: option arp_validate: invalid value (18446744073491447809) [ 604.967541][T24175] netlink: 'syz.1.4725': attribute type 13 has an invalid length. [ 604.981476][T24169] bond11 (unregistering): Released all slaves [ 605.629441][T24198] netlink: 'syz.4.4732': attribute type 10 has an invalid length. [ 606.038243][T24175] batman_adv: batadv0: Interface deactivated: vxlan0 [ 606.361823][T24198] team0: Port device syz_tun removed [ 606.397612][T24198] syz_tun: entered promiscuous mode [ 606.402358][T24209] netlink: 'syz.2.4735': attribute type 1 has an invalid length. [ 606.403559][T24198] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 606.428020][ T3513] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.441026][ T3513] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.450358][ T3513] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.459394][ T3513] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.537962][ T3513] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.546753][ T3513] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.555263][ T3513] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 606.579693][ T3513] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 606.618793][T24216] mac80211_hwsim hwsim7 wlan0: left allmulticast mode [ 606.642432][T24219] pimreg3: entered allmulticast mode [ 606.842606][T24221] wg1 speed is unknown, defaulting to 1000 [ 606.850634][T24221] lo speed is unknown, defaulting to 1000 [ 607.062841][ T25] block nbd0: Possible stuck request ffff8880252c0000: control (read@0,1024B). Runtime 510 seconds [ 608.650618][T24282] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 608.904682][T24285] syzkaller0: entered promiscuous mode [ 608.918457][T24285] syzkaller0: entered allmulticast mode [ 609.020716][T24290] tipc: Enabled bearer , priority 0 [ 609.028546][T24300] __nla_validate_parse: 32 callbacks suppressed [ 609.028564][T24300] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4758'. [ 609.054576][T24284] tipc: Resetting bearer [ 609.071279][T24305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4759'. [ 609.088149][T24284] tipc: Disabling bearer [ 609.112565][T24305] bridge0: entered promiscuous mode [ 609.122397][T24305] bridge0: port 5(macvtap1) entered blocking state [ 609.129931][T24305] bridge0: port 5(macvtap1) entered disabled state [ 609.138680][T24305] macvtap1: entered allmulticast mode [ 609.144307][T24305] bridge0: entered allmulticast mode [ 609.153433][T24305] macvtap1: left allmulticast mode [ 609.158795][T24305] bridge0: left allmulticast mode [ 609.177922][T24305] bridge0: left promiscuous mode [ 609.340106][T24320] netlink: 'syz.3.4762': attribute type 5 has an invalid length. [ 609.387608][T24320] netlink: 'syz.3.4762': attribute type 1 has an invalid length. [ 609.472294][T24328] bond7: (slave bridge1): making interface the new active one [ 609.482623][T24328] bond7: (slave bridge1): Enslaving as an active interface with an up link [ 609.592137][T24339] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4768'. [ 609.683130][T24339] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.790797][T24350] xt_CT: No such helper "netbios-ns" [ 609.816514][T24339] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.871209][T24357] netlink: 'syz.0.4773': attribute type 27 has an invalid length. [ 609.911801][T24339] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.925119][T24360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4774'. [ 609.949763][T24360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4774'. [ 609.960374][T24357] netlink: 'syz.0.4773': attribute type 3 has an invalid length. [ 610.012788][T24364] netlink: 'syz.2.4775': attribute type 1 has an invalid length. [ 610.047239][T24364] netlink: 'syz.2.4775': attribute type 7 has an invalid length. [ 610.055184][T24364] netlink: 'syz.2.4775': attribute type 8 has an invalid length. [ 610.067480][T24339] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.177993][T15457] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.217347][T24371] wg1 speed is unknown, defaulting to 1000 [ 610.217704][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.237624][T24371] lo speed is unknown, defaulting to 1000 [ 610.258940][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.293026][T15457] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 610.340629][T24379] wg1 speed is unknown, defaulting to 1000 [ 610.349978][T24364] netlink: 208 bytes leftover after parsing attributes in process `syz.2.4775'. [ 610.432533][T24379] lo speed is unknown, defaulting to 1000 [ 610.439207][T24364] NCSI netlink: No device for ifindex 65584 [ 610.449270][T24383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4781'. [ 610.463664][T24383] netlink: 'syz.4.4781': attribute type 53 has an invalid length. [ 610.479377][T24385] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4780'. [ 610.802231][T24390] wg1 speed is unknown, defaulting to 1000 [ 610.811249][T24390] lo speed is unknown, defaulting to 1000 [ 611.127617][T24404] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4786'. [ 611.164404][T24405] sctp: [Deprecated]: syz.4.4787 (pid 24405) Use of int in maxseg socket option. [ 611.164404][T24405] Use struct sctp_assoc_value instead [ 611.471533][T24424] netlink: 'syz.4.4792': attribute type 101 has an invalid length. [ 611.497822][T24424] netlink: 'syz.4.4792': attribute type 7 has an invalid length. [ 611.621358][T24433] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4794'. [ 612.394841][T24433] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 612.406041][T24433] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 612.418283][T24433] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 613.404357][T24492] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 613.643801][T24499] bond8: option xmit_hash_policy: invalid value (10) [ 613.673810][T24499] bond8 (unregistering): Released all slaves [ 614.067294][T24524] __nla_validate_parse: 8 callbacks suppressed [ 614.067311][T24524] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4811'. [ 614.448719][T24516] Cannot find set identified by id 1 to match [ 614.857840][T24552] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4820'. [ 614.979601][T24560] syzkaller0: entered promiscuous mode [ 614.985303][T24560] syzkaller0: entered allmulticast mode [ 615.082340][T24563] validate_nla: 1 callbacks suppressed [ 615.082360][T24563] netlink: 'syz.3.4823': attribute type 39 has an invalid length. [ 615.174677][T24567] ipt_REJECT: TCP_RESET invalid for non-tcp [ 615.183928][T24560] tipc: Enabled bearer , priority 0 [ 615.197732][T24569] netlink: 'syz.4.4825': attribute type 1 has an invalid length. [ 615.209467][T24558] tipc: Resetting bearer [ 615.261245][T24558] tipc: Disabling bearer [ 615.327278][T24569] bond7: entered promiscuous mode [ 615.333048][T24569] 8021q: adding VLAN 0 to HW filter on device bond7 [ 615.501545][T24580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4827'. [ 615.589408][T24582] netlink: 'syz.4.4828': attribute type 1 has an invalid length. [ 615.715365][T24590] netlink: 1028 bytes leftover after parsing attributes in process `syz.4.4830'. [ 615.727594][T24590] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 616.214009][T24609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4836'. [ 616.231283][T24609] syzkaller0: entered promiscuous mode [ 616.237202][T24609] syzkaller0: entered allmulticast mode [ 616.567099][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4840'. [ 616.580762][T24632] netlink: 'syz.3.4843': attribute type 1 has an invalid length. [ 616.581055][T24630] net_ratelimit: 5 callbacks suppressed [ 616.581068][T24630] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 616.655841][ C0] bridge0: port 4(macsec0) entered forwarding state [ 616.662467][ C0] bridge0: topology change detected, propagating [ 616.676575][T24630] pim6reg1: entered promiscuous mode [ 616.681895][T24630] pim6reg1: entered allmulticast mode [ 616.698408][T24632] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4843'. [ 616.883546][T24615] netlink: 'syz.2.4834': attribute type 1 has an invalid length. [ 616.995032][T24615] 8021q: adding VLAN 0 to HW filter on device bond8 [ 617.139674][T24651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4846'. [ 617.145839][T24652] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4847'. [ 617.184185][T24653] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4847'. [ 617.196657][T24654] xt_hashlimit: max too large, truncated to 1048576 [ 617.487823][T24666] team0: left allmulticast mode [ 617.492722][T24666] bridge3: left allmulticast mode [ 617.498789][T24666] bridge0: port 1(team0) entered disabled state [ 617.680504][T24667] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 617.690095][T24667] bridge2: entered allmulticast mode [ 618.274551][T24721] netlink: 'syz.1.4864': attribute type 3 has an invalid length. [ 618.288387][T24721] netlink: 'syz.1.4864': attribute type 16 has an invalid length. [ 618.322045][T24710] 8021q: adding VLAN 0 to HW filter on device bond8 [ 618.329710][T24721] batadv_slave_0: entered promiscuous mode [ 618.355233][T24710] RDS: rds_bind could not find a transport for 4004:0:20:0:c002:0:20:0, load rds_tcp or rds_rdma? [ 618.396984][T24727] ipvlan2: entered promiscuous mode [ 618.606418][T24735] pim6reg1: entered promiscuous mode [ 618.611950][T24735] pim6reg1: entered allmulticast mode [ 618.988084][T24756] tipc: Enabled bearer , priority 0 [ 619.015368][T24756] syzkaller0: entered promiscuous mode [ 619.023117][T24756] syzkaller0: entered allmulticast mode [ 619.150437][T24755] tipc: Resetting bearer [ 619.171929][T24755] tipc: Disabling bearer [ 619.251487][T24771] __nla_validate_parse: 12 callbacks suppressed [ 619.251507][T24771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4879'. [ 619.337872][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4879'. [ 619.365953][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4879'. [ 619.391944][T24775] netlink: 'syz.4.4879': attribute type 15 has an invalid length. [ 619.732249][T24777] wg1 speed is unknown, defaulting to 1000 [ 619.742570][T24785] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4885'. [ 619.754221][T24777] lo speed is unknown, defaulting to 1000 [ 619.885330][T24787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 620.440035][T24806] netlink: 'syz.4.4893': attribute type 29 has an invalid length. [ 620.458152][T24808] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4889'. [ 620.522650][T24810] netlink: 'syz.3.4894': attribute type 1 has an invalid length. [ 620.546240][T24811] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4893'. [ 620.684000][T24817] netlink: 'syz.3.4897': attribute type 3 has an invalid length. [ 620.706331][T24817] netlink: 'syz.3.4897': attribute type 3 has an invalid length. [ 620.721595][T24815] netlink: 'syz.3.4897': attribute type 3 has an invalid length. [ 620.739332][T24815] netlink: 'syz.3.4897': attribute type 3 has an invalid length. [ 620.808434][T24815] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4897'. [ 621.240949][T24844] netlink: 'syz.1.4902': attribute type 39 has an invalid length. [ 621.241666][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4903'. [ 621.261795][T24847] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4903'. [ 621.276247][T24827] openvswitch: netlink: Flow key attr not present in new flow. [ 621.323916][T24846] tipc: Enabled bearer , priority 0 [ 621.336313][T24846] syzkaller0: entered promiscuous mode [ 621.341710][T24850] netlink: 124 bytes leftover after parsing attributes in process `syz.3.4905'. [ 621.341814][T24846] syzkaller0: entered allmulticast mode [ 621.387436][T24850] nbd: nbd3 already in use [ 621.396917][T24850] block nbd3: NBD_DISCONNECT [ 621.403914][T24850] block nbd3: Send disconnect failed -32 [ 621.414018][T24850] block nbd3: shutting down sockets [ 621.431715][T24846] tipc: Resetting bearer [ 621.498289][T24841] tipc: Resetting bearer [ 621.531727][T24841] tipc: Disabling bearer [ 621.587344][ T8922] veth7: left allmulticast mode [ 621.592670][ T8922] veth7: left promiscuous mode [ 621.612009][ T8922] bridge8: port 3(veth7) entered disabled state [ 621.630310][ T8922] veth0_to_bond: left allmulticast mode [ 621.639104][ T8922] veth0_to_bond: left promiscuous mode [ 621.644866][ T8922] bridge8: port 2(veth0_to_bond) entered disabled state [ 621.660963][ T8922] veth5: left allmulticast mode [ 621.666231][ T8922] veth5: left promiscuous mode [ 621.671200][ T8922] bridge8: port 1(veth5) entered disabled state [ 621.828801][ T8922] bond3 (unregistering): (slave ip6gretap2): Releasing active interface [ 621.971852][ T8922] erspan0 (unregistering): left promiscuous mode [ 622.034930][ T8922] bond6 (unregistering): (slave gretap1): Releasing active interface [ 622.059492][ T8922] bond9 (unregistering): (slave gretap3): Releasing active interface [ 622.288126][ T8922] bond2 (unregistering): (slave bridge3): Releasing active interface [ 622.337535][ T8922] bond2 (unregistering): (slave bridge4): Releasing active interface [ 622.676888][ T8922] bond8 (unregistering): (slave bridge10): Releasing backup interface [ 622.875436][ T8922] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 622.900613][ T8922] bond0 (unregistering): Released all slaves [ 623.008046][ T8922] bond1 (unregistering): Released all slaves [ 623.020201][ T8922] bond2 (unregistering): Released all slaves [ 623.120900][ T8922] bond3 (unregistering): Released all slaves [ 623.227098][ T8922] bond4 (unregistering): (slave dummy0): Releasing active interface [ 623.238530][ T8922] bond4 (unregistering): Released all slaves [ 623.340934][ T8922] bond5 (unregistering): Released all slaves [ 623.353546][ T8922] bond6 (unregistering): Released all slaves [ 623.455385][ T8922] bond7 (unregistering): Released all slaves [ 623.469355][ T8922] bond8 (unregistering): Released all slaves [ 623.482791][ T8922] bond9 (unregistering): Released all slaves [ 623.762427][ T8922] tipc: Disabling bearer [ 623.784814][ T8922] tipc: Left network mode [ 624.085833][T24866] wg1 speed is unknown, defaulting to 1000 [ 624.097011][T24866] lo speed is unknown, defaulting to 1000 [ 624.481499][T24860] wg1 speed is unknown, defaulting to 1000 [ 624.499644][T24875] wg1 speed is unknown, defaulting to 1000 [ 624.853388][T24875] lo speed is unknown, defaulting to 1000 [ 624.853393][T24886] wg1 speed is unknown, defaulting to 1000 [ 624.869208][T24905] wg1 speed is unknown, defaulting to 1000 [ 624.877456][T24886] lo speed is unknown, defaulting to 1000 [ 624.960971][T24905] lo speed is unknown, defaulting to 1000 [ 625.030618][T24860] lo speed is unknown, defaulting to 1000 [ 625.930821][ T8922] hsr_slave_0: left promiscuous mode [ 625.946741][ T8922] hsr_slave_1: left promiscuous mode [ 625.961389][T24939] __nla_validate_parse: 2 callbacks suppressed [ 625.961406][T24939] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4922'. [ 627.045392][ T8922] batadv0 (unregistering): left allmulticast mode [ 627.502488][T24958] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4927'. [ 627.527398][T24956] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4926'. [ 627.541016][T24958] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4927'. [ 627.576233][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4928'. [ 627.586906][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4928'. [ 627.597126][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4928'. [ 627.615982][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4928'. [ 627.632189][T24962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4928'. [ 627.784961][T24969] --map-set only usable from mangle table [ 627.805965][T24966] netlink: 'syz.3.4929': attribute type 2 has an invalid length. [ 627.835183][T24966] netlink: 'syz.3.4929': attribute type 21 has an invalid length. [ 627.843197][T24971] bridge8: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 627.979976][ T8922] IPVS: stop unused estimator thread 0... [ 628.011707][T24982] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 628.042745][T24982] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4934'. [ 628.735322][T24996] wg1 speed is unknown, defaulting to 1000 [ 628.745881][T24996] lo speed is unknown, defaulting to 1000 [ 629.443921][T25010] bridge_slave_1: left allmulticast mode [ 629.486742][T25008] wg1 speed is unknown, defaulting to 1000 [ 629.615827][T25010] bridge_slave_1: left promiscuous mode [ 629.626670][T25010] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.659876][T25010] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 629.709316][T25008] lo speed is unknown, defaulting to 1000 [ 629.721983][T25050] syz_tun: entered promiscuous mode [ 629.731924][T25050] 8021q: adding VLAN 0 to HW filter on device bond0 [ 629.740144][T25050] 8021q: adding VLAN 0 to HW filter on device team0 [ 629.782031][T25050] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 630.421179][T25089] xt_hashlimit: Unknown mode mask C4, kernel too old? [ 630.550787][T25080] wg1 speed is unknown, defaulting to 1000 [ 630.567051][T25080] lo speed is unknown, defaulting to 1000 [ 630.763975][T25100] netlink: 'syz.4.4968': attribute type 6 has an invalid length. [ 630.813584][T25100] netlink: 'syz.4.4968': attribute type 1 has an invalid length. [ 630.821876][T25100] NCSI netlink: No device for ifindex 0 [ 631.254499][T25117] __nla_validate_parse: 7 callbacks suppressed [ 631.254517][T25117] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4972'. [ 631.298371][T25119] bond9 (unregistering): Released all slaves [ 631.519842][T25126] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4975'. [ 631.553154][T25122] IPVS: set_ctl: invalid protocol: 103 0.0.0.0:20001 [ 631.594806][T25123] syzkaller1: entered promiscuous mode [ 631.601100][T25123] syzkaller1: entered allmulticast mode [ 631.787264][T25137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4977'. [ 631.798911][T25137] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4977'. [ 631.883956][T25141] netlink: 'syz.3.4979': attribute type 11 has an invalid length. [ 632.118579][T25151] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 632.138694][T25145] wg1 speed is unknown, defaulting to 1000 [ 632.166521][T25154] 8021q: VLANs not supported on ip6_vti0 [ 632.185319][T25151] netlink: 220 bytes leftover after parsing attributes in process `syz.4.4983'. [ 632.274142][T25145] lo speed is unknown, defaulting to 1000 [ 632.393995][T25149] netlink: 766 bytes leftover after parsing attributes in process `syz.3.4981'. [ 632.493112][T25163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4985'. [ 632.512815][T25163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4985'. [ 633.092528][T25182] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4990'. [ 633.306932][T25191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4994'. [ 633.467630][T25199] netlink: 'syz.3.4994': attribute type 39 has an invalid length. [ 633.979635][T25195] wg1 speed is unknown, defaulting to 1000 [ 633.993377][T25195] lo speed is unknown, defaulting to 1000 [ 634.528190][T25222] netlink: 'syz.4.5001': attribute type 49 has an invalid length. [ 635.153147][T25247] bridge0: port 1(1¾x9ÿ) entered disabled state [ 635.176776][T25247] netlink: 'syz.3.5008': attribute type 2 has an invalid length. [ 635.194767][T25247] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 635.305147][T25253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 635.319798][T25253] netlink: 'syz.2.5009': attribute type 8 has an invalid length. [ 635.354313][T25245] xt_TPROXY: Can be used only with -p tcp or -p udp [ 635.407354][T25245] bond6: option arp_validate: invalid value (18446744073491447809) [ 635.426435][T25245] bond6 (unregistering): Released all slaves [ 635.437964][T25249] netlink: 'syz.0.5006': attribute type 13 has an invalid length. [ 635.724474][T25280] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20003 [ 635.790610][T25283] netlink: 'syz.0.5017': attribute type 7 has an invalid length. [ 635.801494][T25283] netlink: 'syz.0.5017': attribute type 8 has an invalid length. [ 635.891624][T25290] netlink: 'syz.0.5020': attribute type 4 has an invalid length. [ 635.908802][T25290] netlink: 'syz.0.5020': attribute type 4 has an invalid length. [ 636.044425][T25302] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 636.072459][T25288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.084334][T25288] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.105926][T25300] syz_tun: entered allmulticast mode [ 636.184825][T25288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.196224][T25288] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.261444][T25311] __nla_validate_parse: 8 callbacks suppressed [ 636.261463][T25311] netlink: 312 bytes leftover after parsing attributes in process `syz.0.5023'. [ 636.299453][T25288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.310294][T25288] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.405306][T25288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.416054][T25288] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.463089][T25317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5025'. [ 636.531713][T25322] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5027'. [ 636.541810][T15465] syzkaller0: tun_net_xmit 76 [ 636.547171][T15465] syzkaller0: tun_net_xmit 48 [ 636.562437][T25322] netlink: 'syz.0.5027': attribute type 15 has an invalid length. [ 636.565901][T12221] syzkaller0: tun_net_xmit 76 [ 636.587952][T25322] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5027'. [ 636.678435][T25329] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5027'. [ 636.770451][T25329] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 637.146467][ T25] block nbd0: Possible stuck request ffff8880252c0000: control (read@0,1024B). Runtime 540 seconds [ 637.302531][T25346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5032'. [ 638.890346][ T3513] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.899144][ T3513] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.908363][T25295] syz_tun: left allmulticast mode [ 638.932011][T25355] tipc: Enabled bearer , priority 0 [ 638.970066][T15465] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 638.980576][T15465] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.991758][T25355] tipc: Disabling bearer [ 639.019906][T15465] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.029121][T15465] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.083397][T15465] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 639.116493][T15465] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.189413][T25370] netlink: 516 bytes leftover after parsing attributes in process `syz.4.5039'. [ 639.492084][T25388] netlink: 220 bytes leftover after parsing attributes in process `syz.1.5048'. [ 639.536820][T25392] siw: device registration error -23 [ 639.702512][T25403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5050'. [ 639.799148][T25405] wg1 speed is unknown, defaulting to 1000 [ 640.027716][T25405] lo speed is unknown, defaulting to 1000 [ 640.078082][T25402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5051'. [ 641.013932][T25462] validate_nla: 1 callbacks suppressed [ 641.013950][T25462] netlink: 'syz.0.5070': attribute type 1 has an invalid length. [ 641.086851][T25462] gretap2: entered allmulticast mode [ 641.138010][T25469] netlink: 'syz.1.5072': attribute type 8 has an invalid length. [ 641.158153][T25466] bridge0: port 3(dummy0) entered disabled state [ 641.255978][T25466] dummy0 (unregistering): left allmulticast mode [ 641.262970][T25466] bridge0: port 3(dummy0) entered disabled state [ 641.301145][T25468] wg1 speed is unknown, defaulting to 1000 [ 641.313681][T25473] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 641.330464][T25468] lo speed is unknown, defaulting to 1000 [ 641.335746][T25473] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 641.369331][T25473] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 641.613122][T25488] __nla_validate_parse: 3 callbacks suppressed [ 641.613141][T25488] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5077'. [ 641.705036][T25488] wg1 speed is unknown, defaulting to 1000 [ 641.732903][T25488] lo speed is unknown, defaulting to 1000 [ 641.886038][T25502] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5081'. [ 642.313781][T25507] netlink: 52 bytes leftover after parsing attributes in process `syz.1.5082'. [ 642.348368][T25498] Cannot find add_set index 2 as target [ 642.560879][T25511] wg1 speed is unknown, defaulting to 1000 [ 642.569296][T25511] lo speed is unknown, defaulting to 1000 [ 643.631768][T25529] wg1 speed is unknown, defaulting to 1000 [ 643.733590][T25529] lo speed is unknown, defaulting to 1000 [ 643.802318][T25512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5083'. [ 644.337294][T25559] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5093'. [ 644.343494][T25557] bond7: option arp_validate: invalid value (18446744073491447809) [ 644.388271][T25556] netlink: 'syz.0.5093': attribute type 13 has an invalid length. [ 644.407996][T25557] bond7 (unregistering): Released all slaves [ 644.450090][T25563] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5095'. [ 645.156297][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5102'. [ 645.225320][T25601] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5102'. [ 645.494588][T25561] wg1 speed is unknown, defaulting to 1000 [ 645.617779][T25615] wg1 speed is unknown, defaulting to 1000 [ 645.669226][T25561] lo speed is unknown, defaulting to 1000 [ 645.694902][T25615] lo speed is unknown, defaulting to 1000 [ 645.729933][T25631] x_tables: unsorted underflow at hook 1 [ 645.965816][T25648] netlink: 52 bytes leftover after parsing attributes in process `syz.0.5118'. [ 645.995265][T25650] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5119'. [ 646.136769][T25656] syzkaller0: entered promiscuous mode [ 646.177891][T25656] syzkaller0: entered allmulticast mode [ 646.248076][T25666] syzkaller0: entered promiscuous mode [ 646.253845][T25666] syzkaller0: entered allmulticast mode [ 646.549546][T25683] netlink: 'syz.0.5126': attribute type 2 has an invalid length. [ 646.557700][T25683] netlink: 'syz.0.5126': attribute type 1 has an invalid length. [ 647.135241][T25710] nbd: nbd4 already in use [ 647.257035][T25715] netlink: 'syz.4.5137': attribute type 21 has an invalid length. [ 647.257035][T25713] netlink: 'syz.4.5137': attribute type 21 has an invalid length. [ 647.887274][T25734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 647.967649][T25730] delete_channel: no stack [ 648.123940][T25737] pim6reg1: entered promiscuous mode [ 648.168942][T25737] pim6reg1: entered allmulticast mode [ 648.252946][T25744] wg1 speed is unknown, defaulting to 1000 [ 648.270851][T25744] lo speed is unknown, defaulting to 1000 [ 648.456985][T25752] __nla_validate_parse: 1 callbacks suppressed [ 648.457004][T25752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5149'. [ 649.186622][T25767] xt_bpf: check failed: parse error [ 649.192693][T25768] xt_bpf: check failed: parse error [ 649.203893][T25767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 649.277701][T25767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5154'. [ 649.429997][T25783] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5158'. [ 649.462945][T25783] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5158'. [ 649.654908][T25786] 8021q: VLANs not supported on ip6gre0 [ 650.052466][T25807] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5163'. [ 650.080508][T25800] 8021q: adding VLAN 0 to HW filter on device bond0 [ 650.088910][T25800] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.100217][T25800] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 650.154117][T25811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5164'. [ 650.164304][T25811] netlink: 35 bytes leftover after parsing attributes in process `syz.2.5164'. [ 650.182308][T25811] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 650.522290][T25829] netlink: 'syz.0.5168': attribute type 10 has an invalid length. [ 650.552431][T25829] 8021q: adding VLAN 0 to HW filter on device team0 [ 650.570962][T25829] team0: entered promiscuous mode [ 650.579694][T25829] team_slave_0: entered promiscuous mode [ 650.585733][T25829] team_slave_1: entered promiscuous mode [ 650.591538][T25829] bridge2: entered promiscuous mode [ 650.600854][T25829] bond0: (slave team0): Enslaving as an active interface with an up link [ 650.852979][T25840] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'. [ 650.882984][T25840] wg1 speed is unknown, defaulting to 1000 [ 650.890804][T25840] lo speed is unknown, defaulting to 1000 [ 651.493947][T25869] netlink: 'syz.1.5179': attribute type 3 has an invalid length. [ 651.503206][T25869] netlink: 666 bytes leftover after parsing attributes in process `syz.1.5179'. [ 651.812531][T25880] netlink: 'syz.1.5183': attribute type 1 has an invalid length. [ 651.998876][T25893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5185'. [ 652.264821][T25913] tipc: Enabling of bearer rejected, already enabled [ 652.604117][T25928] --map-set only usable from mangle table [ 652.611785][T25928] --map-set only usable from mangle table [ 652.618856][T25928] --map-set only usable from mangle table [ 652.625201][T25928] --map-set only usable from mangle table [ 653.304156][T25954] mac80211_hwsim hwsim37 syzkaller0: left promiscuous mode [ 653.323433][T25954] mac80211_hwsim hwsim37 syzkaller0: left allmulticast mode [ 653.473773][T25963] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.525475][T25947] __nla_validate_parse: 67 callbacks suppressed [ 653.545293][T25963] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.631771][T25963] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.652219][T25973] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5207'. [ 653.693974][T25963] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.727254][T25947] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5197'. [ 653.781532][T25977] netlink: 'syz.0.5209': attribute type 21 has an invalid length. [ 653.789714][T25977] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5209'. [ 653.848543][T15483] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.908660][ T60] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 653.956417][ T60] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.001743][ T60] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 654.041643][T25988] tipc: Enabled bearer , priority 0 [ 654.113052][T25993] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5212'. [ 654.260737][T25988] syzkaller0: entered promiscuous mode [ 654.266731][T25988] syzkaller0: entered allmulticast mode [ 654.342967][T25988] tipc: Resetting bearer [ 654.358905][T25985] tipc: Resetting bearer [ 654.383297][T25985] tipc: Disabling bearer [ 654.482883][T26012] Cannot find add_set index 0 as target [ 654.659301][T26024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5219'. [ 654.717839][T26017] wg1 speed is unknown, defaulting to 1000 [ 654.728024][T26017] lo speed is unknown, defaulting to 1000 [ 654.757252][T26027] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5222'. [ 654.785650][T26027] netlink: 35 bytes leftover after parsing attributes in process `syz.4.5222'. [ 654.818794][T26027] netlink: 'syz.4.5222': attribute type 2 has an invalid length. [ 655.548993][T26069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5234'. [ 655.588789][T26069] netlink: 'syz.1.5234': attribute type 1 has an invalid length. [ 655.684173][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5234'. [ 655.727683][T26073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5234'. [ 655.746626][T26075] netlink: 'syz.3.5235': attribute type 1 has an invalid length. [ 655.777317][T26075] netlink: 'syz.3.5235': attribute type 6 has an invalid length. [ 655.806332][T26075] netlink: 'syz.3.5235': attribute type 3 has an invalid length. [ 655.824063][T26069] bond11: entered promiscuous mode [ 655.830249][T26069] 8021q: adding VLAN 0 to HW filter on device bond11 [ 655.998108][T26090] syzkaller1: entered promiscuous mode [ 656.003625][T26090] syzkaller1: entered allmulticast mode [ 656.272941][T26101] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 656.293886][T26101] bond12 (unregistering): Released all slaves [ 656.435067][T26118] tipc: Resetting bearer [ 656.607734][T26133] netlink: 'syz.1.5247': attribute type 1 has an invalid length. [ 656.616134][T26133] netlink: 'syz.1.5247': attribute type 2 has an invalid length. [ 656.672780][T26137] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 656.880733][T26149] 8021q: VLANs not supported on ip6gre0 [ 657.025288][T26160] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 657.940000][T26211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 658.784177][T26259] x_tables: duplicate entry at hook 3 [ 658.818647][T26255] openvswitch: netlink: Flow key attr not present in new flow. [ 658.827237][T26255] Cannot find set identified by id 65534 to match [ 658.881268][T26262] __nla_validate_parse: 17 callbacks suppressed [ 658.881286][T26262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5289'. [ 658.912233][T26262] xt_nfacct: accounting object `\$‚9ZúM#íü¾mUµ|±^cÁ\F9YⳈ«ÃÖ' does not exist [ 658.990365][T26267] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5290'. [ 659.153818][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 659.169537][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 659.193872][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 659.218538][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 659.226807][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 659.233953][T26281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5293'. [ 659.259314][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 659.267268][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 659.274722][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 659.282802][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 659.283740][T26283] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5293'. [ 659.300996][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 659.351406][T26276] wg1 speed is unknown, defaulting to 1000 [ 659.361906][T26276] lo speed is unknown, defaulting to 1000 [ 659.722789][T26292] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5296'. [ 659.828089][T26297] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5297'. [ 659.914532][T26276] chnl_net:caif_netlink_parms(): no params data found [ 660.146629][T26276] bridge0: port 1(bridge_slave_0) entered blocking state [ 660.154041][T26276] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.161744][T26276] bridge_slave_0: entered allmulticast mode [ 660.169847][T26276] bridge_slave_0: entered promiscuous mode [ 660.180447][T26276] bridge0: port 2(bridge_slave_1) entered blocking state [ 660.187791][T26276] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.195166][T26276] bridge_slave_1: entered allmulticast mode [ 660.203531][T26276] bridge_slave_1: entered promiscuous mode [ 660.250946][T26276] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 660.264122][T26276] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.387442][T26276] team0: Port device team_slave_0 added [ 660.406469][T26276] team0: Port device team_slave_1 added [ 660.545136][T26276] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.552852][T26276] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.579534][T26276] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 660.606080][T26311] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5300'. [ 660.607819][T26276] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 660.620201][T26311] block nbd3: shutting down sockets [ 660.623598][T26276] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.657094][T26276] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.744946][T26276] hsr_slave_0: entered promiscuous mode [ 660.764361][T26276] hsr_slave_1: entered promiscuous mode [ 660.766180][T26319] warn_alloc: 1 callbacks suppressed [ 660.766197][T26319] syz.4.5304: vmalloc error: size 16781312, failed to allocated page array size 32776, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 660.771408][T26276] debugfs: 'hsr0' already exists in 'hsr' [ 660.807928][T26319] ,cpuset=/,mems_allowed=0-1 [ 660.822024][T26319] CPU: 0 UID: 0 PID: 26319 Comm: syz.4.5304 Not tainted syzkaller #0 PREEMPT(full) [ 660.822049][T26319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 660.822062][T26319] Call Trace: [ 660.822070][T26319] [ 660.822078][T26319] dump_stack_lvl+0x189/0x250 [ 660.822123][T26319] ? __pfx_dump_stack_lvl+0x10/0x10 [ 660.822142][T26319] ? __pfx__printk+0x10/0x10 [ 660.822165][T26319] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 660.822189][T26319] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 660.822216][T26319] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 660.822243][T26319] warn_alloc+0x214/0x310 [ 660.822271][T26319] ? __pfx_warn_alloc+0x10/0x10 [ 660.822302][T26319] ? __get_vm_area_node+0x28f/0x300 [ 660.822323][T26319] ? xskq_create+0xbf/0x170 [ 660.822346][T26319] __vmalloc_node_range_noprof+0x690/0x12d0 [ 660.822397][T26319] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 660.822422][T26319] ? __kasan_kmalloc+0x93/0xb0 [ 660.822450][T26319] vmalloc_user_noprof+0xad/0xf0 [ 660.822471][T26319] ? xskq_create+0xbf/0x170 [ 660.822491][T26319] xskq_create+0xbf/0x170 [ 660.822520][T26319] xsk_init_queue+0xb0/0x110 [ 660.822542][T26319] xsk_setsockopt+0x57b/0x8d0 [ 660.822562][T26319] ? __pfx_xsk_setsockopt+0x10/0x10 [ 660.822581][T26319] ? __pfx_aa_sk_perm+0x10/0x10 [ 660.822607][T26319] ? aa_sock_opt_perm+0xff/0x1a0 [ 660.822627][T26319] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 660.822647][T26319] ? __pfx_xsk_setsockopt+0x10/0x10 [ 660.822665][T26319] do_sock_setsockopt+0x17c/0x1b0 [ 660.822694][T26319] __x64_sys_setsockopt+0x13f/0x1b0 [ 660.822722][T26319] do_syscall_64+0xfa/0xf80 [ 660.822743][T26319] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.822761][T26319] ? clear_bhb_loop+0x60/0xb0 [ 660.822786][T26319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.822802][T26319] RIP: 0033:0x7f825398f749 [ 660.822818][T26319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 660.822836][T26319] RSP: 002b:00007f82547fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 660.822855][T26319] RAX: ffffffffffffffda RBX: 00007f8253be5fa0 RCX: 00007f825398f749 [ 660.822867][T26319] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000005 [ 660.822878][T26319] RBP: 00007f8253a13f91 R08: 0000000000000004 R09: 0000000000000000 [ 660.822889][T26319] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 660.822900][T26319] R13: 00007f8253be6038 R14: 00007f8253be5fa0 R15: 00007fff8b642e38 [ 660.822931][T26319] [ 661.075704][T26276] Cannot create hsr debugfs directory [ 661.076823][T26319] Mem-Info: [ 661.084200][T26319] active_anon:12975 inactive_anon:0 isolated_anon:0 [ 661.084200][T26319] active_file:3141 inactive_file:40106 isolated_file:0 [ 661.084200][T26319] unevictable:768 dirty:104 writeback:0 [ 661.084200][T26319] slab_reclaimable:13748 slab_unreclaimable:180262 [ 661.084200][T26319] mapped:29119 shmem:1363 pagetables:1241 [ 661.084200][T26319] sec_pagetables:0 bounce:0 [ 661.084200][T26319] kernel_misc_reclaimable:0 [ 661.084200][T26319] free:1211946 free_pcp:28273 free_cma:0 [ 661.130358][T26319] Node 0 active_anon:51900kB inactive_anon:0kB active_file:12564kB inactive_file:160220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116476kB dirty:416kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14020kB pagetables:4820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 661.164316][T26319] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 661.195465][T26319] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 661.227235][T26319] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 661.233027][T26319] Node 0 DMA32 free:924604kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:51900kB inactive_anon:0kB active_file:12564kB inactive_file:160220kB unevictable:1536kB writepending:416kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:102864kB local_pcp:45800kB free_cma:0kB [ 661.267072][T26319] lowmem_reserve[]: 0 0 0 0 0 [ 661.271808][T26319] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 661.278978][T26334] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 661.301841][T26319] lowmem_reserve[]: 0 0 0 0 0 [ 661.317449][T26319] Node 1 Normal free:3907820kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9808kB local_pcp:3936kB free_cma:0kB [ 661.351488][T26319] lowmem_reserve[]: 0 0 0 0 0 [ 661.356913][T26319] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 661.370230][T26319] Node 0 DMA32: 1885*4kB (UME) 416*8kB (UM) 526*16kB (UM) 2362*32kB (UM) 685*64kB (UM) 498*128kB (UM) 416*256kB (UM) 301*512kB (UM) 160*1024kB (UME) 9*2048kB (UM) 69*4096kB (UM) = 927956kB [ 661.376262][ T5844] Bluetooth: hci4: command tx timeout [ 661.395044][T26319] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 661.395148][T26319] Node 1 Normal: 155*4kB (UE) 40*8kB (UME) 32*16kB (UME) 146*32kB (UME) 46*64kB (UME) 17*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 949*4096kB (M) = 3907820kB [ 661.395297][T26319] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.395313][T26319] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 661.395327][T26319] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 661.395340][T26319] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 661.395356][T26319] 44601 total pagecache pages [ 661.395365][T26319] 0 pages in swap cache [ 661.395372][T26319] Free swap = 124996kB [ 661.395380][T26319] Total swap = 124996kB [ 661.395390][T26319] 2097051 pages RAM [ 661.395397][T26319] 0 pages HighMem/MovableOnly [ 661.395405][T26319] 424280 pages reserved [ 661.395412][T26319] 0 pages cma reserved [ 661.492378][T26342] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 661.582460][T26342] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.664758][T26325] wg1 speed is unknown, defaulting to 1000 [ 661.683301][T26333] wg1 speed is unknown, defaulting to 1000 [ 661.701423][T26325] lo speed is unknown, defaulting to 1000 [ 661.722738][T26342] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.742105][T26333] lo speed is unknown, defaulting to 1000 [ 661.799812][T26342] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.876880][T26342] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 662.000392][ T4738] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.041951][T26353] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.051475][T26353] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.085394][T26353] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.493551][T26276] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 662.665774][T26276] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 662.687223][T26276] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 662.707015][T26276] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 662.738015][T26380] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.926535][T26276] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.065073][T26276] 8021q: adding VLAN 0 to HW filter on device team0 [ 663.091550][T26357] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.098744][T26357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.129706][T26357] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.136927][T26357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.267732][T26393] syzkaller0: entered promiscuous mode [ 663.273580][T26393] syzkaller0: entered allmulticast mode [ 663.392618][T26395] wg1 speed is unknown, defaulting to 1000 [ 663.405044][T26395] lo speed is unknown, defaulting to 1000 [ 663.473031][T26402] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5318'. [ 663.537210][ T5844] Bluetooth: hci4: command tx timeout [ 663.641069][T26411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5319'. [ 663.655835][T26411] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5319'. [ 663.809038][T26276] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 663.874630][T26276] veth0_vlan: entered promiscuous mode [ 663.903148][T26276] veth1_vlan: entered promiscuous mode [ 665.618398][ T5844] Bluetooth: hci4: command tx timeout [ 665.812390][T26276] veth0_macvtap: entered promiscuous mode [ 665.887465][T26433] __nla_validate_parse: 1 callbacks suppressed [ 665.887478][T26433] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5321'. [ 665.975344][T26276] veth1_macvtap: entered promiscuous mode [ 666.102114][T26426] wg1 speed is unknown, defaulting to 1000 [ 666.109462][T26276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 666.119676][T26276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 666.168554][T26426] lo speed is unknown, defaulting to 1000 [ 666.183279][T26353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.246355][T26353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.271286][T26353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.300703][T26353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.346882][T26453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5327'. [ 666.559326][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.575211][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.756410][T26353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.783037][T26353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 667.222262][ T25] block nbd0: Possible stuck request ffff8880252c0000: control (read@0,1024B). Runtime 570 seconds [ 667.251336][T26488] IPVS: set_ctl: invalid protocol: 0 10.1.0.255:20004 [ 667.705433][ T5844] Bluetooth: hci4: command tx timeout [ 667.778190][T26513] IPVS: set_ctl: invalid protocol: 0 172.30.1.5:20004 [ 668.029086][T26526] wg1 speed is unknown, defaulting to 1000 [ 668.039766][T26526] lo speed is unknown, defaulting to 1000 [ 668.113308][T26535] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5345'. [ 668.484184][T26555] wg1 speed is unknown, defaulting to 1000 [ 668.510766][T26564] batadv2: entered promiscuous mode [ 668.543912][T26555] lo speed is unknown, defaulting to 1000 [ 668.643830][T26571] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5352'. [ 668.648284][T26570] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5354'. [ 668.814302][T26579] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5354'. [ 668.858881][T26570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5354'. [ 668.889781][T26570] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5354'. [ 669.139409][T26564] wg1 speed is unknown, defaulting to 1000 [ 669.154349][T26584] wg1 speed is unknown, defaulting to 1000 [ 669.160427][T26564] lo speed is unknown, defaulting to 1000 [ 669.299404][T26584] lo speed is unknown, defaulting to 1000 [ 669.671091][T26611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5363'. [ 669.706655][T26611] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 669.729408][T26611] vlan2: entered promiscuous mode [ 669.734675][T26611] vlan2: entered allmulticast mode [ 669.741785][T26611] hsr_slave_1: entered allmulticast mode acpid: input device has been disconnected, fd 3 [ 669.939818][T26621] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5363'. [ 670.318117][T26611] wg1 speed is unknown, defaulting to 1000 [ 670.325051][T26611] lo speed is unknown, defaulting to 1000 [ 671.633164][T26651] geneve2: entered promiscuous mode [ 672.054144][T26658] __nla_validate_parse: 2 callbacks suppressed [ 672.054164][T26658] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5380'. [ 672.077064][T26658] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5380'. [ 672.146056][T26658] netlink: 'syz.3.5380': attribute type 5 has an invalid length. [ 672.154032][T26658] netlink: 'syz.3.5380': attribute type 6 has an invalid length. [ 672.180367][T26663] bridge_slave_0: default FDB implementation only supports local addresses [ 672.443320][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 672.457243][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 672.469025][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 672.478238][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 672.489667][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 672.585466][T26678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5384'. [ 672.600453][T26673] wg1 speed is unknown, defaulting to 1000 [ 672.608759][T26673] lo speed is unknown, defaulting to 1000 [ 672.680787][T26690] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5385'. [ 672.695699][T26690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5385'. [ 672.724449][T26690] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5385'. [ 672.739367][T26690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5385'. [ 672.786690][T26693] tipc: MTU too low for tipc bearer [ 673.024701][T26700] netlink: 176 bytes leftover after parsing attributes in process `syz.1.5388'. [ 673.245372][T26673] chnl_net:caif_netlink_parms(): no params data found [ 673.338613][T26722] netlink: 'syz.1.5392': attribute type 1 has an invalid length. [ 673.370354][T26722] netlink: 224 bytes leftover after parsing attributes in process `syz.1.5392'. [ 673.407641][T26722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5392'. [ 673.447357][T26722] vlan2: entered promiscuous mode [ 673.453166][T26722] bond0: entered promiscuous mode [ 673.459152][T26722] bond_slave_0: entered promiscuous mode [ 673.468699][T26722] bond_slave_1: entered promiscuous mode [ 673.507976][T26673] bridge0: port 1(bridge_slave_0) entered blocking state [ 673.540733][T26673] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.552021][T26673] bridge_slave_0: entered allmulticast mode [ 673.584638][T26673] bridge_slave_0: entered promiscuous mode [ 673.632114][T26673] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.642884][T26673] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.651597][T26673] bridge_slave_1: entered allmulticast mode [ 673.663713][T26673] bridge_slave_1: entered promiscuous mode [ 673.887039][T26673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 673.910733][T26673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.029408][T26673] team0: Port device team_slave_0 added [ 674.049760][T26673] team0: Port device team_slave_1 added [ 674.301798][T26673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 674.315871][T26673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.343539][T26673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 674.361492][T26673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 674.368904][T26673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.403800][T26673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 674.522988][T26673] hsr_slave_0: entered promiscuous mode [ 674.530566][T26673] hsr_slave_1: entered promiscuous mode [ 674.537433][T26673] debugfs: 'hsr0' already exists in 'hsr' [ 674.543324][T26673] Cannot create hsr debugfs directory [ 674.575811][ T5844] Bluetooth: hci2: command tx timeout [ 674.618117][T26769] wg1 speed is unknown, defaulting to 1000 [ 674.618224][T26775] netlink: 'syz.4.5406': attribute type 1 has an invalid length. [ 674.667120][T26769] lo speed is unknown, defaulting to 1000 [ 674.695233][T26775] 8021q: adding VLAN 0 to HW filter on device bond9 [ 675.106629][T26775] bond9 (unregistering): Released all slaves [ 675.148132][T26784] hsr_slave_0: left promiscuous mode [ 675.591377][T26787] syzkaller0: entered promiscuous mode [ 675.597201][T26787] syzkaller0: entered allmulticast mode [ 676.655781][ T5844] Bluetooth: hci2: command tx timeout [ 677.817852][T26815] netlink: 'syz.1.5413': attribute type 10 has an invalid length. [ 677.826254][T26815] __nla_validate_parse: 3 callbacks suppressed [ 677.826270][T26815] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5413'. [ 678.024071][T26824] netlink: 'syz.4.5417': attribute type 10 has an invalid length. [ 678.031471][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5416'. [ 678.047438][T26824] netlink: 'syz.4.5417': attribute type 10 has an invalid length. [ 678.056231][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5416'. [ 678.056971][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5417'. [ 678.065434][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5416'. [ 678.088687][T26826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5416'. [ 678.187862][T26824] bond9: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 678.213245][T26824] bond9 (unregistering): Released all slaves [ 678.267112][T26827] wg1 speed is unknown, defaulting to 1000 [ 678.303446][T26827] lo speed is unknown, defaulting to 1000 [ 678.489775][T26839] netlink: 'syz.1.5420': attribute type 10 has an invalid length. [ 678.528608][T26839] team0: Failed to send options change via netlink (err -105) [ 678.537537][T26839] team0: Port device dummy0 added [ 678.544888][T26839] netlink: 'syz.1.5420': attribute type 10 has an invalid length. [ 678.558208][T26839] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 678.573407][T26839] team0: Failed to send options change via netlink (err -105) [ 678.583047][T26839] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 678.593468][T26839] team0: Port device dummy0 removed [ 678.603645][T26839] dummy0: entered promiscuous mode [ 678.610877][T26839] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 678.672406][T26673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 678.692860][T26673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 678.716972][T26673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 678.736303][ T5838] Bluetooth: hci2: command tx timeout [ 678.743605][T26673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 678.916574][T26673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 678.943949][T26673] 8021q: adding VLAN 0 to HW filter on device team0 [ 678.960224][T15460] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.967490][T15460] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.994186][T15460] bridge0: port 2(bridge_slave_1) entered blocking state [ 679.001538][T15460] bridge0: port 2(bridge_slave_1) entered forwarding state [ 679.442555][T26673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 679.526360][T26673] veth0_vlan: entered promiscuous mode [ 679.544017][T26673] veth1_vlan: entered promiscuous mode [ 679.620057][T26673] veth0_macvtap: entered promiscuous mode [ 679.649993][T26673] veth1_macvtap: entered promiscuous mode [ 679.694746][T26673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.714892][T26673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.735193][T26356] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.758724][T26874] block nbd3: server does not support multiple connections per device. [ 679.771662][T26874] block nbd3: shutting down sockets [ 679.781145][T26356] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.086668][T26356] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.102662][T26356] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.313125][T15477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.322990][T15477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.469762][T15466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.480254][T15466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.816099][ T5844] Bluetooth: hci2: command tx timeout [ 680.927381][T26898] sctp: [Deprecated]: syz.0.5378 (pid 26898) Use of struct sctp_assoc_value in delayed_ack socket option. [ 680.927381][T26898] Use struct sctp_sack_info instead [ 681.668337][T26904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5432'. [ 681.881862][T26910] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5434'. [ 682.236320][T26916] syz.4.5436: vmalloc error: size 100663296, failed to allocated page array size 196608, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 682.336238][T26916] CPU: 0 UID: 0 PID: 26916 Comm: syz.4.5436 Not tainted syzkaller #0 PREEMPT(full) [ 682.336263][T26916] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 682.336273][T26916] Call Trace: [ 682.336281][T26916] [ 682.336290][T26916] dump_stack_lvl+0x189/0x250 [ 682.336317][T26916] ? __pfx_dump_stack_lvl+0x10/0x10 [ 682.336335][T26916] ? __pfx__printk+0x10/0x10 [ 682.336357][T26916] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 682.336382][T26916] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 682.336406][T26916] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 682.336432][T26916] warn_alloc+0x214/0x310 [ 682.336460][T26916] ? __pfx_warn_alloc+0x10/0x10 [ 682.336489][T26916] ? __get_vm_area_node+0x28f/0x300 [ 682.336516][T26916] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 682.336539][T26916] __vmalloc_node_range_noprof+0x690/0x12d0 [ 682.336558][T26916] ? __alloc_frozen_pages_noprof+0x9f/0x370 [ 682.336599][T26916] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 682.336618][T26916] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 682.336637][T26916] ? rcu_is_watching+0x15/0xb0 [ 682.336654][T26916] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 682.336675][T26916] __kvmalloc_node_noprof+0x670/0x910 [ 682.336697][T26916] ? bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 682.336714][T26916] ? __kmalloc_cache_noprof+0x3d5/0x6f0 [ 682.336731][T26916] ? bpf_uprobe_multi_link_attach+0x527/0xee0 [ 682.336753][T26916] bpf_uprobe_multi_link_attach+0x54b/0xee0 [ 682.336784][T26916] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 682.336800][T26916] ? __fget_files+0x2a/0x420 [ 682.336815][T26916] ? __fget_files+0x2a/0x420 [ 682.336828][T26916] ? __fget_files+0x2a/0x420 [ 682.336846][T26916] ? bpf_prog_attach_check_attach_type+0x453/0x540 [ 682.336873][T26916] link_create+0x673/0x850 [ 682.336897][T26916] __sys_bpf+0x6be/0x860 [ 682.336920][T26916] ? __pfx___sys_bpf+0x10/0x10 [ 682.336936][T26916] ? count_memcg_event_mm+0x21/0x260 [ 682.336974][T26916] ? rcu_is_watching+0x15/0xb0 [ 682.337000][T26916] __x64_sys_bpf+0x7c/0x90 [ 682.337020][T26916] do_syscall_64+0xfa/0xf80 [ 682.337049][T26916] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.337066][T26916] ? clear_bhb_loop+0x60/0xb0 [ 682.337086][T26916] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 682.337102][T26916] RIP: 0033:0x7f825398f749 [ 682.337119][T26916] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 682.337134][T26916] RSP: 002b:00007f82547fd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 682.337151][T26916] RAX: ffffffffffffffda RBX: 00007f8253be5fa0 RCX: 00007f825398f749 [ 682.337164][T26916] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 682.337176][T26916] RBP: 00007f8253a13f91 R08: 0000000000000000 R09: 0000000000000000 [ 682.337187][T26916] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 682.337197][T26916] R13: 00007f8253be6038 R14: 00007f8253be5fa0 R15: 00007fff8b642e38 [ 682.337226][T26916] [ 682.337233][T26916] Mem-Info: [ 682.706117][T26916] active_anon:21903 inactive_anon:0 isolated_anon:0 [ 682.706117][T26916] active_file:3141 inactive_file:40115 isolated_file:0 [ 682.706117][T26916] unevictable:768 dirty:109 writeback:0 [ 682.706117][T26916] slab_reclaimable:13652 slab_unreclaimable:185021 [ 682.706117][T26916] mapped:33034 shmem:4207 pagetables:1282 [ 682.706117][T26916] sec_pagetables:0 bounce:0 [ 682.706117][T26916] kernel_misc_reclaimable:0 [ 682.706117][T26916] free:1154989 free_pcp:14980 free_cma:0 [ 682.821661][T26916] Node 0 active_anon:88412kB inactive_anon:0kB active_file:12564kB inactive_file:160256kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116536kB dirty:436kB writeback:0kB shmem:15292kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14928kB pagetables:4984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 682.895827][T26916] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:48kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 682.955729][T26916] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.044879][T26928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5437'. [ 683.045757][T26916] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 683.093387][T26916] Node 0 DMA32 free:696672kB boost:0kB min:34308kB low:42884kB high:51460kB reserved_highatomic:0KB free_highatomic:0KB active_anon:78728kB inactive_anon:0kB active_file:12564kB inactive_file:160256kB unevictable:1536kB writepending:436kB zspages:0kB present:3129332kB managed:2564516kB mlocked:0kB bounce:0kB free_pcp:59668kB local_pcp:23060kB free_cma:0kB [ 683.168164][T26916] lowmem_reserve[]: 0 0 0 0 0 [ 683.173098][T26916] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 683.256117][T26916] lowmem_reserve[]: 0 0 0 0 0 [ 683.261136][T26916] Node 1 Normal free:3907820kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:9808kB local_pcp:5872kB free_cma:0kB [ 683.365916][T26916] lowmem_reserve[]: 0 0 0 0 0 [ 683.377907][T26916] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 683.425811][T26916] Node 0 DMA32: 2*4kB (UE) 27*8kB (E) 0*16kB 2*32kB (ME) 3*64kB (UME) 3*128kB (UME) 222*256kB (UME) 304*512kB (UME) 162*1024kB (U) 17*2048kB (UM) 69*4096kB (UM) = 696672kB [ 683.473650][T26916] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 683.550292][T26916] Node 1 Normal: 155*4kB (UE) 40*8kB (UME) 32*16kB (UME) 146*32kB (UME) 46*64kB (UME) 17*128kB (UME) 5*256kB (UME) 4*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 949*4096kB (M) = 3907820kB [ 683.606881][T26916] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.652502][T26916] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.717167][T26916] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 683.761149][T26916] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 683.786074][T26916] 44648 total pagecache pages [ 683.804166][T26916] 0 pages in swap cache [ 683.818246][T26941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5442'. [ 683.836200][T26916] Free swap = 124996kB [ 683.837164][T26943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5441'. [ 683.872090][T26916] Total swap = 124996kB [ 683.882266][T26916] 2097051 pages RAM [ 683.892407][T26916] 0 pages HighMem/MovableOnly [ 683.902626][T26916] 424280 pages reserved [ 683.912773][T26916] 0 pages cma reserved [ 683.956338][T26945] netlink: 'syz.3.5442': attribute type 2 has an invalid length. [ 684.708716][T26978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5452'. [ 684.781730][T26978] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 685.862474][T27019] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5467'. [ 686.073255][T27024] tipc: Started in network mode [ 686.093921][T27024] tipc: Node identity 6254ba785ee3, cluster identity 4711 [ 686.112693][T27024] tipc: Enabled bearer , priority 0 [ 686.158412][T27027] syzkaller0: entered promiscuous mode [ 686.167716][T27026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5470'. [ 686.178488][T27027] syzkaller0: entered allmulticast mode [ 686.186606][T27026] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5470'. [ 686.243529][T27024] tipc: Resetting bearer [ 686.252033][T27024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5469'. [ 686.284314][T27023] tipc: Resetting bearer [ 686.302724][T27023] tipc: Disabling bearer [ 686.549172][T27034] wg1 speed is unknown, defaulting to 1000 [ 686.578939][T27034] lo speed is unknown, defaulting to 1000 [ 686.607097][T27039] netlink: 'syz.3.5474': attribute type 1 has an invalid length. [ 686.679603][T27039] 8021q: adding VLAN 0 to HW filter on device bond9 [ 686.800814][T27041] bond9: (slave veth7): Enslaving as an active interface with a down link [ 686.859052][T27039] bond9: (slave dummy0): Enslaving as an active interface with a down link [ 687.147047][T27042] bond9 (unregistering): (slave veth7): Releasing active interface [ 687.160620][T27042] bond9 (unregistering): (slave dummy0): Releasing active interface [ 687.174180][T27042] bond9 (unregistering): Released all slaves [ 687.199315][T27043] netlink: 'syz.3.5474': attribute type 25 has an invalid length. [ 687.378408][T27047] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5475'. [ 687.678099][T27061] wg1 speed is unknown, defaulting to 1000 [ 687.690821][T27061] lo speed is unknown, defaulting to 1000 [ 687.720314][T27065] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5482'. [ 688.791071][T27111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5495'. [ 688.870820][ T936] IPVS: starting estimator thread 0... [ 688.970498][T27114] IPVS: using max 36 ests per chain, 86400 per kthread [ 689.094216][T27129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5500'. [ 689.112650][T27129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5500'. [ 689.155241][T27133] bond0: (slave rose0): Enslaving as an active interface with an up link [ 689.188352][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5501'. [ 689.207957][T26354] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.217112][T27137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5501'. [ 689.227146][T26354] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.239031][T26354] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.266453][T26354] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.653669][T27166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5512'. [ 689.704182][T27162] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5509'. [ 689.717020][T27162] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5509'. [ 689.749138][T27170] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5513'. [ 689.770249][T27175] netlink: 108 bytes leftover after parsing attributes in process `syz.0.5512'. [ 690.039601][T27193] vlan5: entered promiscuous mode [ 690.057680][T27193] geneve1: entered promiscuous mode [ 690.063120][T27193] vlan5: entered allmulticast mode [ 690.068633][T27193] geneve1: entered allmulticast mode [ 690.181702][T27203] netlink: 'syz.0.5521': attribute type 12 has an invalid length. [ 690.207375][T27203] bridge0: port 3(veth0_to_bridge) entered blocking state [ 690.222602][T27203] bridge0: port 3(veth0_to_bridge) entered disabled state [ 690.244181][T27203] veth0_to_bridge: entered allmulticast mode [ 690.264491][T27203] veth0_to_bridge: entered promiscuous mode [ 690.283250][T27203] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 690.298583][T27203] bridge0: port 3(veth0_to_bridge) entered blocking state [ 690.306343][T27203] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 690.586909][T27223] IPVS: set_ctl: invalid protocol: 136 172.20.20.187:20004 [ 690.677051][T27224] netlink: 'syz.0.5527': attribute type 12 has an invalid length. [ 690.928128][T27234] wg1 speed is unknown, defaulting to 1000 [ 690.951331][T27234] lo speed is unknown, defaulting to 1000 [ 691.060431][T27209] wg1 speed is unknown, defaulting to 1000 [ 691.068845][T27209] lo speed is unknown, defaulting to 1000 [ 691.487554][T27237] netlink: 'syz.3.5532': attribute type 6 has an invalid length. [ 691.537052][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.537647][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 691.549562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.561472][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 691.573590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.585559][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 691.597557][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.609507][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 691.621425][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 691.633618][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 696.545683][ C1] net_ratelimit: 21637 callbacks suppressed [ 696.545704][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.545724][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 696.552856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.564010][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.576346][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.588819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 696.600798][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.611855][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 696.623934][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 696.635903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 699.133534][ C0] sched: DL replenish lagged too much [ 701.555637][ C1] net_ratelimit: 17111 callbacks suppressed [ 701.555657][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.555831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 701.563348][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.576345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.589609][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.602427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 701.614243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.626484][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 701.639546][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 701.651084][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 701.695712][ T25] block nbd0: Possible stuck request ffff8880252c0000: control (read@0,1024B). Runtime 600 seconds [ 706.565585][ C1] net_ratelimit: 17891 callbacks suppressed [ 706.565606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.565735][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 706.573362][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.584009][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 706.596437][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.608687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 706.621015][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.633414][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 706.645255][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 706.657204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 711.575564][ C0] net_ratelimit: 19975 callbacks suppressed [ 711.575586][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 711.576430][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.582078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 711.594056][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.605973][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 711.618020][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.629819][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 711.641856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 711.653865][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 711.666613][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.585820][ C0] net_ratelimit: 18053 callbacks suppressed [ 716.585840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.585841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 716.586306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 716.593334][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.604741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 716.616822][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.628878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 716.641776][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.654177][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 716.664856][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.595856][ C0] net_ratelimit: 17822 callbacks suppressed [ 721.595878][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 721.595894][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.602300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 721.615164][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.626192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 721.638237][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.650035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 721.663107][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 721.673942][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 721.686103][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.605866][ C0] net_ratelimit: 17759 callbacks suppressed [ 726.605887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 726.606474][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.613377][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 726.626547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.638635][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 726.651390][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.662545][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 726.674385][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 726.686287][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 726.699492][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.615551][ C0] net_ratelimit: 17709 callbacks suppressed [ 731.615571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 731.616700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.621941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 731.634032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.645871][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 731.658803][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.670013][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 731.682044][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 731.694101][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 731.707159][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.625767][ C0] net_ratelimit: 17918 callbacks suppressed [ 736.625789][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 736.625794][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.626569][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.632064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 736.644193][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.656093][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 736.668627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.680131][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 736.692204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 736.704149][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 741.635601][ C0] net_ratelimit: 19463 callbacks suppressed [ 741.635620][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 741.635792][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.641927][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 741.654468][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.666146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 741.678155][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.690105][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 741.702578][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 741.714269][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 741.726283][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.645657][ C1] net_ratelimit: 19660 callbacks suppressed [ 746.645679][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.645859][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 746.653326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.664199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 746.676059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.688203][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 746.700680][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.712132][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 746.724810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 746.737686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 749.567732][ T56] block nbd0: Possible stuck request ffff8880252c0000: control (read@0,1024B). Runtime 630 seconds [ 751.655591][ C0] net_ratelimit: 18316 callbacks suppressed [ 751.655611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 751.655699][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.661935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 751.674000][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.685948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.698486][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.710254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.722214][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 751.734206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 751.746466][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.665530][ C0] net_ratelimit: 17876 callbacks suppressed [ 756.665551][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.665603][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.671915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.684029][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.695956][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 756.709574][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.719854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 756.731862][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 756.744850][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 756.757836][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.675754][ C0] net_ratelimit: 18234 callbacks suppressed [ 761.675773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.676047][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.682115][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.694207][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.706035][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 761.718590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.730032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 761.742016][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 761.753868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 761.768031][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.685914][ C0] net_ratelimit: 18097 callbacks suppressed [ 766.685932][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.685935][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 766.686296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 766.692601][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.704582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 766.719145][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.729205][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.741179][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.753408][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 766.765870][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.695556][ C0] net_ratelimit: 17982 callbacks suppressed [ 771.695576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 771.696883][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.701882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.713972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.726282][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.738471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.750240][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 771.762148][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 771.774143][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 771.787021][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.705675][ C1] net_ratelimit: 18064 callbacks suppressed [ 776.705695][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.706309][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 776.712216][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.724196][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 776.737700][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.748572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 776.761199][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.773299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 776.785632][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 776.799127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.715731][ C0] net_ratelimit: 18070 callbacks suppressed [ 781.715751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.715831][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.722163][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.734423][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.746150][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 781.757977][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.769985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 781.783385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 781.793727][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 781.805701][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 785.131186][ T56] block nbd0: Possible stuck request ffff8880252c0000: control (read@0,1024B). Runtime 660 seconds [ 786.725812][ C0] net_ratelimit: 18129 callbacks suppressed [ 786.725831][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 786.726806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.732224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 786.744230][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.756102][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.768614][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.780121][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.792126][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 786.803917][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 786.816315][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.735718][ C1] net_ratelimit: 18366 callbacks suppressed [ 791.735737][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.735768][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 791.744443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.754261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 791.766105][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.778103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 791.790527][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.802044][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 791.814167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 791.826068][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.745687][ C0] net_ratelimit: 18947 callbacks suppressed [ 796.745707][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 796.745720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.746085][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.752254][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.766078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.776229][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.788239][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.800136][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 796.812720][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 796.824119][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 801.756575][ C0] net_ratelimit: 19225 callbacks suppressed [ 801.756594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 801.757029][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.762971][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 801.774957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.786929][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 801.799327][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.810941][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 801.823389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 801.835542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 801.847445][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 805.055515][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 805.062498][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P26817/1:b..l [ 805.071055][ C0] rcu: (detected by 0, t=10503 jiffies, g=114869, q=1909 ncpus=2) [ 805.078968][ C0] task:syz.2.5414 state:R running task stack:24416 pid:26817 tgid:26816 ppid:5833 task_flags:0x400140 flags:0x00080003 [ 805.093772][ C0] Call Trace: [ 805.097068][ C0] [ 805.100011][ C0] __schedule+0x14bc/0x5000 [ 805.104550][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 805.109498][ C0] ? __pfx___schedule+0x10/0x10 [ 805.114371][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 805.119323][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 805.124625][ C0] preempt_schedule_irq+0xb5/0x150 [ 805.129762][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 805.135511][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 805.141332][ C0] irqentry_exit+0x5d8/0x660 [ 805.145929][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.151912][ C0] RIP: 0010:unwind_next_frame+0x117c/0x2390 [ 805.157817][ C0] Code: 0f b6 04 2f 84 c0 0f 85 f9 0f 00 00 c6 03 00 4c 8b 64 24 10 4c 8b 7c 24 28 48 8b 44 24 40 0f b6 04 28 84 c0 0f 85 8a 0d 00 00 <41> 0f b6 04 2f 84 c0 0f 85 a1 0d 00 00 0f b7 32 c1 ee 04 83 e6 0f [ 805.177433][ C0] RSP: 0018:ffffc90003bd6fb8 EFLAGS: 00000246 [ 805.183517][ C0] RAX: 0000000000000000 RBX: ffffc90003bd70c0 RCX: 0000000000000000 [ 805.191495][ C0] RDX: ffffffff901f295a RSI: 0000000000000000 RDI: ffffc90003bd70e8 [ 805.199568][ C0] RBP: dffffc0000000000 R08: ffffc90003bd70e7 R09: 0000000000000000 [ 805.207628][ C0] R10: ffffc90003bd70d8 R11: fffff5200077ae1d R12: ffffc90003bd7400 [ 805.215608][ C0] R13: ffffc90003bd70d8 R14: ffffc90003bd7088 R15: 1ffffffff203e52b [ 805.223599][ C0] ? unwind_next_frame+0xc98/0x2390 [ 805.228809][ C0] ? unwind_next_frame+0xa5/0x2390 [ 805.233932][ C0] ? post_alloc_hook+0x234/0x290 [ 805.238886][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 805.245042][ C0] arch_stack_walk+0x11c/0x150 [ 805.249813][ C0] ? get_page_from_freelist+0x2365/0x2440 [ 805.255551][ C0] stack_trace_save+0x9c/0xe0 [ 805.260240][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 805.265624][ C0] save_stack+0xf5/0x1f0 [ 805.269874][ C0] ? __pfx_save_stack+0x10/0x10 [ 805.274731][ C0] ? post_alloc_hook+0x234/0x290 [ 805.279686][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 805.285933][ C0] __set_page_owner+0x8d/0x4c0 [ 805.290718][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 805.296109][ C0] post_alloc_hook+0x234/0x290 [ 805.300890][ C0] get_page_from_freelist+0x2365/0x2440 [ 805.306441][ C0] ? __lock_acquire+0x6b6/0x2cf0 [ 805.311427][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 805.317334][ C0] ? prepare_alloc_pages+0x213/0x610 [ 805.322632][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 805.328448][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 805.334791][ C0] ? __apply_to_page_range+0x124b/0x13d0 [ 805.340454][ C0] alloc_pages_bulk_noprof+0x560/0x710 [ 805.345941][ C0] ? __pfx___apply_to_page_range+0x10/0x10 [ 805.351780][ C0] kasan_populate_vmalloc+0xd1/0x270 [ 805.357097][ C0] alloc_vmap_area+0xd4e/0x1470 [ 805.361982][ C0] ? __pfx_alloc_vmap_area+0x10/0x10 [ 805.367290][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 805.372086][ C0] ? bpf_map_area_alloc+0x64/0x180 [ 805.377202][ C0] ? __get_vm_area_node+0x13f/0x300 [ 805.382412][ C0] ? __sys_bpf+0x5f0/0x860 [ 805.386843][ C0] ? __x64_sys_bpf+0x7c/0x90 [ 805.391438][ C0] ? sock_map_alloc+0x1af/0x2d0 [ 805.396290][ C0] __get_vm_area_node+0x1f8/0x300 [ 805.401338][ C0] __vmalloc_node_range_noprof+0x30c/0x12d0 [ 805.407250][ C0] ? sock_map_alloc+0x1af/0x2d0 [ 805.412128][ C0] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 805.418464][ C0] ? rcu_is_watching+0x15/0xb0 [ 805.423241][ C0] ? trace_kmalloc+0x1f/0xb0 [ 805.427837][ C0] ? __kmalloc_node_noprof+0x590/0x810 [ 805.433348][ C0] ? bpf_map_area_alloc+0x64/0x180 [ 805.438485][ C0] bpf_map_area_alloc+0x12d/0x180 [ 805.443531][ C0] ? sock_map_alloc+0x1af/0x2d0 [ 805.448394][ C0] sock_map_alloc+0x1af/0x2d0 [ 805.453086][ C0] map_create+0xafd/0x16a0 [ 805.457503][ C0] ? security_bpf+0x7e/0x300 [ 805.462107][ C0] __sys_bpf+0x5f0/0x860 [ 805.466365][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 805.471132][ C0] ? count_memcg_event_mm+0x21/0x260 [ 805.476436][ C0] ? exc_page_fault+0x82/0x100 [ 805.481224][ C0] __x64_sys_bpf+0x7c/0x90 [ 805.485651][ C0] do_syscall_64+0xfa/0xf80 [ 805.490182][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.496353][ C0] ? clear_bhb_loop+0x60/0xb0 [ 805.501046][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 805.506966][ C0] RIP: 0033:0x7f530558f749 [ 805.511432][ C0] RSP: 002b:00007f53037f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 805.519844][ C0] RAX: ffffffffffffffda RBX: 00007f53057e5fa0 RCX: 00007f530558f749 [ 805.527831][ C0] RDX: 0000000000000048 RSI: 0000200000000200 RDI: 0000000000000000 [ 805.535816][ C0] RBP: 00007f5305613f91 R08: 0000000000000000 R09: 0000000000000000 [ 805.543979][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 805.551962][ C0] R13: 00007f53057e6038 R14: 00007f53057e5fa0 R15: 00007ffeb8d86448 [ 805.559960][ C0] [ 805.562991][ C0] rcu: rcu_preempt kthread starved for 496 jiffies! g114869 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 805.574198][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 805.584169][ C0] rcu: RCU grace-period kthread stack dump: [ 805.590075][ C0] task:rcu_preempt state:R running task stack:25816 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 805.603561][ C0] Call Trace: [ 805.606847][ C0] [ 805.609796][ C0] __schedule+0x14bc/0x5000 [ 805.614320][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 805.619534][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 805.625439][ C0] ? __pfx___schedule+0x10/0x10 [ 805.630325][ C0] ? schedule+0x91/0x360 [ 805.634575][ C0] schedule+0x165/0x360 [ 805.638742][ C0] schedule_timeout+0x12b/0x270 [ 805.643620][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 805.649000][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 805.654897][ C0] ? __pfx_process_timeout+0x10/0x10 [ 805.660230][ C0] ? prepare_to_swait_event+0x341/0x380 [ 805.665895][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 805.670768][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 805.675967][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 805.682126][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 805.687509][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 805.692731][ C0] ? finish_swait+0xcd/0x1f0 [ 805.697333][ C0] rcu_gp_kthread+0x99/0x390 [ 805.701941][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 805.707152][ C0] ? __kthread_parkme+0x7b/0x200 [ 805.712111][ C0] ? __kthread_parkme+0x1a1/0x200 [ 805.717150][ C0] kthread+0x711/0x8a0 [ 805.721245][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 805.726466][ C0] ? __pfx_kthread+0x10/0x10 [ 805.731071][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.736378][ C0] ? lockdep_hardirqs_on+0x98/0x140 [ 805.741593][ C0] ? __pfx_kthread+0x10/0x10 [ 805.746196][ C0] ret_from_fork+0x599/0xb30 [ 805.750809][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 805.755949][ C0] ? __switch_to_asm+0x39/0x70 [ 805.760724][ C0] ? __switch_to_asm+0x33/0x70 [ 805.765504][ C0] ? __pfx_kthread+0x10/0x10 [ 805.770110][ C0] ret_from_fork_asm+0x1a/0x30 [ 805.774921][ C0] [ 805.777944][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 805.784285][ C0] Sending NMI from CPU 0 to CPUs 1: [ 805.789503][ C1] NMI backtrace for cpu 1 [ 805.789522][ C1] CPU: 1 UID: 0 PID: 8922 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 805.789542][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 805.789555][ C1] Workqueue: events_unbound toggle_allocation_gate [ 805.789583][ C1] RIP: 0010:check_preemption_disabled+0x40/0x120 [ 805.789610][ C1] Code: 08 65 8b 05 26 92 2d 07 65 8b 0d 1b 92 2d 07 f7 c1 ff ff ff 7f 74 23 65 48 8b 0d fb 91 2d 07 48 3b 4c 24 08 0f 85 cc 00 00 00 <48> 83 c4 10 5b 41 5e 41 5f 5d c3 cc cc cc cc cc 48 c7 04 24 00 00 [ 805.789626][ C1] RSP: 0018:ffffc90000a07f20 EFLAGS: 00000046 [ 805.789639][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 855279f89508b800 [ 805.789658][ C1] RDX: 000000008eba6367 RSI: ffffffff8d952009 RDI: ffffffff8bbfc660 [ 805.789670][ C1] RBP: ffffffff8173ef25 R08: ffffffff8173ef25 R09: ffffffff8df41cc0 [ 805.789683][ C1] R10: ffffc90000a08118 R11: ffffffff81ad4ad0 R12: 0000000000000002 [ 805.789695][ C1] R13: ffffffff8df41cc0 R14: 0000000000000000 R15: 0000000000000246 [ 805.789707][ C1] FS: 0000000000000000(0000) GS:ffff8881261b1000(0000) knlGS:0000000000000000 [ 805.789721][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 805.789733][ C1] CR2: 00007f41807156e8 CR3: 000000000dd3a000 CR4: 00000000003526f0 [ 805.789748][ C1] Call Trace: [ 805.789754][ C1] [ 805.789761][ C1] ? unwind_next_frame+0xa5/0x2390 [ 805.789782][ C1] ? unwind_next_frame+0xa5/0x2390 [ 805.789798][ C1] lock_acquire+0x127/0x340 [ 805.789817][ C1] ? unwind_next_frame+0xa5/0x2390 [ 805.789833][ C1] ? process_scheduled_works+0xad1/0x1770 [ 805.789857][ C1] ? unwind_next_frame+0xa5/0x2390 [ 805.789874][ C1] unwind_next_frame+0xc2/0x2390 [ 805.789890][ C1] ? unwind_next_frame+0xa5/0x2390 [ 805.789908][ C1] ? unwind_next_frame+0xa5/0x2390 [ 805.789925][ C1] ? toggle_allocation_gate+0xad/0x240 [ 805.789948][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 805.789971][ C1] arch_stack_walk+0x11c/0x150 [ 805.789990][ C1] ? process_scheduled_works+0xad1/0x1770 [ 805.790015][ C1] stack_trace_save+0x9c/0xe0 [ 805.790036][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 805.790058][ C1] ? __find_rr_leaf+0x54a/0x6d0 [ 805.790079][ C1] kasan_save_track+0x3e/0x80 [ 805.790098][ C1] ? kasan_save_track+0x3e/0x80 [ 805.790116][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 805.790135][ C1] ? kmem_cache_alloc_noprof+0x367/0x6f0 [ 805.790153][ C1] ? skb_ext_add+0x148/0x8f0 [ 805.790174][ C1] ? br_nf_pre_routing_ipv6+0x132/0x6b0 [ 805.790190][ C1] ? br_handle_frame+0x96e/0x14f0 [ 805.790213][ C1] ? __netif_receive_skb_core+0x95f/0x2f90 [ 805.790232][ C1] ? __netif_receive_skb+0x72/0x380 [ 805.790251][ C1] ? process_backlog+0x622/0x1500 [ 805.790271][ C1] ? __napi_poll+0xae/0x320 [ 805.790288][ C1] ? net_rx_action+0x672/0xe50 [ 805.790308][ C1] ? handle_softirqs+0x27d/0x850 [ 805.790323][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 805.790337][ C1] ? irq_exit_rcu+0x9/0x30 [ 805.790350][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 805.790369][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.790386][ C1] ? smp_call_function_many_cond+0xccf/0x12b0 [ 805.790408][ C1] ? on_each_cpu_cond_mask+0x3f/0x80 [ 805.790427][ C1] ? smp_text_poke_batch_finish+0x5f9/0x1130 [ 805.790446][ C1] ? arch_jump_label_transform_apply+0x1c/0x30 [ 805.790468][ C1] ? static_key_enable_cpuslocked+0x128/0x240 [ 805.790486][ C1] ? static_key_enable+0x1a/0x20 [ 805.790503][ C1] ? toggle_allocation_gate+0xad/0x240 [ 805.790523][ C1] ? process_scheduled_works+0xad1/0x1770 [ 805.790559][ C1] ? kmem_cache_alloc_noprof+0x5b6/0x6f0 [ 805.790578][ C1] __kasan_slab_alloc+0x6c/0x80 [ 805.790599][ C1] kmem_cache_alloc_noprof+0x367/0x6f0 [ 805.790616][ C1] ? __asan_memset+0x22/0x50 [ 805.790634][ C1] ? skb_ext_add+0x148/0x8f0 [ 805.790659][ C1] ? br_validate_ipv6+0x461/0x730 [ 805.790676][ C1] skb_ext_add+0x148/0x8f0 [ 805.790702][ C1] br_nf_pre_routing_ipv6+0x132/0x6b0 [ 805.790719][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 805.790737][ C1] ? br_nf_pre_routing+0x720/0x1470 [ 805.790762][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 805.790785][ C1] br_handle_frame+0x96e/0x14f0 [ 805.790811][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 805.790832][ C1] ? rcu_lockdep_current_cpu_online+0x37/0x120 [ 805.790856][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 805.790877][ C1] ? __pfx_rcu_read_lock_bh_held+0x10/0x10 [ 805.790901][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 805.790923][ C1] __netif_receive_skb_core+0x95f/0x2f90 [ 805.790943][ C1] ? ip6_mc_input+0x8de/0xb70 [ 805.790963][ C1] ? ip6_mc_input+0x8de/0xb70 [ 805.790984][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 805.791006][ C1] ? NF_HOOK+0x30c/0x3a0 [ 805.791021][ C1] ? skb_orphan+0xaf/0xd0 [ 805.791048][ C1] ? process_backlog+0x2d9/0x1500 [ 805.791069][ C1] ? process_backlog+0x2d9/0x1500 [ 805.791092][ C1] __netif_receive_skb+0x72/0x380 [ 805.791112][ C1] ? process_backlog+0x2d9/0x1500 [ 805.791134][ C1] process_backlog+0x622/0x1500 [ 805.791154][ C1] ? rcu_is_watching+0x15/0xb0 [ 805.791178][ C1] ? __pfx_process_backlog+0x10/0x10 [ 805.791197][ C1] ? do_raw_spin_lock+0x121/0x290 [ 805.791219][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 805.791241][ C1] __napi_poll+0xae/0x320 [ 805.791259][ C1] ? skb_defer_free_flush+0x229/0x250 [ 805.791280][ C1] net_rx_action+0x672/0xe50 [ 805.791307][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 805.791343][ C1] handle_softirqs+0x27d/0x850 [ 805.791359][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 805.791376][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 805.791393][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 805.791415][ C1] __irq_exit_rcu+0xca/0x1f0 [ 805.791431][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 805.791450][ C1] irq_exit_rcu+0x9/0x30 [ 805.791463][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 805.791482][ C1] [ 805.791488][ C1] [ 805.791495][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 805.791512][ C1] RIP: 0010:smp_call_function_many_cond+0xccf/0x12b0 [ 805.791534][ C1] Code: 45 8b 2c 24 44 89 ee 83 e6 01 31 ff e8 4a 94 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 f5 8f 0b 00 eb 38 f3 90 <42> 0f b6 04 2b 84 c0 75 11 41 f7 04 24 01 00 00 00 74 1e e8 d9 8f [ 805.791548][ C1] RSP: 0018:ffffc9000bdf7620 EFLAGS: 00000293 [ 805.791562][ C1] RAX: ffffffff81b5ba87 RBX: 1ffff11017108545 RCX: ffff888027348000 [ 805.791574][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 805.791584][ C1] RBP: ffffc9000bdf77a0 R08: ffffffff8f805a77 R09: 1ffffffff1f00b4e [ 805.791597][ C1] R10: dffffc0000000000 R11: fffffbfff1f00b4f R12: ffff8880b8842a28 [ 805.791610][ C1] R13: dffffc0000000000 R14: ffff8880b893b9c0 R15: 0000000000000000 [ 805.791625][ C1] ? smp_call_function_many_cond+0xce7/0x12b0 [ 805.791657][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 805.791679][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 805.791701][ C1] ? kmem_cache_alloc_bulk_noprof+0x8d/0x710 [ 805.791722][ C1] ? __pfx___text_poke+0x10/0x10 [ 805.791739][ C1] ? rcu_is_watching+0x15/0xb0 [ 805.791756][ C1] ? trace_contention_end+0x39/0x100 [ 805.791778][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 805.791795][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 805.791817][ C1] smp_text_poke_batch_finish+0x5f9/0x1130 [ 805.791837][ C1] ? arch_jump_label_transform_apply+0x17/0x30 [ 805.791860][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 805.791881][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 805.791902][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 805.791928][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 805.791949][ C1] static_key_enable_cpuslocked+0x128/0x240 [ 805.791969][ C1] static_key_enable+0x1a/0x20 [ 805.791986][ C1] toggle_allocation_gate+0xad/0x240 [ 805.792007][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 805.792029][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 805.792056][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 805.792079][ C1] ? process_scheduled_works+0x9ef/0x1770 [ 805.792103][ C1] process_scheduled_works+0xad1/0x1770 [ 805.792138][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 805.792174][ C1] worker_thread+0x8a0/0xda0 [ 805.792201][ C1] kthread+0x711/0x8a0 [ 805.792220][ C1] ? __pfx_worker_thread+0x10/0x10 [ 805.792236][ C1] ? __pfx_kthread+0x10/0x10 [ 805.792255][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 805.792273][ C1] ? lockdep_hardirqs_on+0x98/0x140 [ 805.792292][ C1] ? __pfx_kthread+0x10/0x10 [ 805.792311][ C1] ret_from_fork+0x599/0xb30 [ 805.792335][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 805.792361][ C1] ? __switch_to_asm+0x39/0x70 [ 805.792380][ C1] ? __switch_to_asm+0x33/0x70 [ 805.792398][ C1] ? __pfx_kthread+0x10/0x10 [ 805.792416][ C1] ret_from_fork_asm+0x1a/0x30 [ 805.792442][ C1] [ 806.765541][ C0] net_ratelimit: 14438 callbacks suppressed [ 806.765562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 806.765912][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.771892][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 806.784182][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.796097][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 806.808489][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.820128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 806.832208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 806.844079][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 806.856182][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.775522][ C1] net_ratelimit: 18587 callbacks suppressed [ 811.775542][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.775564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.781804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.793895][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.805864][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.817709][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 811.830264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.841644][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0) [ 811.853717][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 811.865578][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:86:48:d6:63:b7:88, vlan:0)