last executing test programs: 1.56782047s ago: executing program 1 (id=342): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x18, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0, 0x0, 0x9}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 1.479254813s ago: executing program 2 (id=344): bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x2, 0x0, 0x0, 0x0, 0xd5e93709d453f02a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28) 1.327947263s ago: executing program 3 (id=347): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000340)={0xa, 0x0, 0x2, @loopback, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@private2={0xfc, 0x2, '\x00', 0x1}}}}], 0x28}}], 0x1, 0x40000000) 1.192169461s ago: executing program 2 (id=349): r0 = socket$nl_rdma(0x10, 0x3, 0x14) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x2, 0x0) splice(r1, 0x0, 0xffffffffffffffff, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x400a4}, 0x0) 1.096414338s ago: executing program 3 (id=350): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}}, @NFT_MSG_NEWSETELEM={0x20, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x70}}, 0x0) 1.039044623s ago: executing program 0 (id=351): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000020000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 973.119105ms ago: executing program 3 (id=352): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet(0x2, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)={0x34, r2, 0x1, 0xffffffff, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x703d33dc4b18a98e}, 0x4040814) 928.274858ms ago: executing program 4 (id=353): syz_emit_ethernet(0x46, &(0x7f0000000200)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @local}, "00186371ae9b1c03"}}}}}, 0x0) 925.059198ms ago: executing program 2 (id=354): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000040000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe50a10a000600014002020c600e41b0000900ac000a0501000000160012000a00ff120048035c3b61c1d67f6f94007134cf6efb8007a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001008af26c8b7b55f4d2a6823a45", 0xd8}], 0x1}, 0x894) 861.49223ms ago: executing program 1 (id=355): syz_emit_ethernet(0x2a, &(0x7f0000000a40)={@local, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8}}}}}, 0x0) 772.414286ms ago: executing program 0 (id=356): r0 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000340)={0xa, 0x0, 0x2, @loopback, 0x9}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000580)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x744}}], 0x18}}], 0x1, 0x40000000) 772.066259ms ago: executing program 4 (id=357): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002300000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000530427"], 0x14}, 0x1, 0x0, 0x0, 0x24000841}, 0x4008840) 771.850374ms ago: executing program 3 (id=358): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010080000000fedbdf250f0000000c00078008000200070000001c000380080001000900000008000300ff0f000008000300080000002c000780080002008a060000080001006cfb20"], 0x68}, 0x1, 0x0, 0x0, 0x2805}, 0x0) 727.835887ms ago: executing program 1 (id=359): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x10}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 662.898667ms ago: executing program 2 (id=360): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x2, 0xb, 0x5, 0x2, 0x2, 0x0, 0x70bd2a, 0x25dfdbfe}, 0x10}}, 0x8000) 599.556748ms ago: executing program 0 (id=361): sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000980)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="00042bbd7000ffdbdf250300000048000180080006000600000014000400ff01000000000000000000000000000108000700", @ANYRES32, @ANYBLOB='\b\x00\a', @ANYRES32, @ANYBLOB="0500020009000000060005004e2300e4000800060002"], 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 599.093249ms ago: executing program 4 (id=362): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001800dd8d0000000000000000020000000000000600000000060015000100000018001680140001"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 598.785159ms ago: executing program 3 (id=363): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 529.785979ms ago: executing program 1 (id=364): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x2, 0x0) splice(r1, 0x0, r0, 0x0, 0x114, 0xe) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="00010000031401"], 0x100}, 0x1, 0x0, 0x0, 0x400a4}, 0x0) 480.31252ms ago: executing program 2 (id=365): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500001000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1, 0x0, 0x100000001}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x2, 0x0, 0x4, 0x900}}) 424.485397ms ago: executing program 0 (id=366): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000500000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x18) r2 = socket(0x840000000002, 0x3, 0xff) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='gre0\x00', 0x10) sendmmsg$inet(r2, &(0x7f0000003a40)=[{{&(0x7f0000000440)={0x2, 0x1, @remote}, 0x10, &(0x7f0000001980)=[{&(0x7f0000000540)="a9050000000074000000000035528c2771cc874d997efa5ff0850d2cf1bde5c064c60000", 0x24}], 0x1}}], 0x1, 0x840) 424.065003ms ago: executing program 4 (id=367): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000100095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3}, 0x3}, 0x1c) 365.776769ms ago: executing program 1 (id=368): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x0, 0x2, 0x9, 0x9}}}}]}, 0x48}}, 0x44080) sendmsg$nl_route_sched(r1, 0x0, 0x4000) sendmmsg$inet(r0, &(0x7f0000006300)=[{{&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @loopback, @multicast1}}}], 0x20}}], 0x1, 0x0) 216.282372ms ago: executing program 1 (id=369): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb8af, @void, @value}, 0xa5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000600)='kfree\x00', r3}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 148.389599ms ago: executing program 2 (id=370): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1, 0x0, 0x2}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000000c0)=@ethtool_gfeatures={0x33}}) 148.030971ms ago: executing program 0 (id=371): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x80}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) 147.609555ms ago: executing program 3 (id=372): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000740), 0x1, r0}, 0x38) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='kfree\x00', r1, 0x0, 0x2}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) 147.397268ms ago: executing program 4 (id=373): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000500000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x6}, {}, {0x0, 0x0, 0xfe}, {0xf792}, {0x3}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) 600.127µs ago: executing program 0 (id=374): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x7, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x588, 0x0, 0x418, 0x418, 0x0, 0x118, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@private2, @private2, [0xff000000, 0x0, 0xffffff00, 0xffffffff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_hsr\x00', 'ipvlan1\x00', {}, {0xff}, 0x63, 0xf9, 0x1, 0x4}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @remote}, @ipv6=@mcast2, 0x1, 0x1a, 0xff}}}, {{@ipv6={@remote, @private0, [0x0, 0xffffff00, 0xffffff00, 0xff000000], [0xff000000, 0xffffffff, 0xffffff00], 'veth1_to_batadv\x00', 'ipvlan0\x00', {}, {}, 0x88, 0x9}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@remote, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0xff, 0x0, 0xff000000], [0xff000000, 0x0, 0x0, 0xff], 'ip6erspan0\x00', 'veth1_vlan\x00', {0xff}, {0xff}, 0x87, 0x3, 0x5, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@rand_addr=0x64010101, 0x24, 0x2f, 0x6}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv6=@remote, 0x32, 0x1d, 0x8}}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [0xffffff00, 0xffffffff, 0xff], [0xff000000, 0xffffff00, 0xffffff00], 'wlan1\x00', 'veth1_to_batadv\x00', {0xff}, {}, 0x2b, 0x80, 0x6, 0x40}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7fff, 0xac, 0x7, 0x1, 0x0, "19d25cd206333f4d699dba98ab1354b509a278b9ffa467d2bf9404628fa167ab3335dd225366042c9057bc137f4edbce3f5b911441992c07eaced70d4a79b60e"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) 0s ago: executing program 4 (id=375): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x2000) sendmsg$inet(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000040)="9e91", 0x2}], 0x1}, 0xc001) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.125' (ED25519) to the list of known hosts. [ 83.868118][ T5816] cgroup: Unknown subsys name 'net' [ 84.002169][ T5816] cgroup: Unknown subsys name 'cpuset' [ 84.011564][ T5816] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.700980][ T5816] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.007835][ T5829] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.017889][ T5829] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.047475][ T5829] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.057915][ T5829] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.077231][ T5829] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.181132][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.204983][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.213318][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.225078][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.233470][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.241399][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.249240][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.257536][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.314207][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 90.323349][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 90.331842][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 90.341614][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.342573][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.358008][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.361131][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.405552][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.422347][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.446155][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.454876][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.463425][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.645790][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 90.926115][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.933958][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.942589][ T5826] bridge_slave_0: entered allmulticast mode [ 90.950223][ T5826] bridge_slave_0: entered promiscuous mode [ 91.014863][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.022674][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.030254][ T5826] bridge_slave_1: entered allmulticast mode [ 91.038659][ T5826] bridge_slave_1: entered promiscuous mode [ 91.139661][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.183594][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.299386][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 91.314698][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 91.345764][ T5826] team0: Port device team_slave_0 added [ 91.388016][ T5826] team0: Port device team_slave_1 added [ 91.421531][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 91.524055][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.531689][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.558932][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.637851][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.644848][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.671389][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.682705][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 91.754045][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.761527][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.769480][ T5831] bridge_slave_0: entered allmulticast mode [ 91.778422][ T5831] bridge_slave_0: entered promiscuous mode [ 91.833565][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.841088][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.848915][ T5831] bridge_slave_1: entered allmulticast mode [ 91.856386][ T5831] bridge_slave_1: entered promiscuous mode [ 91.958228][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.965566][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.973169][ T5832] bridge_slave_0: entered allmulticast mode [ 91.981247][ T5832] bridge_slave_0: entered promiscuous mode [ 92.002028][ T5826] hsr_slave_0: entered promiscuous mode [ 92.009174][ T5826] hsr_slave_1: entered promiscuous mode [ 92.016102][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.028120][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.028660][ T919] cfg80211: failed to load regulatory.db [ 92.035426][ T5838] bridge_slave_0: entered allmulticast mode [ 92.052249][ T5838] bridge_slave_0: entered promiscuous mode [ 92.062426][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.076401][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.100358][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.108147][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.115472][ T5832] bridge_slave_1: entered allmulticast mode [ 92.123110][ T5832] bridge_slave_1: entered promiscuous mode [ 92.152482][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.159942][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.167527][ T5838] bridge_slave_1: entered allmulticast mode [ 92.175609][ T5838] bridge_slave_1: entered promiscuous mode [ 92.188412][ T5836] Bluetooth: hci0: command tx timeout [ 92.206151][ T5831] team0: Port device team_slave_0 added [ 92.276373][ T5831] team0: Port device team_slave_1 added [ 92.299993][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.324441][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.332552][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.340295][ T5844] bridge_slave_0: entered allmulticast mode [ 92.349675][ T5844] bridge_slave_0: entered promiscuous mode [ 92.360305][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.375147][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.416715][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.426281][ T5836] Bluetooth: hci2: command tx timeout [ 92.426305][ T5842] Bluetooth: hci1: command tx timeout [ 92.426658][ T5829] Bluetooth: hci3: command tx timeout [ 92.460292][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.467649][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.475450][ T5844] bridge_slave_1: entered allmulticast mode [ 92.483425][ T5844] bridge_slave_1: entered promiscuous mode [ 92.497373][ T5829] Bluetooth: hci4: command tx timeout [ 92.535959][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.543039][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.569374][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.583456][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.590670][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.616691][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.673060][ T5838] team0: Port device team_slave_0 added [ 92.692037][ T5832] team0: Port device team_slave_0 added [ 92.718151][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.729767][ T5838] team0: Port device team_slave_1 added [ 92.753153][ T5832] team0: Port device team_slave_1 added [ 92.768455][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.860946][ T5831] hsr_slave_0: entered promiscuous mode [ 92.868965][ T5831] hsr_slave_1: entered promiscuous mode [ 92.875304][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.883866][ T5831] Cannot create hsr debugfs directory [ 92.909697][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.917149][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.943206][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.974320][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.981683][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.008320][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.021509][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.029004][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.056471][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.077158][ T5844] team0: Port device team_slave_0 added [ 93.084689][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.091892][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.118189][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.170018][ T5844] team0: Port device team_slave_1 added [ 93.269937][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.277065][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.303685][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.318732][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.325804][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.352385][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.460875][ T5832] hsr_slave_0: entered promiscuous mode [ 93.468253][ T5832] hsr_slave_1: entered promiscuous mode [ 93.474494][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.482279][ T5832] Cannot create hsr debugfs directory [ 93.508936][ T5838] hsr_slave_0: entered promiscuous mode [ 93.515831][ T5838] hsr_slave_1: entered promiscuous mode [ 93.522613][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.530480][ T5838] Cannot create hsr debugfs directory [ 93.612524][ T5844] hsr_slave_0: entered promiscuous mode [ 93.620453][ T5844] hsr_slave_1: entered promiscuous mode [ 93.626822][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.635115][ T5844] Cannot create hsr debugfs directory [ 93.898775][ T5826] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.953326][ T5826] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.966338][ T5826] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 94.014775][ T5826] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 94.201401][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.211878][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.231558][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.257049][ T5829] Bluetooth: hci0: command tx timeout [ 94.262931][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.316813][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.340733][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.351509][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.364882][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.481414][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 94.493884][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 94.501585][ T5829] Bluetooth: hci3: command tx timeout [ 94.501789][ T5836] Bluetooth: hci1: command tx timeout [ 94.508054][ T5829] Bluetooth: hci2: command tx timeout [ 94.531253][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 94.577806][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.584778][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 94.587241][ T5829] Bluetooth: hci4: command tx timeout [ 94.649121][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.709965][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.717309][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.752449][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 94.764974][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 94.794732][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 94.812272][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.819475][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.845425][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 94.904006][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.965651][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.976558][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.034769][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.041944][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.079148][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.086404][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.116497][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.171530][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.178852][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.254533][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.269304][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.276539][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.381369][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.478910][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.490634][ T971] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.498350][ T971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.538180][ T971] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.545420][ T971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.630806][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.734358][ T5826] veth0_vlan: entered promiscuous mode [ 95.752687][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.798374][ T5826] veth1_vlan: entered promiscuous mode [ 95.810954][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.818266][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.842519][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.863076][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.870324][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.016371][ T5832] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.066667][ T5831] veth0_vlan: entered promiscuous mode [ 96.124288][ T5826] veth0_macvtap: entered promiscuous mode [ 96.172651][ T5826] veth1_macvtap: entered promiscuous mode [ 96.203793][ T5831] veth1_vlan: entered promiscuous mode [ 96.244207][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.263636][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.311624][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.341438][ T5829] Bluetooth: hci0: command tx timeout [ 96.355510][ T5826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.369415][ T5826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.382343][ T5826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.391926][ T5826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.445757][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.466898][ T5831] veth0_macvtap: entered promiscuous mode [ 96.542435][ T5831] veth1_macvtap: entered promiscuous mode [ 96.579564][ T5829] Bluetooth: hci2: command tx timeout [ 96.581962][ T5842] Bluetooth: hci1: command tx timeout [ 96.585018][ T5829] Bluetooth: hci3: command tx timeout [ 96.607836][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.659558][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.668291][ T5829] Bluetooth: hci4: command tx timeout [ 96.679389][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.720684][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.729865][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.740447][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.749429][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.786175][ T5844] veth0_vlan: entered promiscuous mode [ 96.799837][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.814737][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.885856][ T5844] veth1_vlan: entered promiscuous mode [ 96.943147][ T5832] veth0_vlan: entered promiscuous mode [ 97.028838][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.036728][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.052417][ T5844] veth0_macvtap: entered promiscuous mode [ 97.083399][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.101686][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.114243][ T5832] veth1_vlan: entered promiscuous mode [ 97.162901][ T5838] veth0_vlan: entered promiscuous mode [ 97.172493][ T5844] veth1_macvtap: entered promiscuous mode [ 97.188985][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 97.250942][ T5838] veth1_vlan: entered promiscuous mode [ 97.270136][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.275779][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.301390][ T5832] veth0_macvtap: entered promiscuous mode [ 97.309159][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.314655][ T5832] veth1_macvtap: entered promiscuous mode [ 97.351529][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.390546][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.424793][ T5844] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.436165][ T5844] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.448567][ T5844] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.458860][ T5844] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.492798][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.553632][ T5838] veth0_macvtap: entered promiscuous mode [ 97.572811][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.589239][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.598560][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.607737][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.669462][ T5838] veth1_macvtap: entered promiscuous mode [ 97.792591][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.869482][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7'. [ 97.879154][ T5922] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8'. [ 97.889653][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.895676][ T5920] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7'. [ 97.925074][ T1162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.936150][ T5838] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.949758][ T1162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.977140][ T5838] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.985923][ T5838] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.035825][ T5838] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.109556][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.123507][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.193565][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.205080][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.239538][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.248209][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.421654][ T5829] Bluetooth: hci0: command tx timeout [ 98.468432][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.531368][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.645892][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.658308][ T5829] Bluetooth: hci3: command tx timeout [ 98.667628][ T5829] Bluetooth: hci1: command tx timeout [ 98.673111][ T5836] Bluetooth: hci2: command tx timeout [ 98.678061][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.737839][ T5829] Bluetooth: hci4: command tx timeout [ 99.091400][ T30] audit: type=1107 audit(1748602351.287:2): pid=5936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 99.657947][ T5949] netlink: 16 bytes leftover after parsing attributes in process `syz.2.18'. [ 101.303556][ T5991] smc: net device bond0 applied user defined pnetid SYZ2 [ 101.321121][ T5991] smc: net device bond0 erased user defined pnetid SYZ2 [ 101.738882][ T6002] syz_tun: entered allmulticast mode [ 101.786645][ T6001] syz_tun: left allmulticast mode [ 102.132143][ T6019] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.147231][ T6016] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 103.586815][ T6083] netlink: 36 bytes leftover after parsing attributes in process `syz.2.58'. [ 103.609596][ T6083] netlink: 12 bytes leftover after parsing attributes in process `syz.2.58'. [ 103.986305][ T6094] syz_tun: entered allmulticast mode [ 104.041745][ T6094] netlink: 14 bytes leftover after parsing attributes in process `syz.4.61'. [ 104.118769][ T6094] syz_tun (unregistering): left allmulticast mode [ 104.199368][ T6101] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.64'. [ 104.545789][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.69'. [ 104.646680][ T6116] netlink: 'syz.3.71': attribute type 10 has an invalid length. [ 104.732917][ T6116] batman_adv: batadv0: Adding interface: team0 [ 104.778655][ T6119] netlink: 'syz.3.71': attribute type 10 has an invalid length. [ 104.786628][ T6119] netlink: 2 bytes leftover after parsing attributes in process `syz.3.71'. [ 104.841187][ T6116] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.888144][ T6124] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 104.915378][ T6116] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 104.980303][ T6119] team0: entered promiscuous mode [ 105.001898][ T6119] team_slave_0: entered promiscuous mode [ 105.028166][ T6119] team_slave_1: entered promiscuous mode [ 105.071073][ T6119] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.097676][ T6119] batman_adv: batadv0: Interface activated: team0 [ 105.111674][ T6131] IPv6: NLM_F_CREATE should be specified when creating new route [ 105.125340][ T6119] batman_adv: batadv0: Interface deactivated: team0 [ 105.155377][ T6119] batman_adv: batadv0: Removing interface: team0 [ 105.172052][ T6133] netlink: 16 bytes leftover after parsing attributes in process `syz.2.78'. [ 105.200194][ T6119] bridge0: port 3(team0) entered blocking state [ 105.237182][ T6119] bridge0: port 3(team0) entered disabled state [ 105.250698][ T6119] team0: entered allmulticast mode [ 105.255989][ T6119] team_slave_0: entered allmulticast mode [ 105.283800][ T6119] team_slave_1: entered allmulticast mode [ 105.326835][ T6119] bridge0: port 3(team0) entered blocking state [ 105.333477][ T6119] bridge0: port 3(team0) entered forwarding state [ 105.891650][ T6154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.88'. [ 106.050744][ T6159] netlink: 14 bytes leftover after parsing attributes in process `syz.3.89'. [ 106.466096][ T6159] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.512909][ T6159] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.528725][ T6172] netlink: 72 bytes leftover after parsing attributes in process `syz.2.97'. [ 106.593216][ T6159] bond0 (unregistering): Released all slaves [ 107.148910][ T6184] hsr_slave_0 (unregistering): left promiscuous mode [ 107.815437][ T6212] smc: net device bond0 applied user defined pnetid SYZ2 [ 108.081742][ T6218] tipc: Started in network mode [ 108.094315][ T6218] tipc: Node identity ac14140f, cluster identity 4711 [ 108.131657][ T6218] tipc: New replicast peer: 255.255.255.255 [ 108.156703][ T6218] tipc: Enabled bearer , priority 10 [ 108.663215][ T6242] __nla_validate_parse: 3 callbacks suppressed [ 108.663239][ T6242] netlink: 8 bytes leftover after parsing attributes in process `syz.3.130'. [ 108.692488][ T6242] openvswitch: netlink: Flow key attr not present in new flow. [ 108.872128][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz.3.135'. [ 109.142843][ T6259] batadv0: entered allmulticast mode [ 109.267935][ T5882] tipc: Node number set to 2886997007 [ 109.356741][ T6270] sch_tbf: burst 0 is lower than device veth0_vlan mtu (1514) ! [ 109.371035][ T6271] netlink: 80 bytes leftover after parsing attributes in process `syz.2.142'. [ 109.594378][ T6276] netlink: 20 bytes leftover after parsing attributes in process `syz.3.145'. [ 110.068117][ T6290] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 110.502039][ T30] audit: type=1107 audit(1748602362.707:3): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 110.729660][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.161'. [ 110.758414][ T6311] wg2: entered allmulticast mode [ 111.254141][ T6332] netlink: 'syz.0.171': attribute type 8 has an invalid length. [ 111.536169][ T6341] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.817481][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.0.182'. [ 112.039384][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 112.077173][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 112.131667][ T6362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.185'. [ 112.425141][ T6375] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 112.783208][ T6387] ksmbd: Unknown IPC event: 3, ignore. [ 113.614758][ T6420] xt_TPROXY: Can be used only with -p tcp or -p udp [ 114.076207][ T6435] __nla_validate_parse: 7 callbacks suppressed [ 114.076231][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.219'. [ 114.136116][ T6435] openvswitch: netlink: Flow key attr not present in new flow. [ 114.616869][ T6456] netlink: 8 bytes leftover after parsing attributes in process `syz.1.229'. [ 114.860973][ T6465] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 114.875569][ T6464] netlink: 48 bytes leftover after parsing attributes in process `syz.1.233'. [ 115.127296][ T6473] netlink: 240 bytes leftover after parsing attributes in process `syz.4.237'. [ 116.065120][ T6483] netlink: 24 bytes leftover after parsing attributes in process `syz.4.242'. [ 116.208965][ T6511] ip6tnl1: entered promiscuous mode [ 116.214554][ T6511] ip6tnl1: entered allmulticast mode [ 116.243708][ T6511] team0: Device ip6tnl1 is of different type [ 116.308728][ T6515] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.256'. [ 116.326804][ T6517] Zero length message leads to an empty skb [ 116.719253][ T6528] netlink: 8 bytes leftover after parsing attributes in process `syz.2.263'. [ 117.044249][ T6542] netlink: 224 bytes leftover after parsing attributes in process `syz.0.269'. [ 117.054718][ T6542] ksmbd: Unknown IPC event: 4, ignore. [ 118.791543][ T6586] veth1_macvtap: left promiscuous mode [ 118.797497][ T6586] macsec0: entered promiscuous mode [ 119.041152][ T6594] netlink: 8 bytes leftover after parsing attributes in process `syz.4.293'. [ 119.318249][ T6594] syz.4.293 (6594) used greatest stack depth: 15288 bytes left [ 119.685748][ T6606] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 119.693370][ T6606] IPv6: NLM_F_CREATE should be set when creating new route [ 119.706106][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 119.756157][ T6608] netlink: 28 bytes leftover after parsing attributes in process `syz.2.299'. [ 120.230902][ T6622] netlink: 92 bytes leftover after parsing attributes in process `syz.3.305'. [ 120.284827][ T6622] netem: unknown loss type 0 [ 120.318222][ T6622] netem: change failed [ 120.597609][ T6643] netlink: 104 bytes leftover after parsing attributes in process `syz.3.314'. [ 120.630102][ T6645] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 120.743683][ T6649] netlink: 216 bytes leftover after parsing attributes in process `syz.4.318'. [ 120.777766][ T6649] netlink: 24 bytes leftover after parsing attributes in process `syz.4.318'. [ 120.795942][ T6649] netlink: 16 bytes leftover after parsing attributes in process `syz.4.318'. [ 120.833558][ T6655] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 120.979603][ T6657] sch_tbf: burst 3298 is lower than device lo mtu (65550) ! [ 120.992429][ T6663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.325'. [ 121.204459][ T6670] xt_hashlimit: max too large, truncated to 1048576 [ 121.434252][ T6682] netlink: 240 bytes leftover after parsing attributes in process `syz.4.332'. [ 121.653961][ T6694] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 122.106159][ T6710] vxcan1: entered allmulticast mode [ 122.144600][ T6713] pim6reg: entered allmulticast mode [ 122.512438][ T6730] netlink: 'syz.2.354': attribute type 6 has an invalid length. [ 122.600334][ T30] audit: type=1107 audit(1748602374.807:4): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 123.253588][ C1] hrtimer: interrupt took 43576529 ns [ 230.666912][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 230.674246][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P6771/1:b..l [ 230.682546][ C0] rcu: (detected by 0, t=10502 jiffies, g=15169, q=1347 ncpus=2) [ 230.690420][ C0] task:syz.0.374 state:R running task stack:25320 pid:6771 tgid:6770 ppid:5844 task_flags:0x40054c flags:0x00004000 [ 230.704537][ C0] Call Trace: [ 230.707889][ C0] [ 230.710861][ C0] __schedule+0x16f5/0x4d00 [ 230.715413][ C0] ? free_pages_and_swap_cache+0x4be/0x520 [ 230.721255][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 230.727453][ C0] ? preempt_schedule_common+0x83/0xd0 [ 230.732947][ C0] ? __pfx___schedule+0x10/0x10 [ 230.737829][ C0] ? do_raw_spin_lock+0x121/0x290 [ 230.742887][ C0] ? preempt_schedule+0xae/0xc0 [ 230.747770][ C0] preempt_schedule_common+0x83/0xd0 [ 230.753085][ C0] preempt_schedule+0xae/0xc0 [ 230.757785][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 230.763191][ C0] preempt_schedule_thunk+0x16/0x30 [ 230.768428][ C0] _raw_spin_unlock+0x3f/0x50 [ 230.773130][ C0] unmap_page_range+0x38e8/0x4580 [ 230.778177][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 230.783452][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 230.788855][ C0] ? unmap_single_vma+0x1b2/0x2a0 [ 230.793912][ C0] unmap_vmas+0x25d/0x3c0 [ 230.798276][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 230.803190][ C0] exit_mmap+0x245/0xba0 [ 230.807473][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 230.812269][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 230.817970][ C0] ? __pfx_exit_aio+0x10/0x10 [ 230.822692][ C0] ? uprobe_clear_state+0x274/0x290 [ 230.827937][ C0] __mmput+0x118/0x420 [ 230.832082][ C0] exit_mm+0x1da/0x2c0 [ 230.836208][ C0] ? __pfx_exit_mm+0x10/0x10 [ 230.840852][ C0] ? rcu_is_watching+0x15/0xb0 [ 230.845678][ C0] do_exit+0x864/0x2550 [ 230.849890][ C0] ? __lock_acquire+0xab9/0xd20 [ 230.854799][ C0] ? do_raw_spin_lock+0x121/0x290 [ 230.859861][ C0] ? __pfx_do_exit+0x10/0x10 [ 230.864509][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 230.869944][ C0] do_group_exit+0x21c/0x2d0 [ 230.874571][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 230.879819][ C0] get_signal+0x1286/0x1340 [ 230.884397][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 230.889994][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 230.896219][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 230.901752][ C0] exit_to_user_mode_loop+0x75/0x110 [ 230.907082][ C0] do_syscall_64+0x2bd/0x3b0 [ 230.911710][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.917802][ C0] ? __switch_to_asm+0x39/0x70 [ 230.922592][ C0] ? clear_bhb_loop+0x60/0xb0 [ 230.927298][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.933216][ C0] RIP: 0033:0x7fa2fe78e969 [ 230.937668][ C0] RSP: 002b:00007fa2ff6bc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 230.946112][ C0] RAX: fffffffffffffe00 RBX: 00007fa2fe9b5fa8 RCX: 00007fa2fe78e969 [ 230.954120][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fa2fe9b5fa8 [ 230.962135][ C0] RBP: 00007fa2fe9b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 230.970147][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa2fe9b5fac [ 230.978139][ C0] R13: 0000000000000000 R14: 00007fff41b60760 R15: 00007fff41b60848 [ 230.986158][ C0] [ 230.989198][ C0] rcu: rcu_preempt kthread starved for 4994 jiffies! g15169 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 231.000328][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 231.010321][ C0] rcu: RCU grace-period kthread stack dump: [ 231.016223][ C0] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 231.029760][ C0] Call Trace: [ 231.033059][ C0] [ 231.036024][ C0] __schedule+0x16f5/0x4d00 [ 231.040569][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 231.045799][ C0] ? schedule+0x165/0x360 [ 231.050159][ C0] ? __lock_acquire+0xab9/0xd20 [ 231.055044][ C0] ? __pfx___schedule+0x10/0x10 [ 231.059947][ C0] ? schedule+0x91/0x360 [ 231.064217][ C0] schedule+0x165/0x360 [ 231.068404][ C0] schedule_timeout+0x12b/0x270 [ 231.073277][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 231.078666][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 231.084588][ C0] ? __pfx_process_timeout+0x10/0x10 [ 231.089915][ C0] ? prepare_to_swait_event+0x341/0x380 [ 231.095492][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 231.100370][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.105610][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 231.110572][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 231.116493][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 231.121800][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 231.127027][ C0] ? finish_swait+0xcd/0x1f0 [ 231.131649][ C0] rcu_gp_kthread+0x99/0x390 [ 231.136272][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 231.141498][ C0] ? __kthread_parkme+0x7b/0x200 [ 231.146469][ C0] ? __kthread_parkme+0x1a1/0x200 [ 231.151560][ C0] kthread+0x70e/0x8a0 [ 231.155670][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 231.160907][ C0] ? __pfx_kthread+0x10/0x10 [ 231.165524][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.170752][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.175977][ C0] ? __pfx_kthread+0x10/0x10 [ 231.180599][ C0] ret_from_fork+0x3fc/0x770 [ 231.185312][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 231.190457][ C0] ? __switch_to_asm+0x39/0x70 [ 231.195325][ C0] ? __switch_to_asm+0x33/0x70 [ 231.200109][ C0] ? __pfx_kthread+0x10/0x10 [ 231.204734][ C0] ret_from_fork_asm+0x1a/0x30 [ 231.209538][ C0] [ 231.212580][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 231.219007][ C0] CPU: 0 UID: 0 PID: 5572 Comm: crond Not tainted 6.15.0-syzkaller-07787-g27eab4c64423 #0 PREEMPT(full) [ 231.230224][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 231.240323][ C0] RIP: 0010:queued_write_lock_slowpath+0x125/0x260 [ 231.246883][ C0] Code: 00 01 00 00 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 14 d5 bc f6 eb 1f f3 90 43 0f b6 04 27 <84> c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 89 df e8 f3 d4 [ 231.266525][ C0] RSP: 0018:ffffc900000074e0 EFLAGS: 00000206 [ 231.272627][ C0] RAX: 0000000000000000 RBX: ffffffff8f61c5e0 RCX: ffffffff8b664328 [ 231.280706][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8f61c5e0 [ 231.288696][ C0] RBP: ffffc90000007590 R08: ffffffff8f61c5e3 R09: 1ffffffff1ec38bc [ 231.296686][ C0] R10: dffffc0000000000 R11: fffffbfff1ec38bd R12: dffffc0000000000 [ 231.304678][ C0] R13: 1ffff92000000ea0 R14: ffffc90000007530 R15: 1ffffffff1ec38bc [ 231.312668][ C0] FS: 0000000000000000(0000) GS:ffff888125c66000(0000) knlGS:0000000000000000 [ 231.321612][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.328210][ C0] CR2: 000000110c39600b CR3: 000000000df36000 CR4: 00000000003526f0 [ 231.336206][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 231.344193][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 231.352180][ C0] Call Trace: [ 231.355479][ C0] [ 231.358350][ C0] ? __pfx_queued_write_lock_slowpath+0x10/0x10 [ 231.364634][ C0] do_raw_write_lock+0x1f2/0x260 [ 231.369612][ C0] ? __pfx_do_raw_write_lock+0x10/0x10 [ 231.375115][ C0] ? ___neigh_create+0xe81/0x2260 [ 231.380171][ C0] ___neigh_create+0xe81/0x2260 [ 231.385080][ C0] ip6_finish_output2+0xb4d/0x16a0 [ 231.390230][ C0] ? ip6_finish_output2+0x701/0x16a0 [ 231.395721][ C0] ? __pfx_ip6_finish_output2+0x10/0x10 [ 231.401339][ C0] ? ip6_mtu+0x7d/0x3f0 [ 231.405607][ C0] ? ip6_mtu+0x7d/0x3f0 [ 231.409783][ C0] ip6_finish_output+0x234/0x7d0 [ 231.414763][ C0] ndisc_send_skb+0xb47/0x1400 [ 231.419557][ C0] ? ndisc_send_skb+0x208/0x1400 [ 231.424535][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 231.429768][ C0] ? __pfx_dst_output+0x10/0x10 [ 231.434675][ C0] addrconf_rs_timer+0x369/0x670 [ 231.439647][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 231.445144][ C0] call_timer_fn+0x17e/0x5f0 [ 231.449760][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 231.455252][ C0] ? call_timer_fn+0xbe/0x5f0 [ 231.459956][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 231.465105][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.470327][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.475547][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 231.481063][ C0] __run_timer_base+0x61a/0x860 [ 231.485939][ C0] ? ktime_get+0x3e/0x1f0 [ 231.490305][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 231.495698][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 231.501981][ C0] run_timer_softirq+0xb7/0x180 [ 231.506857][ C0] handle_softirqs+0x286/0x870 [ 231.511658][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 231.516466][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 231.521791][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 231.527033][ C0] __irq_exit_rcu+0xca/0x1f0 [ 231.531662][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 231.536902][ C0] irq_exit_rcu+0x9/0x30 [ 231.541183][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 231.546839][ C0] [ 231.549786][ C0] [ 231.552734][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 231.558743][ C0] RIP: 0010:smp_call_function_many_cond+0xe69/0x11c0 [ 231.565453][ C0] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 b0 77 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 5b 73 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 40 73 0b [ 231.585170][ C0] RSP: 0018:ffffc90003faf360 EFLAGS: 00000293 [ 231.591275][ C0] RAX: ffffffff81b487b0 RBX: ffff8880b863cc00 RCX: ffff88801fbb0000 [ 231.599271][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 231.607256][ C0] RBP: ffffc90003faf4c0 R08: ffffffff8fa0b1b7 R09: 1ffffffff1f41636 [ 231.615246][ C0] R10: dffffc0000000000 R11: fffffbfff1f41637 R12: 1ffff110170e8271 [ 231.623239][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffff8880b8741388 [ 231.631251][ C0] ? smp_call_function_many_cond+0xe80/0x11c0 [ 231.637361][ C0] ? __lock_acquire+0xab9/0xd20 [ 231.642248][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 231.647481][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 231.653891][ C0] ? rcu_is_watching+0x15/0xb0 [ 231.658687][ C0] ? __pfx_flush_tlb_func+0x10/0x10 [ 231.663908][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 231.669059][ C0] flush_tlb_mm_range+0x6b1/0x12c0 [ 231.674196][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 231.679507][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 231.684735][ C0] ? free_pgd_range+0x144b/0x14c0 [ 231.689783][ C0] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 231.695364][ C0] tlb_flush_mmu+0x1a7/0x680 [ 231.699986][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 231.704601][ C0] ? free_pgd_range+0x144b/0x14c0 [ 231.709653][ C0] free_ldt_pgtables+0x17b/0x320 [ 231.714629][ C0] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 231.720146][ C0] ? down_read+0x1ad/0x2e0 [ 231.724684][ C0] exit_mmap+0x179/0xba0 [ 231.728963][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 231.733762][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 231.739437][ C0] ? __pfx_exit_aio+0x10/0x10 [ 231.744153][ C0] ? uprobe_clear_state+0x274/0x290 [ 231.749477][ C0] __mmput+0x118/0x420 [ 231.753578][ C0] exit_mm+0x1da/0x2c0 [ 231.757677][ C0] ? __pfx_exit_mm+0x10/0x10 [ 231.762288][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 231.767780][ C0] ? rcu_is_watching+0x15/0xb0 [ 231.772581][ C0] do_exit+0x864/0x2550 [ 231.776758][ C0] ? __lock_acquire+0xab9/0xd20 [ 231.781645][ C0] ? do_raw_spin_lock+0x121/0x290 [ 231.786692][ C0] ? __pfx_do_exit+0x10/0x10 [ 231.791333][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 231.796769][ C0] do_group_exit+0x21c/0x2d0 [ 231.801408][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.806643][ C0] get_signal+0x1286/0x1340 [ 231.811201][ C0] arch_do_signal_or_restart+0x9a/0x750 [ 231.816782][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 231.822986][ C0] ? exit_to_user_mode_loop+0x40/0x110 [ 231.828478][ C0] exit_to_user_mode_loop+0x75/0x110 [ 231.833794][ C0] do_syscall_64+0x2bd/0x3b0 [ 231.838427][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 231.843652][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.849744][ C0] ? clear_bhb_loop+0x60/0xb0 [ 231.854450][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.860366][ C0] RIP: 0033:0x7fe49ee6eb0a [ 231.864800][ C0] Code: Unable to access opcode bytes at 0x7fe49ee6eae0. [ 231.871921][ C0] RSP: 002b:00007ffd7ed31468 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 231.880357][ C0] RAX: 0000000000000000 RBX: 00007fe49f01e490 RCX: 00007fe49ee6eb0a [ 231.888348][ C0] RDX: 00007ffd7ed31488 RSI: 00007fe49eff77e8 RDI: 00000000ffffff9c [ 231.896342][ C0] RBP: 0000000068398dd0 R08: 0000000000000000 R09: 0000000000000000 [ 231.904328][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.912318][ C0] R13: 000000000000003c R14: 0000000000000000 R15: 000000000000003c [ 231.920357][ C0]