last executing test programs: 3m55.313118747s ago: executing program 3 (id=415): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'virt_wifi0\x00', {0x2, 0x0, @multicast2}}) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r5) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x14, 0xfc, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0xffff}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x76}]}, @typed={0x39, 0x5, 0x0, 0x0, @fd=r6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20004080) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @local}}) 3m40.674318428s ago: executing program 3 (id=415): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'virt_wifi0\x00', {0x2, 0x0, @multicast2}}) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r5) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x14, 0xfc, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0xffff}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x76}]}, @typed={0x39, 0x5, 0x0, 0x0, @fd=r6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20004080) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @local}}) 3m23.467301482s ago: executing program 3 (id=415): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'virt_wifi0\x00', {0x2, 0x0, @multicast2}}) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r5) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x14, 0xfc, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0xffff}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x76}]}, @typed={0x39, 0x5, 0x0, 0x0, @fd=r6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20004080) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @local}}) 3m9.447697578s ago: executing program 3 (id=415): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'virt_wifi0\x00', {0x2, 0x0, @multicast2}}) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r5) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x14, 0xfc, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0xffff}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x76}]}, @typed={0x39, 0x5, 0x0, 0x0, @fd=r6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20004080) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @local}}) 2m57.407116656s ago: executing program 3 (id=415): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'virt_wifi0\x00', {0x2, 0x0, @multicast2}}) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r5) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x14, 0xfc, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0xffff}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x76}]}, @typed={0x39, 0x5, 0x0, 0x0, @fd=r6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20004080) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @local}}) 2m43.867691919s ago: executing program 3 (id=415): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, &(0x7f0000000080)={'virt_wifi0\x00', {0x2, 0x0, @multicast2}}) socket$key(0xf, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)={0x40, r4, 0x60b, 0x70bd2d, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x40}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x40}}, 0x0) socket$tipc(0x1e, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) close(r5) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)={0x44, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x14, 0xfc, 0x0, 0x1, [@nested={0x10, 0x8, 0x0, 0x1, [@typed={0xc, 0x151, 0x0, 0x0, @u64=0xffff}]}]}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x76}]}, @typed={0x39, 0x5, 0x0, 0x0, @fd=r6}]}, 0x44}, 0x1, 0x0, 0x0, 0xc000}, 0x20004080) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000040)={'veth0_to_batadv\x00', {0x2, 0x0, @local}}) 2m25.198595385s ago: executing program 1 (id=1306): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) 2m24.85042674s ago: executing program 0 (id=1310): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffcf7, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000200000000002000000080001"], 0x1c}}, 0x0) 2m24.738142022s ago: executing program 1 (id=1311): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000100)={0x4, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x22}}}}, 0x108) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013000318680907070000000f0000ff3f04000000170a001700002100040037000d00030001332564aa58b9a64411f6bbf44dc48f57", 0x39}], 0x1) 2m24.571973083s ago: executing program 2 (id=1313): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xfffffff9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="2400000000000000290000003200000000640000000000000000ffffac1414aa", @ANYRES32=r1], 0x28}}], 0x1, 0x20000040) 2m24.500657712s ago: executing program 0 (id=1314): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x8000, 0x7800, 0x5, 0x80000001, {{0x7, 0x4, 0x1, 0x3a, 0x1c, 0x66, 0x0, 0x7, 0x2f, 0x0, @remote, @multicast2, {[@ra={0x94, 0x4, 0x1}, @noop]}}}}}) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) write$cgroup_type(r2, &(0x7f00000000c0), 0x9) r3 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000e00)=@o_path={&(0x7f0000000dc0)='./file0\x00', 0x0, 0x18, r0}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x1}, 0x50) pipe(&(0x7f0000000ec0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r7, 0x114, 0x6, &(0x7f0000000000)={0x3, "445aa1"}, 0x4) setsockopt$RDS_CONG_MONITOR(r7, 0x114, 0x6, &(0x7f0000000040)=0x1, 0x4) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1000000, 0x13, r6, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r8, &(0x7f0000000000), 0x0}, 0x20) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r9, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x11, 0x16, &(0x7f0000001000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x400}, [@alu={0x4, 0x0, 0x3, 0xf, 0x3, 0xffffffffffffffff, 0x8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, @tail_call, @map_idx={0x18, 0x8, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}, @call={0x85, 0x0, 0x0, 0xc4}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x4}, @alu={0x7, 0x0, 0x3, 0xb, 0xa, 0x100, 0x10}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @map_fd={0x18, 0x6, 0x1, 0x0, r6}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xd2, &(0x7f0000000c40)=""/210, 0x0, 0x22, '\x00', r1, @fallback=0x7, r2, 0x8, &(0x7f0000000d40)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000d80)={0x1, 0xe, 0x1, 0x6}, 0x10, 0x0, r3, 0x0, &(0x7f0000000f00)=[0x1, r4, 0xffffffffffffffff, r5, r6, r8, 0x1, r9]}, 0x94) 2m24.272072319s ago: executing program 4 (id=1315): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f1f0000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m24.256448394s ago: executing program 1 (id=1316): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c0001800500020000000000080004000500000000640100020000"], 0x7c}}, 0x0) 2m24.189591052s ago: executing program 2 (id=1317): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002300)=@newtaction={0x2c8, 0x30, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{0x4}, {0x2b0, 0x1, [@m_bpf={0xb0, 0x6, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x101, 0x9, 0x80, 0x2}, {0xe454, 0x1, 0xd9, 0x4}, {0x2, 0x5, 0x0, 0x5}, {0x5, 0x4, 0x6f, 0x7}, {0x2, 0x0, 0xb3, 0x8}]}]}, {0x51, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x124, 0x15, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x7, 0x3}}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x2, 0x5, 0xfff, 0x7}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, {0xb7, 0x6, "4b9740f4c4050ed3c8b84b3356014b8f97236655e94563fc75e59455f4aeb44b2ea148c66c3f56d93909c0c45f84804fa30c248c0be0947afca9b4cc34d8bcdfd8a1314bdcf0bc4a604ce8ffd65822487d5eb92234d25263358f95909f4c6462accaf8d8e8d0a126b75b7f56b05b0551e31af41b30b547a840e0c8375239b336626d6336796506413a704f8430b7281ac81300e8c24c1dab58922c959bfc802eb8c89a74edd9c1c3fdfa7200a1d24af137ab88"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0xa4, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0x77, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x34, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x8, 0x6, "95f1a313"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000810}, 0x20048801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m24.067895507s ago: executing program 0 (id=1318): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002300)=@newtaction={0x2c8, 0x30, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{0x4}, {0x2b0, 0x1, [@m_bpf={0xb0, 0x6, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x101, 0x9, 0x80, 0x2}, {0xe454, 0x1, 0xd9, 0x4}, {0x2, 0x5, 0x0, 0x5}, {0x5, 0x4, 0x6f, 0x7}, {0x2, 0x0, 0xb3, 0x8}]}]}, {0x51, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x124, 0x15, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x7, 0x3}}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x2, 0x5, 0xfff, 0x7}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, {0xb7, 0x6, "4b9740f4c4050ed3c8b84b3356014b8f97236655e94563fc75e59455f4aeb44b2ea148c66c3f56d93909c0c45f84804fa30c248c0be0947afca9b4cc34d8bcdfd8a1314bdcf0bc4a604ce8ffd65822487d5eb92234d25263358f95909f4c6462accaf8d8e8d0a126b75b7f56b05b0551e31af41b30b547a840e0c8375239b336626d6336796506413a704f8430b7281ac81300e8c24c1dab58922c959bfc802eb8c89a74edd9c1c3fdfa7200a1d24af137ab88"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0xa4, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0x77, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x34, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x8, 0x6, "95f1a313"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000810}, 0x20048801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000001c0)) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2m23.883888882s ago: executing program 1 (id=1319): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002300)=@newtaction={0x2c8, 0x30, 0x300, 0x70bd2a, 0x25dfdbff, {}, [{0x4}, {0x2b0, 0x1, [@m_bpf={0xb0, 0x6, 0x0, 0x0, {{0x8}, {0x38, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x6}, @TCA_ACT_BPF_OPS={0x2c, 0x4, [{0x101, 0x9, 0x80, 0x2}, {0xe454, 0x1, 0xd9, 0x4}, {0x2, 0x5, 0x0, 0x5}, {0x5, 0x4, 0x6f, 0x7}, {0x2, 0x0, 0xb3, 0x8}]}]}, {0x51, 0x6, "bfb48d1c9cbd39c403490f71e7c26903a2429639badf09f7f1460a1a37776d69ba43d012403ff817b805f05e15fda7d5abfefd6f88a71220a3dc2a6660c265b59ed90ce6980eda6d48215f2ed3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_ct={0x124, 0x15, 0x0, 0x0, {{0x7}, {0x48, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x5, 0x3, 0x7, 0x3}}, @TCA_CT_PARMS={0x18, 0x1, {0x6, 0x2, 0x5, 0xfff, 0x7}}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}]}, {0xb7, 0x6, "4b9740f4c4050ed3c8b84b3356014b8f97236655e94563fc75e59455f4aeb44b2ea148c66c3f56d93909c0c45f84804fa30c248c0be0947afca9b4cc34d8bcdfd8a1314bdcf0bc4a604ce8ffd65822487d5eb92234d25263358f95909f4c6462accaf8d8e8d0a126b75b7f56b05b0551e31af41b30b547a840e0c8375239b336626d6336796506413a704f8430b7281ac81300e8c24c1dab58922c959bfc802eb8c89a74edd9c1c3fdfa7200a1d24af137ab88"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_csum={0xa4, 0x1d, 0x0, 0x0, {{0x9}, {0x4}, {0x77, 0x6, "f0b8bf92cf8611111a0ff27fcc8825ca405600cfd0f6876d2892df6b5723118bb7d9d86de0a2706031cc8c62f7d1b04f3a9ed11665c75023f87c16ce970413ede5e5f6782d0d17be877ac54c09075ed841c7daeddf3395a210eab4335ed3bcb36fe1598dc94259da01363ad59d8dc384cb8fe4"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ctinfo={0x34, 0x1d, 0x0, 0x0, {{0xb}, {0x4}, {0x8, 0x6, "95f1a313"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x2c8}, 0x1, 0x0, 0x0, 0x4000810}, 0x20048801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000200)=ANY=[], 0x14) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (fail_nth: 3) 2m23.845660566s ago: executing program 4 (id=1320): r0 = socket$inet6(0xa, 0x5, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f00000006c0)={0x1, 0x8, 0x1, 0xf2, 0x0, [@loopback, @remote, @mcast2, @private2]}, 0x48) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r3, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002b80)=@delchain={0x148, 0x65, 0x2, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x10c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0xd4, 0x1, [@m_simple={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_ctinfo={0xa0, 0x1b, 0x0, 0x0, {{0xb}, {0x74, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6, 0x4, 0x401}, @TCA_CTINFO_ACT={0x18, 0x3, {0xd, 0x6, 0x3, 0x101, 0x4}}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x8, 0x5, 0x0, 0x9}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x8}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x400}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xffffffb4}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x3}, @TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0xe, 0x8, 0x512ce089}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x3be9, 0x2, 0xf8, 0xa490}]}}, @TCA_BPF_ACT={0x4}]}}]}, 0x148}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x20, 0x1e, 0x505, 0x0, 0x0, "", [@typed={0x10, 0x12b, 0x0, 0x0, @binary="461dc071caf2d43500d1f6c8"}]}, 0x20}], 0x1}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x44, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME={0x28, 0x33, @action={{{}, {}, @device_b}, @channel_switch={0x0, 0x4, {{0x25, 0x3}, @val={0x3e, 0x1}, @void}}}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x6c, r6, 0x804, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x9}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x1b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x626}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x5b7}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x7}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x3, 0x8}}]}, 0x6c}}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r2}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 2m23.777431583s ago: executing program 2 (id=1321): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000780), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000c80)={0x34, r1, 0x1, 0x400000, 0x0, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1=0xa010101}, @NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x34}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)={0x4c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0xffffffffffffff23, 0xb, 0x9}, {0x6, 0x11, 0xffff}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x6e, &(0x7f0000000240)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x38, 0x2b, 0x0, @private2, @local, {[@hopopts={0x67}], {0x2100, 0x0, 0xffffffffffffff98, 0x0, @opaque="0d87aedaaa7fc9a56dc2d42b221003a116fd256378e5e186d69b1c57326a7371394d0c6bae77d286"}}}}}}, 0x0) 2m23.615354102s ago: executing program 0 (id=1322): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x0, 0x1fffffd, {0x7, 0x0, 0x0, r2, 0x14, 0x42}}, 0x1c}}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x1ff) r4 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r6 = socket$nl_rdma(0x10, 0x3, 0x14) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x850d, '\x00', r2, r0, 0x0, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000140), &(0x7f00000001c0)=r4}, 0x20) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r6, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000e00)={0x20, 0x140c, 0x1, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8010}, 0x400c000) sendmsg$NL80211_CMD_GET_REG(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, r5, 0x4c466994d56c53cd}, 0x14}}, 0x0) 2m23.174230701s ago: executing program 1 (id=1323): r0 = socket(0x10, 0x3, 0x2) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=@newlink={0x34, 0x10, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x2180, 0x1}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x6}}]}]}]}, 0x34}}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) sendto$inet(r2, &(0x7f0000000200)="e1", 0xfea8, 0x0, 0x0, 0x0) r3 = socket(0x1, 0x803, 0x0) socket$inet(0x2, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000300)={'gre0\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x0, 0x8000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @empty}}}}) 2m23.17369932s ago: executing program 2 (id=1324): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a80)=ANY=[@ANYBLOB="14000000", @ANYBLOB="01"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r0) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000b00), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000340)={0x0, 0xfffffffffffffcf7, &(0x7f0000000b80)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000200000000002000000080001"], 0x1c}}, 0x0) 2m23.151417957s ago: executing program 4 (id=1325): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0xfdb7) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x50}, 0x4040140) 2m22.978032786s ago: executing program 4 (id=1326): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @default, @netrom, @default, @bcast, @default, @remote, @netrom]}, &(0x7f0000000080)=0x48) readv(r0, &(0x7f0000001240)=[{&(0x7f00000000c0)=""/157, 0x9d}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/72, 0x48}], 0x4) (async) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000001280)={0x0, @aes128, 0x0, @desc3}) (async) r1 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f00000012c0), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000001300)={[{0x2b, 'net_cls'}, {0x2d, 'cpuset'}, {0x2d, 'io'}, {0x2b, 'cpuset'}, {0x2d, 'rdma'}, {0x2b, 'net_prio'}, {0x2b, 'cpuacct'}, {0x2d, 'devices'}]}, 0x3f) (async) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(0xffffffffffffffff, 0xf504, 0x0) (async) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000001340)={r1, 0x3ff, 0x4, 0x3ff}) sendmsg$nl_route(r2, &(0x7f0000001440)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001400)={&(0x7f00000013c0)=@delnexthop={0x30, 0x69, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [{0x8, 0x1, 0x1}, {0x8}, {0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x41) (async) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000016c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001680)={&(0x7f00000014c0)={0x188, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x5, 0x46}}}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xa}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x8}, @NL80211_ATTR_VENDOR_DATA={0xb1, 0xc5, "b410c402b0e6428fca035b03901ce29ef7da2ed263e34b21faab804fde72653b18b0d70c73b79e14634c20532c0d1f94442f15cf123b73671697acee1d8dbff3d85bfc7f5d0f1ed81dd3a9b7823572439ff5a97bd392b1e464a5a005396165b172530a4b825fe008039b12dd83cee42b3aab029731d8e854ac13f869f78f83fb82fae0cdef5985f24fd644eabcc94c65e3510adf1d9a870027a5d670420ccf77643bfa29151b9f4985264f4462"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x75}, @NL80211_ATTR_VENDOR_DATA={0x94, 0xc5, "fb10327103d9bc437d4ceb498d7b4297ec216394dd215943b1170a44c812ca68048435d708cb11b69809e7222edd68848629516a710c5c239862a58d61be35ed73776aae0015999b0eecda3a7e2cab9e14fb14cc5fdba7cf77a384d0bd7d58262d92171015f86923492e61e0f725ab6be67c81817ca62b5acbf4e500024682a1caedf761b41c66e39e83730c480c6ca0"}]}, 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x20004004) (async) close(r2) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TLS_RX(r4, 0x6, 0x2, &(0x7f0000001700)=@ccm_128={{0x304}, "22be2870b25f92f7", "030acf66a1c5b7861c8251434043fb9b", "d5a237cb", "257ae2b281a32898"}, 0x28) (async) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40800}, 0x8000) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000001840), &(0x7f0000001880)=0xc) (async) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f00000018c0)=0x1) ioctl$FIBMAP(r1, 0x1, &(0x7f0000001900)=0x2) sendfile(r1, r2, &(0x7f0000001940)=0x7, 0xff) (async) ioctl$FS_IOC_SETVERSION(r3, 0x40087602, &(0x7f0000001980)=0x7) (async) sendmsg$AUDIT_ADD_RULE(r2, &(0x7f0000001e80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001e40)={&(0x7f0000001a00)={0x428, 0x3f3, 0x1, 0x70bd28, 0x25dfdbfc, {0x2, 0x3, 0x8, [0x3, 0x8, 0x200, 0x4, 0x7, 0x7, 0x81b5, 0x800, 0x9, 0x1, 0x7fff, 0x8, 0x5, 0x6, 0x80, 0x100, 0x7, 0x9, 0x8, 0xb8a, 0x101, 0x8, 0x0, 0xe9, 0x0, 0xf6d7, 0xc1, 0x0, 0x3, 0x4, 0x3, 0x6, 0x4, 0xfffeffff, 0x5, 0xff88, 0x6, 0x1, 0x7, 0x9, 0x2, 0xde83, 0x31ac7246, 0x5, 0x7ff, 0x2, 0x1, 0x7, 0x2, 0x0, 0x7, 0x0, 0x8, 0xffffffff, 0x0, 0x1, 0x7ff, 0x1, 0x71, 0x2564, 0xe, 0x80, 0x80000000, 0x9876], [0x2, 0x7, 0x401, 0x3, 0x7f, 0x1, 0xc0c4, 0x7fff, 0xe, 0x0, 0xfffffffb, 0x3, 0x7, 0x7, 0x7, 0x4000000, 0x40, 0xffffff43, 0x9, 0x7, 0x1, 0x29f, 0x1, 0x7ff, 0x5, 0xdf, 0x8, 0x9, 0x4, 0x4b3, 0x9, 0x8, 0x3, 0x0, 0x1c6, 0x1ff, 0x9, 0x73b, 0x81, 0x5, 0x3, 0x1000, 0x6, 0x80, 0xffffffe5, 0x2, 0x0, 0x0, 0xfff, 0x5, 0x8, 0xfffffff8, 0x3, 0x6, 0xffff, 0x6d83, 0x10f, 0x7, 0x80000000, 0xfffffffe, 0x2, 0xfffffff8, 0x3, 0x2], [0x4, 0x3, 0x6, 0x7fff, 0x8, 0x3, 0xa428, 0x1, 0x2, 0x8e, 0x4, 0x80000001, 0x8, 0x9, 0xf7c, 0x7, 0x10, 0x7, 0xfff, 0x9, 0x78, 0xce, 0x3, 0x5, 0x9, 0x4, 0x4, 0xfffffff6, 0x1, 0x0, 0x1, 0x5, 0x0, 0x7fff, 0x12, 0x9, 0x6, 0x31d, 0x0, 0x6b376b31, 0x6, 0x401, 0xda4f, 0x3, 0x4, 0x20000, 0x1, 0x0, 0x1000, 0x5, 0x9d03, 0x9, 0x5, 0x4, 0x8, 0x0, 0x5, 0x10, 0x9, 0x20000000, 0x10, 0x7, 0x9, 0xfc35], [0x6, 0xd48, 0x81, 0x6, 0xa4c2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x7, 0x1b73, 0x7fffffff, 0x70000, 0x7, 0x1ff, 0x4, 0x7, 0x54, 0x0, 0xb8, 0x1, 0x100, 0x0, 0x9, 0x5, 0x81, 0x7, 0x7, 0x9, 0x8, 0x6153, 0xfffffff8, 0x2, 0x1, 0x7, 0x40, 0x963, 0x60b, 0x3, 0x3, 0x101, 0x0, 0x400, 0x7ff, 0xcb82, 0x6df, 0x81, 0x2, 0x2, 0x10, 0x9, 0x4fdcd58f, 0xfffffffc, 0x7f, 0x8, 0x7, 0x7ff, 0x0, 0x9, 0x4, 0x0, 0x8000, 0x6], 0x8, ['cpuset', '$\x00']}, ["", "", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000051) sendto(r5, &(0x7f0000001ec0)="61d785875c143e53d7ee90357f97cf3a459a98f4a6976170ddcf24564d69fb3eca753caee060e433ded5dbadaf3d10170608ba953f846c789ee79fe3c95e52efb7c3a79083445e274cca2b26d6bc055248d65f392d079debdc8224c09832b790fcd2a885d41bd67273d4ebc01ecfcb74d8bbdcbdf4a0fccf63990a81895439ff23835bba9be63eacc878ee3490ae13cce3c305612434ff0fcae2e5b617c3654d76a63e231e5980358316225cbc26c4e9de8da65b1ea7e13122755bd1", 0xbc, 0x0, &(0x7f0000001f80)=@pppoe={0x18, 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, 'veth0_virt_wifi\x00'}}, 0x80) syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), r2) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000021c0)={&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000002040)=""/230, 0xe6, 0x0, &(0x7f0000002140)=""/71, 0x47}, &(0x7f0000002200)=0x40) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000002240)={0x0, 'virt_wifi0\x00', {0x4}, 0x401}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000002280), r2) (async) connect$inet(r2, &(0x7f00000022c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xb3bf6c97f6f1a582, &(0x7f0000002300)=""/166, &(0x7f00000023c0)=0xa6) (async) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002440), r5) sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f00000025c0)={&(0x7f0000002400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002480)={0xe4, r6, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_SOCK={0x84, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x49}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9666}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc069}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0xe4}}, 0x40) 2m22.968858899s ago: executing program 2 (id=1327): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r3, 0x5421, &(0x7f0000000080)=0x2) connect$vsock_stream(r3, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r3, 0x2) ppoll(&(0x7f0000000000)=[{r3, 0x400}], 0x1, 0x0, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r5, &(0x7f0000000440), 0x10) connect$vsock_stream(r5, &(0x7f0000000000), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) accept4$unix(r5, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vxcan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x1f, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000b00080000000000e80a000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000200000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500000086000000050500040000000018170000", @ANYRES32=r8, @ANYBLOB="0000000000000000182a0000", @ANYRES32=r2, @ANYBLOB="0000000005000000a7480000f0ffffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='syzkaller\x00', 0x9, 0x0, &(0x7f0000000540), 0x41100, 0x71, '\x00', r9, 0x0, r2, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0xf, 0xdc}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000640)=[{0x4, 0x2, 0xf, 0xc}, {0x2, 0x1, 0x8, 0x4}, {0x5, 0x3, 0xa, 0x5}, {0x1, 0x4, 0x9, 0x9}, {0x1, 0x5, 0x1, 0x1}], 0x10, 0x2}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000e00)=ANY=[@ANYBLOB="d0020000", @ANYRES16=r4, @ANYBLOB="08002bbd7000fcdbdf254400000008000300", @ANYRES32=r7, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) 2m22.879441086s ago: executing program 0 (id=1328): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000800)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x210, 0x160, 0x0, 0xffffffff, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98, 0x0, {0x100000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @multicast2, 0x0, 0x0, 'vlan0\x00', 'syzkaller1\x00', {}, {}, 0x33}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@inet=@SET1={0x28}}, {{@ip={@private, @loopback, 0x0, 0x0, 'batadv_slave_0\x00', 'ip6erspan0\x00'}, 0x0, 0x70, 0xb0}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) 2m22.703548881s ago: executing program 1 (id=1329): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$sock_int(r1, 0x1, 0x22, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, 0x0, &(0x7f0000000480)) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000100)={0x1d, r3}, 0x18) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000040)={'ip_vti0\x00', {0x2, 0x4e24, @rand_addr=0x64010100}}) close(r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r6, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r6, 0x110, 0x1, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000240)={'geneve1\x00', &(0x7f0000000200)=@ethtool_pauseparam={0x12}}) close(r5) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x2, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r3, @ANYRES64], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x18, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8dd5bab6}, 0x94) 2m22.652063343s ago: executing program 4 (id=1330): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) sendto$inet6(r0, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x800, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xbfa2, @link='syz1\x00'}}}, ["", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x9}, 0xc0) recvfrom$inet6(r0, 0x0, 0x0, 0x120, 0x0, 0x0) 2m22.627299325s ago: executing program 0 (id=1331): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r1], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m22.540022551s ago: executing program 2 (id=1332): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f000000ab00)={0x18, 0x2, {0x1, @private=0xa010101}}, 0x1e) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSMRU(r2, 0x40047452, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3cd2e7b3d6526bf5}}}, 0x68}}, 0x0) r3 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r3, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04", 0xd}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYRES32, @ANYBLOB, @ANYBLOB], 0x50) bind$pptp(r0, &(0x7f000000ae00)={0x18, 0x2, {0x1, @local}}, 0x1e) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x4, 0x10}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STATUS(r6, 0x84, 0xe, &(0x7f0000000080)={r7, 0xfff, 0x0, 0xb, 0x6, 0x6, 0xeeaf, 0xa25, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x7, 0x1ff, 0x7, 0x3, 0x3e4}}, &(0x7f0000000140)=0xb0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000340)={r8, &(0x7f00000002c0)="6ace22eb9d6b0e3b49a24e00ecdac960f018bc2f30f64046b104b56409074517a66e2584a015df1f78a49138b59cd7afb4a6b796da665f5b98ffd7107c0f2dbd43b4ce5b946a8966ece77b8a7ac3cf4905d4ed9e65e2616382b4abd1795155bf3f96", &(0x7f0000000440)=""/203}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x40d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r5, @ANYBLOB="08000a00e408"], 0x44}}, 0x20008040) 2m4.953166076s ago: executing program 4 (id=1333): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="07ef28bd7000fbdbdf2508"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x45080) 0s ago: executing program 32 (id=1331): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000001100)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x5, 0xb}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="680000001000030500000000fcdbdf25000000ff", @ANYRES32=0x0, @ANYBLOB="00000000008000004800128008000100687372003c000280060005000180000008000100", @ANYRES32=r3, @ANYBLOB="0500060001000000050007000000000005000300df00000008000200", @ANYRES64=r1], 0x68}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): _0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.534324][ T8386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.626890][ T8386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.654535][ T8386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.727816][ T8386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.757500][ T8576] netlink: 9 bytes leftover after parsing attributes in process `syz.0.763'. [ 170.797236][ T8576] 0ªX¹¦D: entered promiscuous mode [ 170.803468][ T8576] 0ªX¹¦D: left allmulticast mode [ 170.832645][ T8584] netlink: 5 bytes leftover after parsing attributes in process `syz.0.763'. [ 170.992227][ T8584] 1ªX¹¦D: renamed from 30ªX¹¦D [ 171.002147][ T8584] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 171.041437][ T8386] hsr_slave_0: entered promiscuous mode [ 171.067366][ T8386] hsr_slave_1: entered promiscuous mode [ 171.627353][ T5844] Bluetooth: hci0: command tx timeout [ 171.643310][ T8610] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 171.673734][ T8610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.775'. [ 171.866729][ T8591] syz.4.769: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 171.876642][ T8616] xt_TCPMSS: Only works on TCP SYN packets [ 171.890123][ T8591] CPU: 0 UID: 0 PID: 8591 Comm: syz.4.769 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 171.890151][ T8591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 171.890162][ T8591] Call Trace: [ 171.890169][ T8591] [ 171.890177][ T8591] dump_stack_lvl+0x189/0x250 [ 171.890217][ T8591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.890245][ T8591] ? __pfx__printk+0x10/0x10 [ 171.890265][ T8591] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.890286][ T8591] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 171.890308][ T8591] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 171.890331][ T8591] warn_alloc+0x214/0x310 [ 171.890357][ T8591] ? __pfx_warn_alloc+0x10/0x10 [ 171.890387][ T8591] ? __get_vm_area_node+0x28f/0x300 [ 171.890407][ T8591] ? translate_table+0x198/0x2000 [ 171.890431][ T8591] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 171.890481][ T8591] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 171.890506][ T8591] ? rcu_is_watching+0x15/0xb0 [ 171.890534][ T8591] ? translate_table+0x198/0x2000 [ 171.890552][ T8591] ? translate_table+0x198/0x2000 [ 171.890569][ T8591] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 171.890588][ T8591] ? translate_table+0x198/0x2000 [ 171.890606][ T8591] ? xt_alloc_table_info+0x3b/0xa0 [ 171.890640][ T8591] translate_table+0x198/0x2000 [ 171.890677][ T8591] ? __lock_acquire+0xab9/0xd20 [ 171.890711][ T8591] ? __pfx_translate_table+0x10/0x10 [ 171.890736][ T8591] ? __might_fault+0xb0/0x130 [ 171.890779][ T8591] ? _copy_from_user+0x94/0xb0 [ 171.890805][ T8591] do_ipt_set_ctl+0x967/0xcd0 [ 171.890836][ T8591] ? rcu_is_watching+0x15/0xb0 [ 171.890866][ T8591] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 171.890920][ T8591] ? __pfx___mutex_lock+0x10/0x10 [ 171.890952][ T8591] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 171.890981][ T8591] ? aa_sk_perm+0x81e/0x950 [ 171.891010][ T8591] ? __pfx_aa_sk_perm+0x10/0x10 [ 171.891042][ T8591] nf_setsockopt+0x26f/0x290 [ 171.891070][ T8591] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 171.891105][ T8591] do_sock_setsockopt+0x257/0x3e0 [ 171.891132][ T8591] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 171.891161][ T8591] ? __fget_files+0x2a/0x420 [ 171.891194][ T8591] __x64_sys_setsockopt+0x18b/0x220 [ 171.891225][ T8591] do_syscall_64+0xfa/0x3b0 [ 171.891242][ T8591] ? lockdep_hardirqs_on+0x9c/0x150 [ 171.891270][ T8591] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.891290][ T8591] ? clear_bhb_loop+0x60/0xb0 [ 171.891315][ T8591] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.891334][ T8591] RIP: 0033:0x7f5d12b8e929 [ 171.891353][ T8591] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.891371][ T8591] RSP: 002b:00007f5d13945038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 171.891394][ T8591] RAX: ffffffffffffffda RBX: 00007f5d12db5fa0 RCX: 00007f5d12b8e929 [ 171.891408][ T8591] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 171.891420][ T8591] RBP: 00007f5d12c10b39 R08: 0000000000000308 R09: 0000000000000000 [ 171.891432][ T8591] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000000 [ 171.891444][ T8591] R13: 0000000000000000 R14: 00007f5d12db5fa0 R15: 00007fffdba8d8b8 [ 171.891478][ T8591] [ 171.891486][ T8591] Mem-Info: [ 171.891498][ T8591] active_anon:3631 inactive_anon:0 isolated_anon:0 [ 171.891498][ T8591] active_file:1503 inactive_file:39865 isolated_file:0 [ 171.891498][ T8591] unevictable:768 dirty:146 writeback:0 [ 171.891498][ T8591] slab_reclaimable:10810 slab_unreclaimable:94941 [ 171.891498][ T8591] mapped:28991 shmem:1363 pagetables:993 [ 171.891498][ T8591] sec_pagetables:0 bounce:0 [ 171.891498][ T8591] kernel_misc_reclaimable:0 [ 171.891498][ T8591] free:1314130 free_pcp:17355 free_cma:0 [ 171.891551][ T8591] Node 0 active_anon:14524kB inactive_anon:0kB active_file:6012kB inactive_file:159260kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115964kB dirty:580kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11472kB pagetables:3860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.891605][ T8591] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 171.891656][ T8591] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 172.422948][ T8591] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 172.432637][ T8591] Node 0 DMA32 free:1344180kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:14364kB inactive_anon:0kB active_file:6012kB inactive_file:157452kB unevictable:1536kB writepending:576kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:46956kB local_pcp:17868kB free_cma:0kB [ 172.476158][ T8591] lowmem_reserve[]: 0 0 1 1 1 [ 172.480966][ T8591] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1808kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 172.539872][ T8591] lowmem_reserve[]: 0 0 0 0 0 [ 172.544791][ T8591] Node 1 Normal free:3896916kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22696kB local_pcp:12032kB free_cma:0kB [ 172.577806][ T8632] netlink: 9 bytes leftover after parsing attributes in process `syz.2.784'. [ 172.593296][ T8632] 1ªX¹¦D: entered promiscuous mode [ 172.604366][ T8632] netlink: 5 bytes leftover after parsing attributes in process `syz.2.784'. [ 172.617349][ T8591] lowmem_reserve[]: 0 0 0 0 0 [ 172.626784][ T8591] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 172.639452][ T8632] 0ªX¹¦D: renamed from 31ªX¹¦D [ 172.664526][ T8632] 0ªX¹¦D: left promiscuous mode [ 172.665984][ T8591] Node 0 DMA32: 668*4kB (UME) 442*8kB (M) 229*16kB (UM) 136*32kB (UM) 82*64kB (UME) 35*128kB (ME) 16*256kB (UME) 10*512kB (UM) 4*1024kB (UM) 0*2048kB 319*4096kB (UM) = 1343888kB [ 172.670867][ T8632] 0ªX¹¦D: entered allmulticast mode [ 172.693447][ T8591] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 172.708037][ T8591] Node 1 Normal: 193*4kB (UE) 42*8kB (UME) 47*16kB (UME) 75*32kB (UME) 24*64kB (UM) 8*128kB (UME) 6*256kB (UME) 3*512kB (UM) 2*1024kB (ME) 1*2048kB (E) 948*4096kB (M) = 3896996kB [ 172.710175][ T8632] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 172.750522][ T8591] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.773535][ T8591] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.784904][ T8591] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 172.798389][ T8591] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 172.815102][ T8591] 42728 total pagecache pages [ 172.831876][ T8591] 0 pages in swap cache [ 172.842350][ T8591] Free swap = 124996kB [ 172.849244][ T8591] Total swap = 124996kB [ 172.866197][ T8591] 2097051 pages RAM [ 172.870073][ T8591] 0 pages HighMem/MovableOnly [ 172.884569][ T8591] 424694 pages reserved [ 172.895156][ T8591] 0 pages cma reserved [ 173.065643][ T8386] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 173.095422][ T8386] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 173.100442][ T8647] netlink: 80 bytes leftover after parsing attributes in process `syz.0.791'. [ 173.126702][ T8386] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 173.154240][ T8386] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 173.276784][ T8657] netlink: 176 bytes leftover after parsing attributes in process `syz.0.793'. [ 173.317150][ T8657] xt_policy: too many policy elements [ 173.473912][ T8386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.553388][ T8386] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.594184][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.601459][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.688904][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.696183][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.707537][ T5844] Bluetooth: hci0: command tx timeout [ 173.893930][ T8669] FAULT_INJECTION: forcing a failure. [ 173.893930][ T8669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.936432][ T8669] CPU: 1 UID: 0 PID: 8669 Comm: syz.1.799 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 173.936462][ T8669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 173.936473][ T8669] Call Trace: [ 173.936481][ T8669] [ 173.936489][ T8669] dump_stack_lvl+0x189/0x250 [ 173.936525][ T8669] ? __pfx____ratelimit+0x10/0x10 [ 173.936553][ T8669] ? __pfx_dump_stack_lvl+0x10/0x10 [ 173.936581][ T8669] ? __pfx__printk+0x10/0x10 [ 173.936602][ T8669] ? __might_fault+0xb0/0x130 [ 173.936633][ T8669] should_fail_ex+0x414/0x560 [ 173.936662][ T8669] _copy_from_user+0x2d/0xb0 [ 173.936681][ T8669] __sys_bpf+0x1ed/0x860 [ 173.936709][ T8669] ? __pfx___sys_bpf+0x10/0x10 [ 173.936748][ T8669] ? ksys_write+0x22a/0x250 [ 173.936768][ T8669] ? __pfx_ksys_write+0x10/0x10 [ 173.936782][ T8669] ? rcu_is_watching+0x15/0xb0 [ 173.936820][ T8669] __x64_sys_bpf+0x7c/0x90 [ 173.936844][ T8669] do_syscall_64+0xfa/0x3b0 [ 173.936861][ T8669] ? lockdep_hardirqs_on+0x9c/0x150 [ 173.936897][ T8669] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.936916][ T8669] ? clear_bhb_loop+0x60/0xb0 [ 173.936939][ T8669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.936956][ T8669] RIP: 0033:0x7f782798e929 [ 173.936975][ T8669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.936990][ T8669] RSP: 002b:00007f78288d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 173.937011][ T8669] RAX: ffffffffffffffda RBX: 00007f7827bb5fa0 RCX: 00007f782798e929 [ 173.937025][ T8669] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 173.937038][ T8669] RBP: 00007f78288d3090 R08: 0000000000000000 R09: 0000000000000000 [ 173.937049][ T8669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 173.937060][ T8669] R13: 0000000000000000 R14: 00007f7827bb5fa0 R15: 00007ffe2d125348 [ 173.937092][ T8669] [ 174.454472][ T8680] 1ªX¹¦D: entered promiscuous mode [ 174.472769][ T8680] 1ªX¹¦D: left allmulticast mode [ 174.527179][ T8680] 0ªX¹¦D: renamed from 31ªX¹¦D [ 174.542863][ T8680] A link change request failed with some changes committed already. Interface 30ªX¹¦D may have been left with an inconsistent configuration, please check. [ 174.729736][ T8685] vlan2: entered promiscuous mode [ 174.735080][ T8685] vlan2: entered allmulticast mode [ 174.742985][ T8685] hsr_slave_1: entered allmulticast mode [ 174.825634][ T8386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.033489][ T8688] syz.0.805 (8688) used greatest stack depth: 15128 bytes left [ 175.045068][ T8386] veth0_vlan: entered promiscuous mode [ 175.082639][ T8386] veth1_vlan: entered promiscuous mode [ 175.148890][ T8699] 1ªX¹¦D: renamed from 30ªX¹¦D [ 175.207816][ T8699] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 175.341704][ T8386] veth0_macvtap: entered promiscuous mode [ 175.349436][ T8707] netlink: 'syz.0.813': attribute type 4 has an invalid length. [ 175.384228][ T8386] veth1_macvtap: entered promiscuous mode [ 175.492334][ T8386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.542574][ T8717] __nla_validate_parse: 6 callbacks suppressed [ 175.542595][ T8717] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.816'. [ 175.583546][ T8717] netlink: zone id is out of range [ 175.603501][ T8720] batman_adv: batadv0: Adding interface: dummy0 [ 175.619025][ T8717] netlink: zone id is out of range [ 175.635724][ T8717] netlink: zone id is out of range [ 175.641033][ T8717] netlink: zone id is out of range [ 175.648021][ T8717] netlink: zone id is out of range [ 175.653282][ T8717] netlink: zone id is out of range [ 175.665379][ T8717] netlink: zone id is out of range [ 175.682969][ T8720] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.759607][ T8720] batman_adv: batadv0: Interface activated: dummy0 [ 175.899935][ T8727] FAULT_INJECTION: forcing a failure. [ 175.899935][ T8727] name failslab, interval 1, probability 0, space 0, times 0 [ 175.935527][ T8727] CPU: 1 UID: 0 PID: 8727 Comm: syz.1.818 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 175.935558][ T8727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 175.935569][ T8727] Call Trace: [ 175.935577][ T8727] [ 175.935586][ T8727] dump_stack_lvl+0x189/0x250 [ 175.935629][ T8727] ? __pfx____ratelimit+0x10/0x10 [ 175.935657][ T8727] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.935687][ T8727] ? __pfx__printk+0x10/0x10 [ 175.935713][ T8727] ? __pfx___might_resched+0x10/0x10 [ 175.935740][ T8727] ? fs_reclaim_acquire+0x7d/0x100 [ 175.935768][ T8727] should_fail_ex+0x414/0x560 [ 175.935799][ T8727] should_failslab+0xa8/0x100 [ 175.935822][ T8727] __kmalloc_noprof+0xcb/0x4f0 [ 175.935840][ T8727] ? bpf_test_init+0xc2/0x170 [ 175.935864][ T8727] bpf_test_init+0xc2/0x170 [ 175.935893][ T8727] bpf_prog_test_run_skb+0x1e9/0x1560 [ 175.935914][ T8727] ? __fget_files+0x2a/0x420 [ 175.935939][ T8727] ? __fget_files+0x2a/0x420 [ 175.935969][ T8727] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 175.935991][ T8727] bpf_prog_test_run+0x2c7/0x340 [ 175.936022][ T8727] __sys_bpf+0x4a4/0x860 [ 175.936050][ T8727] ? __pfx___sys_bpf+0x10/0x10 [ 175.936090][ T8727] ? ksys_write+0x22a/0x250 [ 175.936111][ T8727] ? __pfx_ksys_write+0x10/0x10 [ 175.936126][ T8727] ? rcu_is_watching+0x15/0xb0 [ 175.936164][ T8727] __x64_sys_bpf+0x7c/0x90 [ 175.936187][ T8727] do_syscall_64+0xfa/0x3b0 [ 175.936203][ T8727] ? lockdep_hardirqs_on+0x9c/0x150 [ 175.936229][ T8727] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.936248][ T8727] ? clear_bhb_loop+0x60/0xb0 [ 175.936273][ T8727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.936291][ T8727] RIP: 0033:0x7f782798e929 [ 175.936308][ T8727] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.936324][ T8727] RSP: 002b:00007f78288d3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 175.936345][ T8727] RAX: ffffffffffffffda RBX: 00007f7827bb5fa0 RCX: 00007f782798e929 [ 175.936360][ T8727] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 175.936372][ T8727] RBP: 00007f78288d3090 R08: 0000000000000000 R09: 0000000000000000 [ 175.936383][ T8727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.936395][ T8727] R13: 0000000000000000 R14: 00007f7827bb5fa0 R15: 00007ffe2d125348 [ 175.936427][ T8727] [ 176.263909][ T8386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.278261][ T8386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.287081][ T8386] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.295805][ T8386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.304650][ T8386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.480022][ T8737] vlan2: entered promiscuous mode [ 176.485386][ T8737] vlan2: entered allmulticast mode [ 176.527308][ T8737] hsr_slave_1: entered allmulticast mode [ 176.593261][ T8744] netlink: 9 bytes leftover after parsing attributes in process `syz.0.823'. [ 176.611537][ T8744] netlink: 5 bytes leftover after parsing attributes in process `syz.0.823'. [ 176.640553][ T8744] 0ªX¹¦D: renamed from 31ªX¹¦D [ 176.654675][ T8744] 0ªX¹¦D: left promiscuous mode [ 176.667407][ T8744] 0ªX¹¦D: entered allmulticast mode [ 176.713175][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.741979][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.823022][ T8748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.824'. [ 176.834768][ T8748] netlink: 'syz.2.824': attribute type 1 has an invalid length. [ 176.843060][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.824'. [ 176.852036][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 176.852089][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.884894][ T8748] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.824'. [ 177.021323][ T8758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.829'. [ 177.511214][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz.2.834'. [ 177.924342][ T8784] netlink: 12 bytes leftover after parsing attributes in process `syz.0.840'. [ 178.050226][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.358267][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.518344][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.662966][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.918427][ T36] bridge_slave_1: left allmulticast mode [ 178.924148][ T36] bridge_slave_1: left promiscuous mode [ 178.951458][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.993837][ T36] bridge_slave_0: left allmulticast mode [ 179.011205][ T36] bridge_slave_0: left promiscuous mode [ 179.028435][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.332730][ T8803] netlink: 4 bytes leftover after parsing attributes in process `syz.0.843'. [ 180.063879][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.080544][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.095612][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.109917][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.118780][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.533225][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.551170][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.567766][ T36] bond0 (unregistering): Released all slaves [ 180.612208][ T8820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.848'. [ 181.236013][ T8841] ieee802154 phy1 wpan1: encryption failed: -22 [ 181.510250][ T36] hsr_slave_0: left promiscuous mode [ 181.540624][ T36] hsr_slave_1: left promiscuous mode [ 181.557272][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.576337][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.608560][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.623830][ T8855] netlink: 92 bytes leftover after parsing attributes in process `syz.1.860'. [ 181.626103][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.656961][ T8855] netlink: 36 bytes leftover after parsing attributes in process `syz.1.860'. [ 181.698131][ T8858] netlink: 24 bytes leftover after parsing attributes in process `syz.2.861'. [ 181.734747][ T36] veth1_macvtap: left promiscuous mode [ 181.774232][ T36] veth0_macvtap: left promiscuous mode [ 181.798531][ T36] veth1_vlan: left promiscuous mode [ 181.804718][ T36] veth0_vlan: left promiscuous mode [ 181.978493][ T8861] can: request_module (can-proto-0) failed. [ 182.177169][ T5844] Bluetooth: hci0: command tx timeout [ 182.225820][ T8873] netlink: 'syz.0.865': attribute type 1 has an invalid length. [ 182.767619][ T8879] IPVS: persistence engine module ip_vs_pe_À not found [ 182.992864][ T36] team0 (unregistering): Port device team_slave_1 removed [ 183.064095][ T36] team0 (unregistering): Port device team_slave_0 removed [ 183.637809][ T8883] lo: left promiscuous mode [ 183.670557][ T8883] 0ªX¹¦D: left allmulticast mode [ 183.717020][ T8883] net_ratelimit: 34 callbacks suppressed [ 183.717044][ T8883] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.742294][ T8884] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 183.917882][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.2.873'. [ 184.084768][ T8808] chnl_net:caif_netlink_parms(): no params data found [ 184.113014][ T8902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.878'. [ 184.222652][ T8905] netlink: 12 bytes leftover after parsing attributes in process `syz.4.877'. [ 184.257168][ T5844] Bluetooth: hci0: command tx timeout [ 184.479105][ T8808] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.492004][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.492283][ T8921] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 184.500310][ T8808] bridge_slave_0: entered allmulticast mode [ 184.524203][ T8808] bridge_slave_0: entered promiscuous mode [ 184.527118][ T8921] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 184.551879][ T8808] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.562246][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.573327][ T8808] bridge_slave_1: entered allmulticast mode [ 184.582376][ T8808] bridge_slave_1: entered promiscuous mode [ 184.597825][ T8921] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 184.615862][ T8921] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 184.636339][ T8921] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 184.655075][ T8921] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 184.676552][ T8921] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 184.692012][ T8921] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 184.779950][ T8931] FAULT_INJECTION: forcing a failure. [ 184.779950][ T8931] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 184.793797][ T8931] CPU: 0 UID: 0 PID: 8931 Comm: syz.2.887 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 184.793824][ T8931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 184.793837][ T8931] Call Trace: [ 184.793845][ T8931] [ 184.793853][ T8931] dump_stack_lvl+0x189/0x250 [ 184.793888][ T8931] ? __pfx____ratelimit+0x10/0x10 [ 184.793917][ T8931] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.793947][ T8931] ? __pfx__printk+0x10/0x10 [ 184.793986][ T8931] should_fail_ex+0x414/0x560 [ 184.794016][ T8931] _copy_from_user+0x2d/0xb0 [ 184.794037][ T8931] bpf_test_init+0xf8/0x170 [ 184.794071][ T8931] bpf_prog_test_run_skb+0x1e9/0x1560 [ 184.794092][ T8931] ? __fget_files+0x2a/0x420 [ 184.794117][ T8931] ? __fget_files+0x2a/0x420 [ 184.794148][ T8931] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 184.794170][ T8931] bpf_prog_test_run+0x2c7/0x340 [ 184.794202][ T8931] __sys_bpf+0x4a4/0x860 [ 184.794230][ T8931] ? __pfx___sys_bpf+0x10/0x10 [ 184.794272][ T8931] ? ksys_write+0x22a/0x250 [ 184.794294][ T8931] ? __pfx_ksys_write+0x10/0x10 [ 184.794309][ T8931] ? rcu_is_watching+0x15/0xb0 [ 184.794347][ T8931] __x64_sys_bpf+0x7c/0x90 [ 184.794372][ T8931] do_syscall_64+0xfa/0x3b0 [ 184.794388][ T8931] ? lockdep_hardirqs_on+0x9c/0x150 [ 184.794416][ T8931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.794435][ T8931] ? clear_bhb_loop+0x60/0xb0 [ 184.794460][ T8931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.794487][ T8931] RIP: 0033:0x7f4ed118e929 [ 184.794506][ T8931] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.794523][ T8931] RSP: 002b:00007f4ed20b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 184.794545][ T8931] RAX: ffffffffffffffda RBX: 00007f4ed13b5fa0 RCX: 00007f4ed118e929 [ 184.794559][ T8931] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 184.794572][ T8931] RBP: 00007f4ed20b2090 R08: 0000000000000000 R09: 0000000000000000 [ 184.794584][ T8931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.794595][ T8931] R13: 0000000000000000 R14: 00007f4ed13b5fa0 R15: 00007ffe67a59d78 [ 184.794628][ T8931] [ 184.806317][ T8808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.071000][ T8808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.131885][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.889'. [ 185.172888][ T8808] team0: Port device team_slave_0 added [ 185.219140][ T8808] team0: Port device team_slave_1 added [ 185.303051][ T8942] netlink: 16 bytes leftover after parsing attributes in process `syz.1.892'. [ 185.317081][ T8943] netlink: 12 bytes leftover after parsing attributes in process `syz.2.893'. [ 185.337403][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.344426][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.372780][ T8808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.411116][ T8808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.435970][ T8808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.527232][ T8808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.715150][ T8954] netlink: 'syz.1.898': attribute type 14 has an invalid length. [ 185.739469][ T8958] netlink: 9 bytes leftover after parsing attributes in process `syz.2.899'. [ 185.758158][ T8808] hsr_slave_0: entered promiscuous mode [ 185.787413][ T8808] hsr_slave_1: entered promiscuous mode [ 185.813114][ T8962] netlink: 5 bytes leftover after parsing attributes in process `syz.2.899'. [ 185.831736][ T8958] 1ªX¹¦D: entered promiscuous mode [ 185.837088][ T8958] 1ªX¹¦D: left allmulticast mode [ 185.917142][ T8962] 0ªX¹¦D: renamed from 31ªX¹¦D [ 185.928395][ T8962] 0ªX¹¦D: left promiscuous mode [ 186.043902][ T8968] netlink: 16 bytes leftover after parsing attributes in process `syz.1.905'. [ 186.080032][ T8972] netlink: 12 bytes leftover after parsing attributes in process `syz.0.904'. [ 186.181964][ T8974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.907'. [ 186.337314][ T5844] Bluetooth: hci0: command tx timeout [ 186.352166][ T8985] netlink: 40 bytes leftover after parsing attributes in process `syz.0.911'. [ 186.370763][ T8984] netlink: 8 bytes leftover after parsing attributes in process `syz.2.912'. [ 186.380026][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.912'. [ 186.687657][ T8997] netlink: 16 bytes leftover after parsing attributes in process `syz.2.918'. [ 186.839018][ T8808] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.850974][ T8808] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.873261][ T8808] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.880076][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.920'. [ 186.901005][ T8808] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 187.179749][ T8808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.234775][ T8808] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.284794][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.292076][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.352219][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.359522][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.074667][ T8808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.232297][ T8808] veth0_vlan: entered promiscuous mode [ 188.279783][ T8808] veth1_vlan: entered promiscuous mode [ 188.354674][ T8808] veth0_macvtap: entered promiscuous mode [ 188.404098][ T8808] veth1_macvtap: entered promiscuous mode [ 188.417284][ T5844] Bluetooth: hci0: command tx timeout [ 188.458938][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.480533][ T8808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.509343][ T8808] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.520292][ T8808] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.529174][ T8808] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.541257][ T8808] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 188.661447][ T9075] netlink: 'syz.1.947': attribute type 1 has an invalid length. [ 188.750661][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.785858][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.916021][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.937392][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.464467][ T9108] netlink: 'syz.1.962': attribute type 1 has an invalid length. [ 190.068313][ T9136] FAULT_INJECTION: forcing a failure. [ 190.068313][ T9136] name failslab, interval 1, probability 0, space 0, times 0 [ 190.083478][ T9136] CPU: 1 UID: 0 PID: 9136 Comm: syz.4.977 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 190.083507][ T9136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 190.083519][ T9136] Call Trace: [ 190.083527][ T9136] [ 190.083535][ T9136] dump_stack_lvl+0x189/0x250 [ 190.083572][ T9136] ? __pfx____ratelimit+0x10/0x10 [ 190.083601][ T9136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 190.083631][ T9136] ? __pfx__printk+0x10/0x10 [ 190.083659][ T9136] ? __pfx___might_resched+0x10/0x10 [ 190.083695][ T9136] should_fail_ex+0x414/0x560 [ 190.083726][ T9136] should_failslab+0xa8/0x100 [ 190.083750][ T9136] __kmalloc_noprof+0xcb/0x4f0 [ 190.083768][ T9136] ? sk_prot_alloc+0xe7/0x220 [ 190.083797][ T9136] sk_prot_alloc+0xe7/0x220 [ 190.083817][ T9136] ? sk_alloc+0x24/0x370 [ 190.083842][ T9136] sk_alloc+0x3a/0x370 [ 190.083862][ T9136] ? bpf_ctx_init+0x167/0x1d0 [ 190.083888][ T9136] bpf_prog_test_run_skb+0x2ed/0x1560 [ 190.083907][ T9136] ? __fget_files+0x2a/0x420 [ 190.083947][ T9136] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 190.083970][ T9136] bpf_prog_test_run+0x2c7/0x340 [ 190.084003][ T9136] __sys_bpf+0x4a4/0x860 [ 190.084031][ T9136] ? __pfx___sys_bpf+0x10/0x10 [ 190.084079][ T9136] ? ksys_write+0x22a/0x250 [ 190.084101][ T9136] ? __pfx_ksys_write+0x10/0x10 [ 190.084116][ T9136] ? rcu_is_watching+0x15/0xb0 [ 190.084155][ T9136] __x64_sys_bpf+0x7c/0x90 [ 190.084180][ T9136] do_syscall_64+0xfa/0x3b0 [ 190.084197][ T9136] ? lockdep_hardirqs_on+0x9c/0x150 [ 190.084224][ T9136] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.084244][ T9136] ? clear_bhb_loop+0x60/0xb0 [ 190.084268][ T9136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.084287][ T9136] RIP: 0033:0x7f5d12b8e929 [ 190.084305][ T9136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.084323][ T9136] RSP: 002b:00007f5d13945038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 190.084345][ T9136] RAX: ffffffffffffffda RBX: 00007f5d12db5fa0 RCX: 00007f5d12b8e929 [ 190.084359][ T9136] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 190.084377][ T9136] RBP: 00007f5d13945090 R08: 0000000000000000 R09: 0000000000000000 [ 190.084389][ T9136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.084401][ T9136] R13: 0000000000000000 R14: 00007f5d12db5fa0 R15: 00007fffdba8d8b8 [ 190.084441][ T9136] [ 190.452508][ T1035] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.997769][ T1035] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.134611][ T9146] __nla_validate_parse: 11 callbacks suppressed [ 191.134634][ T9146] netlink: 12 bytes leftover after parsing attributes in process `syz.0.978'. [ 191.358291][ T1035] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.466667][ T9156] netlink: 'syz.4.986': attribute type 11 has an invalid length. [ 191.541241][ T1035] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.582588][ T9156] netlink: 'syz.4.986': attribute type 1 has an invalid length. [ 191.600270][ T9159] netlink: 16 bytes leftover after parsing attributes in process `syz.1.987'. [ 191.862005][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.877472][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.891451][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.904638][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.912929][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 191.972755][ T1035] bridge_slave_1: left allmulticast mode [ 191.987217][ T1035] bridge_slave_1: left promiscuous mode [ 191.993078][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.044675][ T1035] bridge_slave_0: left allmulticast mode [ 192.060789][ T1035] bridge_slave_0: left promiscuous mode [ 192.077209][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.173781][ T9185] netlink: 12 bytes leftover after parsing attributes in process `syz.4.995'. [ 192.493435][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.505756][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.516836][ T1035] bond0 (unregistering): Released all slaves [ 192.688324][ T9193] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1001'. [ 192.719635][ T9193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1001'. [ 192.733597][ T9197] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1002'. [ 192.781949][ T9195] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1000'. [ 192.833389][ T9199] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1000'. [ 192.915320][ T9195] 0ªX¹¦D: entered promiscuous mode [ 192.930642][ T9199] 1ªX¹¦D: renamed from 30ªX¹¦D [ 192.942808][ T9199] 1ªX¹¦D: entered allmulticast mode [ 192.949455][ T9199] net_ratelimit: 253 callbacks suppressed [ 192.949473][ T9199] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 193.276532][ T1035] hsr_slave_0: left promiscuous mode [ 193.284946][ T1035] hsr_slave_1: left promiscuous mode [ 193.293849][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.302112][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.314387][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.322088][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.341334][ T1035] veth1_macvtap: left promiscuous mode [ 193.347379][ T1035] veth0_macvtap: left promiscuous mode [ 193.353945][ T1035] veth1_vlan: left promiscuous mode [ 193.359705][ T1035] veth0_vlan: left promiscuous mode [ 193.844185][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 193.889026][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 194.021006][ T5844] Bluetooth: hci0: command tx timeout [ 194.299670][ T9227] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1012'. [ 194.341101][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.515643][ T9169] chnl_net:caif_netlink_parms(): no params data found [ 194.543359][ T9236] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1014'. [ 194.976709][ T9169] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.987509][ T9169] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.996627][ T9169] bridge_slave_0: entered allmulticast mode [ 195.013410][ T9169] bridge_slave_0: entered promiscuous mode [ 195.023382][ T9169] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.031172][ T9169] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.048479][ T9169] bridge_slave_1: entered allmulticast mode [ 195.064658][ T9169] bridge_slave_1: entered promiscuous mode [ 195.200822][ T9169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.225705][ T9169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.380342][ T9169] team0: Port device team_slave_0 added [ 195.445460][ T9169] team0: Port device team_slave_1 added [ 195.608762][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.631945][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.681812][ T9169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.722762][ T9169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.731968][ T9169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.769180][ T9169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.985820][ T9169] hsr_slave_0: entered promiscuous mode [ 196.004411][ T9169] hsr_slave_1: entered promiscuous mode [ 196.101335][ T5844] Bluetooth: hci0: command tx timeout [ 196.705213][ T9325] __nla_validate_parse: 4 callbacks suppressed [ 196.705234][ T9325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1048'. [ 198.176217][ T5844] Bluetooth: hci0: command tx timeout [ 199.630369][ T9337] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1055'. [ 199.659918][ T9342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1056'. [ 200.014792][ T9358] netlink: 'syz.4.1064': attribute type 1 has an invalid length. [ 200.032637][ T9169] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.081890][ T9169] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.111534][ T9169] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.139175][ T9169] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.206515][ T9370] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1069'. [ 200.256080][ T5844] Bluetooth: hci0: command tx timeout [ 200.399480][ T9169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.413804][ T9380] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1071'. [ 200.473061][ T9169] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.477737][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1073'. [ 200.529480][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.536751][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.622574][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.629870][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.096543][ T9413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1085'. [ 201.132587][ T9414] FAULT_INJECTION: forcing a failure. [ 201.132587][ T9414] name failslab, interval 1, probability 0, space 0, times 0 [ 201.177012][ T9414] CPU: 1 UID: 0 PID: 9414 Comm: syz.2.1084 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 201.177042][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 201.177055][ T9414] Call Trace: [ 201.177063][ T9414] [ 201.177071][ T9414] dump_stack_lvl+0x189/0x250 [ 201.177106][ T9414] ? __pfx____ratelimit+0x10/0x10 [ 201.177135][ T9414] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.177165][ T9414] ? __pfx__printk+0x10/0x10 [ 201.177195][ T9414] ? __pfx___might_resched+0x10/0x10 [ 201.177223][ T9414] ? fs_reclaim_acquire+0x7d/0x100 [ 201.177252][ T9414] should_fail_ex+0x414/0x560 [ 201.177283][ T9414] should_failslab+0xa8/0x100 [ 201.177306][ T9414] __kmalloc_noprof+0xcb/0x4f0 [ 201.177324][ T9414] ? security_sk_alloc+0x52/0x390 [ 201.177360][ T9414] security_sk_alloc+0x52/0x390 [ 201.177392][ T9414] sk_prot_alloc+0x101/0x220 [ 201.177413][ T9414] ? sk_alloc+0x24/0x370 [ 201.177438][ T9414] sk_alloc+0x3a/0x370 [ 201.177458][ T9414] ? bpf_ctx_init+0x167/0x1d0 [ 201.177483][ T9414] bpf_prog_test_run_skb+0x2ed/0x1560 [ 201.177513][ T9414] ? __fget_files+0x2a/0x420 [ 201.177554][ T9414] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 201.177577][ T9414] bpf_prog_test_run+0x2c7/0x340 [ 201.177610][ T9414] __sys_bpf+0x4a4/0x860 [ 201.177639][ T9414] ? __pfx___sys_bpf+0x10/0x10 [ 201.177681][ T9414] ? ksys_write+0x22a/0x250 [ 201.177703][ T9414] ? __pfx_ksys_write+0x10/0x10 [ 201.177719][ T9414] ? rcu_is_watching+0x15/0xb0 [ 201.177758][ T9414] __x64_sys_bpf+0x7c/0x90 [ 201.177784][ T9414] do_syscall_64+0xfa/0x3b0 [ 201.177801][ T9414] ? lockdep_hardirqs_on+0x9c/0x150 [ 201.177829][ T9414] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.177847][ T9414] ? clear_bhb_loop+0x60/0xb0 [ 201.177871][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.177888][ T9414] RIP: 0033:0x7f4ed118e929 [ 201.177905][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.177923][ T9414] RSP: 002b:00007f4ed20b2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 201.177944][ T9414] RAX: ffffffffffffffda RBX: 00007f4ed13b5fa0 RCX: 00007f4ed118e929 [ 201.177959][ T9414] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 201.177971][ T9414] RBP: 00007f4ed20b2090 R08: 0000000000000000 R09: 0000000000000000 [ 201.177983][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 201.177995][ T9414] R13: 0000000000000000 R14: 00007f4ed13b5fa0 R15: 00007ffe67a59d78 [ 201.178028][ T9414] [ 201.260828][ T9169] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.494836][ T9419] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614) [ 201.517893][ T9419] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 201.567700][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1089'. [ 201.707701][ T9169] veth0_vlan: entered promiscuous mode [ 201.750962][ T9169] veth1_vlan: entered promiscuous mode [ 201.944807][ T9169] veth0_macvtap: entered promiscuous mode [ 201.954584][ T9446] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1099'. [ 201.988201][ T9169] veth1_macvtap: entered promiscuous mode [ 202.042550][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.099290][ T9169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.151455][ T9169] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.174301][ T9169] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.204756][ T9169] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.224087][ T9169] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.411073][ T9461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1106'. [ 202.426211][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.434188][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.448787][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1107'. [ 202.485851][ T9467] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1109'. [ 202.535812][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.548882][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.664452][ T9471] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1111'. [ 202.719600][ T9471] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1111'. [ 202.748331][ T9473] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1112'. [ 202.776276][ T9471] 0ªX¹¦D: left promiscuous mode [ 202.783951][ T9471] 0ªX¹¦D: entered allmulticast mode [ 203.277920][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1123'. [ 203.427158][ T9508] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1127'. [ 203.602077][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.677520][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1129'. [ 203.847732][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.057704][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 205.078139][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.091393][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.100287][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.108621][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 205.591654][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.802862][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.990982][ T9552] FAULT_INJECTION: forcing a failure. [ 205.990982][ T9552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.090424][ T9552] CPU: 0 UID: 0 PID: 9552 Comm: syz.2.1144 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 206.090455][ T9552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 206.090467][ T9552] Call Trace: [ 206.090475][ T9552] [ 206.090483][ T9552] dump_stack_lvl+0x189/0x250 [ 206.090527][ T9552] ? __pfx____ratelimit+0x10/0x10 [ 206.090557][ T9552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.090586][ T9552] ? __pfx__printk+0x10/0x10 [ 206.090609][ T9552] ? __might_fault+0xb0/0x130 [ 206.090644][ T9552] should_fail_ex+0x414/0x560 [ 206.090675][ T9552] _copy_from_user+0x2d/0xb0 [ 206.090696][ T9552] get_timespec64+0x8e/0x1a0 [ 206.090724][ T9552] ? __pfx_get_timespec64+0x10/0x10 [ 206.090763][ T9552] __x64_sys_recvmmsg+0x143/0x240 [ 206.090794][ T9552] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 206.090816][ T9552] ? rcu_is_watching+0x15/0xb0 [ 206.090852][ T9552] ? do_syscall_64+0xbe/0x3b0 [ 206.090874][ T9552] do_syscall_64+0xfa/0x3b0 [ 206.090890][ T9552] ? lockdep_hardirqs_on+0x9c/0x150 [ 206.090918][ T9552] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.090938][ T9552] ? clear_bhb_loop+0x60/0xb0 [ 206.090963][ T9552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.090982][ T9552] RIP: 0033:0x7f4ed118e929 [ 206.091000][ T9552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 206.091018][ T9552] RSP: 002b:00007f4ed20b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 206.091040][ T9552] RAX: ffffffffffffffda RBX: 00007f4ed13b5fa0 RCX: 00007f4ed118e929 [ 206.091055][ T9552] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 206.091068][ T9552] RBP: 00007f4ed20b2090 R08: 0000200000003700 R09: 0000000000000000 [ 206.091082][ T9552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 206.091094][ T9552] R13: 0000000000000000 R14: 00007f4ed13b5fa0 R15: 00007ffe67a59d78 [ 206.091129][ T9552] [ 206.541561][ T9537] chnl_net:caif_netlink_parms(): no params data found [ 207.138729][ T5844] Bluetooth: hci0: command tx timeout [ 207.161906][ T9537] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.170876][ T9537] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.179440][ T9537] bridge_slave_0: entered allmulticast mode [ 207.189053][ T9537] bridge_slave_0: entered promiscuous mode [ 207.201912][ T49] bridge_slave_1: left allmulticast mode [ 207.273737][ T9609] netlink: 'syz.1.1164': attribute type 1 has an invalid length. [ 207.333741][ T49] bridge_slave_1: left promiscuous mode [ 207.342991][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.385634][ T49] bridge_slave_0: left allmulticast mode [ 207.404543][ T49] bridge_slave_0: left promiscuous mode [ 207.412068][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.814884][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.828167][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.839625][ T49] bond0 (unregistering): Released all slaves [ 207.854786][ T9537] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.863347][ T9537] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.870918][ T9537] bridge_slave_1: entered allmulticast mode [ 207.880407][ T9537] bridge_slave_1: entered promiscuous mode [ 207.985662][ T9537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.043196][ T9622] __nla_validate_parse: 5 callbacks suppressed [ 208.043217][ T9622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1167'. [ 208.175295][ T9537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.250248][ T9628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1171'. [ 208.439714][ T9537] team0: Port device team_slave_0 added [ 208.471946][ T9639] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1173'. [ 208.511728][ T9537] team0: Port device team_slave_1 added [ 208.614544][ T49] hsr_slave_0: left promiscuous mode [ 208.636922][ T49] hsr_slave_1: left promiscuous mode [ 208.649145][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.662631][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.670897][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.687328][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.702495][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.718269][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.734121][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.749976][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.770443][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.791098][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.805767][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.810384][ T9654] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1182'. [ 208.828788][ T9646] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 00:00:00:00:00:00 [ 208.878957][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.891679][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.940864][ T49] veth1_macvtap: left promiscuous mode [ 208.959238][ T49] veth0_macvtap: left promiscuous mode [ 208.964999][ T49] veth1_vlan: left promiscuous mode [ 208.973237][ T49] veth0_vlan: left promiscuous mode [ 209.216339][ T5844] Bluetooth: hci0: command tx timeout [ 209.656230][ T49] team0 (unregistering): Port device team_slave_1 removed [ 209.713201][ T49] team0 (unregistering): Port device team_slave_0 removed [ 210.306229][ T9672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1189'. [ 210.493330][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.513522][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.557665][ T9537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.572924][ T9537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.603034][ T9537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.638203][ T9681] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1193'. [ 210.679858][ T9537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.965076][ T9537] hsr_slave_0: entered promiscuous mode [ 210.974287][ T9537] hsr_slave_1: entered promiscuous mode [ 211.291585][ T9707] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1203'. [ 211.306575][ T5847] Bluetooth: hci0: command tx timeout [ 211.438308][ T9713] FAULT_INJECTION: forcing a failure. [ 211.438308][ T9713] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 211.477997][ T9713] CPU: 1 UID: 0 PID: 9713 Comm: syz.2.1208 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 211.478028][ T9713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 211.478040][ T9713] Call Trace: [ 211.478048][ T9713] [ 211.478056][ T9713] dump_stack_lvl+0x189/0x250 [ 211.478092][ T9713] ? __pfx____ratelimit+0x10/0x10 [ 211.478121][ T9713] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.478150][ T9713] ? __pfx__printk+0x10/0x10 [ 211.478172][ T9713] ? __might_fault+0xb0/0x130 [ 211.478204][ T9713] should_fail_ex+0x414/0x560 [ 211.478235][ T9713] _copy_from_user+0x2d/0xb0 [ 211.478256][ T9713] ___sys_sendmsg+0x158/0x2a0 [ 211.478285][ T9713] ? __pfx____sys_sendmsg+0x10/0x10 [ 211.478353][ T9713] ? __fget_files+0x2a/0x420 [ 211.478374][ T9713] ? __fget_files+0x3a0/0x420 [ 211.478417][ T9713] __x64_sys_sendmsg+0x19b/0x260 [ 211.478444][ T9713] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 211.478481][ T9713] ? __pfx_ksys_write+0x10/0x10 [ 211.478497][ T9713] ? rcu_is_watching+0x15/0xb0 [ 211.478532][ T9713] ? do_syscall_64+0xbe/0x3b0 [ 211.478555][ T9713] do_syscall_64+0xfa/0x3b0 [ 211.478570][ T9713] ? lockdep_hardirqs_on+0x9c/0x150 [ 211.478598][ T9713] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.478617][ T9713] ? clear_bhb_loop+0x60/0xb0 [ 211.478642][ T9713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.478660][ T9713] RIP: 0033:0x7f4ed118e929 [ 211.478679][ T9713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 211.478696][ T9713] RSP: 002b:00007f4ed20b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 211.478718][ T9713] RAX: ffffffffffffffda RBX: 00007f4ed13b5fa0 RCX: 00007f4ed118e929 [ 211.478732][ T9713] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 211.478745][ T9713] RBP: 00007f4ed20b2090 R08: 0000000000000000 R09: 0000000000000000 [ 211.478758][ T9713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 211.478769][ T9713] R13: 0000000000000000 R14: 00007f4ed13b5fa0 R15: 00007ffe67a59d78 [ 211.478802][ T9713] [ 211.479775][ T9715] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1207'. [ 211.784809][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 211.793634][ T5851] Bluetooth: hci3: command 0x0406 tx timeout [ 211.794408][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 211.799931][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 211.951015][ T9728] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1214'. [ 212.154586][ T9738] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1218'. [ 212.401527][ T9751] 1ªX¹¦D: entered promiscuous mode [ 212.427372][ T9751] 1ªX¹¦D: left allmulticast mode [ 212.469712][ T9751] 0ªX¹¦D: renamed from 31ªX¹¦D [ 212.551651][ T9537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 212.612421][ T9537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 212.660983][ T9537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 212.709464][ T9537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 213.073765][ T9537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.125700][ T9783] __nla_validate_parse: 5 callbacks suppressed [ 213.125721][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1234'. [ 213.139830][ T9537] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.188142][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.195371][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.272085][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.279362][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.285454][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1238'. [ 213.376748][ T5849] Bluetooth: hci0: command tx timeout [ 214.149363][ T9537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.254593][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'. [ 214.330836][ T9537] veth0_vlan: entered promiscuous mode [ 214.345118][ T9821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1250'. [ 214.375677][ T9537] veth1_vlan: entered promiscuous mode [ 214.394387][ T9823] FAULT_INJECTION: forcing a failure. [ 214.394387][ T9823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 214.445317][ T9823] CPU: 0 UID: 0 PID: 9823 Comm: syz.2.1251 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 214.445347][ T9823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 214.445359][ T9823] Call Trace: [ 214.445375][ T9823] [ 214.445384][ T9823] dump_stack_lvl+0x189/0x250 [ 214.445420][ T9823] ? __pfx____ratelimit+0x10/0x10 [ 214.445449][ T9823] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.445479][ T9823] ? __pfx__printk+0x10/0x10 [ 214.445502][ T9823] ? __might_fault+0xb0/0x130 [ 214.445536][ T9823] should_fail_ex+0x414/0x560 [ 214.445567][ T9823] _copy_from_user+0x2d/0xb0 [ 214.445587][ T9823] ___sys_recvmsg+0x12e/0x510 [ 214.445619][ T9823] ? __pfx____sys_recvmsg+0x10/0x10 [ 214.445675][ T9823] ? __fget_files+0x3a0/0x420 [ 214.445710][ T9823] do_recvmmsg+0x307/0x770 [ 214.445745][ T9823] ? __pfx_do_recvmmsg+0x10/0x10 [ 214.445786][ T9823] ? _copy_from_user+0x94/0xb0 [ 214.445825][ T9823] __x64_sys_recvmmsg+0x1af/0x240 [ 214.445860][ T9823] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 214.445882][ T9823] ? rcu_is_watching+0x15/0xb0 [ 214.445916][ T9823] ? do_syscall_64+0xbe/0x3b0 [ 214.445938][ T9823] do_syscall_64+0xfa/0x3b0 [ 214.445954][ T9823] ? lockdep_hardirqs_on+0x9c/0x150 [ 214.445981][ T9823] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.446000][ T9823] ? clear_bhb_loop+0x60/0xb0 [ 214.446025][ T9823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.446044][ T9823] RIP: 0033:0x7f4ed118e929 [ 214.446063][ T9823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.446081][ T9823] RSP: 002b:00007f4ed20b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 214.446103][ T9823] RAX: ffffffffffffffda RBX: 00007f4ed13b5fa0 RCX: 00007f4ed118e929 [ 214.446118][ T9823] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 214.446131][ T9823] RBP: 00007f4ed20b2090 R08: 0000200000003700 R09: 0000000000000000 [ 214.446144][ T9823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.446156][ T9823] R13: 0000000000000000 R14: 00007f4ed13b5fa0 R15: 00007ffe67a59d78 [ 214.446190][ T9823] [ 214.673349][ T9537] veth0_macvtap: entered promiscuous mode [ 214.684939][ T9537] veth1_macvtap: entered promiscuous mode [ 214.715243][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.728220][ T9537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.778728][ T9537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.787631][ T9537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.796594][ T9537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.805321][ T9537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.821508][ C0] net_ratelimit: 251 callbacks suppressed [ 214.821530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.840181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.852636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.866179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.878815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.891485][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.903983][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.916605][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.929178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 214.941695][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 215.378082][ T9839] netlink: 'syz.1.1256': attribute type 1 has an invalid length. [ 215.856835][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.881252][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.083262][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.104893][ T9852] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1262'. [ 216.142924][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.587817][ T9864] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1264'. [ 217.032791][ T9871] FAULT_INJECTION: forcing a failure. [ 217.032791][ T9871] name failslab, interval 1, probability 0, space 0, times 0 [ 217.045543][ T9871] CPU: 1 UID: 0 PID: 9871 Comm: syz.0.1267 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 217.045571][ T9871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 217.045583][ T9871] Call Trace: [ 217.045591][ T9871] [ 217.045600][ T9871] dump_stack_lvl+0x189/0x250 [ 217.045635][ T9871] ? __pfx____ratelimit+0x10/0x10 [ 217.045665][ T9871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.045695][ T9871] ? __pfx__printk+0x10/0x10 [ 217.045733][ T9871] should_fail_ex+0x414/0x560 [ 217.045766][ T9871] should_failslab+0xa8/0x100 [ 217.045790][ T9871] kmem_cache_alloc_noprof+0x73/0x3c0 [ 217.045820][ T9871] ? skb_clone+0x212/0x3a0 [ 217.045851][ T9871] skb_clone+0x212/0x3a0 [ 217.045885][ T9871] bpf_clone_redirect+0xad/0x3d0 [ 217.045919][ T9871] ? __lock_acquire+0xab9/0xd20 [ 217.045950][ T9871] bpf_prog_e97454e6a39c6b06+0x62/0x6b [ 217.045978][ T9871] ? ktime_get+0x3e/0x1f0 [ 217.046008][ T9871] ? seqcount_lockdep_reader_access+0x123/0x1c0 [ 217.046030][ T9871] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.046067][ T9871] ? ktime_get+0x3e/0x1f0 [ 217.046085][ T9871] ? seqcount_lockdep_reader_access+0x175/0x1c0 [ 217.046106][ T9871] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 217.046134][ T9871] ? __local_bh_disable_ip+0xf1/0x190 [ 217.046164][ T9871] ? __pfx___cant_migrate+0x10/0x10 [ 217.046199][ T9871] ? read_tsc+0x9/0x20 [ 217.046221][ T9871] ? ktime_get+0x1cb/0x1f0 [ 217.046248][ T9871] bpf_test_run+0x38b/0x830 [ 217.046283][ T9871] ? bpf_test_run+0x205/0x830 [ 217.046312][ T9871] ? __pfx_bpf_test_run+0x10/0x10 [ 217.046362][ T9871] ? slab_build_skb+0x273/0x3e0 [ 217.046383][ T9871] ? convert___skb_to_skb+0x3d/0x590 [ 217.046408][ T9871] bpf_prog_test_run_skb+0xb30/0x1560 [ 217.046447][ T9871] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 217.046470][ T9871] bpf_prog_test_run+0x2c7/0x340 [ 217.046503][ T9871] __sys_bpf+0x4a4/0x860 [ 217.046531][ T9871] ? __pfx___sys_bpf+0x10/0x10 [ 217.046573][ T9871] ? ksys_write+0x22a/0x250 [ 217.046594][ T9871] ? __pfx_ksys_write+0x10/0x10 [ 217.046610][ T9871] ? rcu_is_watching+0x15/0xb0 [ 217.046648][ T9871] __x64_sys_bpf+0x7c/0x90 [ 217.046673][ T9871] do_syscall_64+0xfa/0x3b0 [ 217.046689][ T9871] ? lockdep_hardirqs_on+0x9c/0x150 [ 217.046716][ T9871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.046735][ T9871] ? clear_bhb_loop+0x60/0xb0 [ 217.046759][ T9871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.046779][ T9871] RIP: 0033:0x7f089eb8e929 [ 217.046797][ T9871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.046815][ T9871] RSP: 002b:00007f089f9e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 217.046838][ T9871] RAX: ffffffffffffffda RBX: 00007f089edb5fa0 RCX: 00007f089eb8e929 [ 217.046853][ T9871] RDX: 0000000000000050 RSI: 0000200000000080 RDI: 000000000000000a [ 217.046866][ T9871] RBP: 00007f089f9e1090 R08: 0000000000000000 R09: 0000000000000000 [ 217.046878][ T9871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.046890][ T9871] R13: 0000000000000000 R14: 00007f089edb5fa0 R15: 00007ffc104a97d8 [ 217.046923][ T9871] [ 217.715540][ T9873] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge0 [ 218.216156][ T9892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1275'. [ 218.612919][ T9899] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1278'. [ 218.685298][ T9903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1279'. [ 219.085888][ C0] sched: DL replenish lagged too much [ 219.181801][ T9913] FAULT_INJECTION: forcing a failure. [ 219.181801][ T9913] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 219.258693][ T9913] CPU: 1 UID: 0 PID: 9913 Comm: syz.2.1284 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 219.258726][ T9913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 219.258738][ T9913] Call Trace: [ 219.258746][ T9913] [ 219.258755][ T9913] dump_stack_lvl+0x189/0x250 [ 219.258791][ T9913] ? __pfx____ratelimit+0x10/0x10 [ 219.258821][ T9913] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.258850][ T9913] ? __pfx__printk+0x10/0x10 [ 219.258873][ T9913] ? __might_fault+0xb0/0x130 [ 219.258906][ T9913] should_fail_ex+0x414/0x560 [ 219.258936][ T9913] _copy_from_user+0x2d/0xb0 [ 219.258957][ T9913] ___sys_sendmsg+0x158/0x2a0 [ 219.258986][ T9913] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.259054][ T9913] ? __fget_files+0x2a/0x420 [ 219.259074][ T9913] ? __fget_files+0x3a0/0x420 [ 219.259109][ T9913] __x64_sys_sendmsg+0x19b/0x260 [ 219.259136][ T9913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.259172][ T9913] ? __pfx_ksys_write+0x10/0x10 [ 219.259188][ T9913] ? rcu_is_watching+0x15/0xb0 [ 219.259223][ T9913] ? do_syscall_64+0xbe/0x3b0 [ 219.259247][ T9913] do_syscall_64+0xfa/0x3b0 [ 219.259262][ T9913] ? lockdep_hardirqs_on+0x9c/0x150 [ 219.259289][ T9913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.259317][ T9913] ? clear_bhb_loop+0x60/0xb0 [ 219.259342][ T9913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.259361][ T9913] RIP: 0033:0x7f4ed118e929 [ 219.259379][ T9913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.259402][ T9913] RSP: 002b:00007f4ed20b2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.259425][ T9913] RAX: ffffffffffffffda RBX: 00007f4ed13b5fa0 RCX: 00007f4ed118e929 [ 219.259439][ T9913] RDX: 0000000000045080 RSI: 0000200000000500 RDI: 0000000000000004 [ 219.259452][ T9913] RBP: 00007f4ed20b2090 R08: 0000000000000000 R09: 0000000000000000 [ 219.259464][ T9913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.259475][ T9913] R13: 0000000000000000 R14: 00007f4ed13b5fa0 R15: 00007ffe67a59d78 [ 219.259509][ T9913] [ 219.826124][ C0] net_ratelimit: 11180 callbacks suppressed [ 219.826146][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.833029][ T9923] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1291'. [ 219.844592][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.845923][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.879367][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.891720][ T9925] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1289'. [ 219.891887][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.913239][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.925770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.938243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.950743][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 219.963789][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 220.229999][ T9930] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1292'. [ 220.711203][ T9941] FAULT_INJECTION: forcing a failure. [ 220.711203][ T9941] name failslab, interval 1, probability 0, space 0, times 0 [ 220.801761][ T9941] CPU: 1 UID: 0 PID: 9941 Comm: syz.0.1297 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 220.801792][ T9941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 220.801805][ T9941] Call Trace: [ 220.801813][ T9941] [ 220.801822][ T9941] dump_stack_lvl+0x189/0x250 [ 220.801857][ T9941] ? __pfx____ratelimit+0x10/0x10 [ 220.801887][ T9941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.801917][ T9941] ? __pfx__printk+0x10/0x10 [ 220.801947][ T9941] ? __pfx___might_resched+0x10/0x10 [ 220.801982][ T9941] should_fail_ex+0x414/0x560 [ 220.802013][ T9941] should_failslab+0xa8/0x100 [ 220.802036][ T9941] kmem_cache_alloc_node_noprof+0x76/0x3c0 [ 220.802057][ T9941] ? __alloc_skb+0x112/0x2d0 [ 220.802084][ T9941] __alloc_skb+0x112/0x2d0 [ 220.802110][ T9941] netlink_sendmsg+0x5c6/0xb30 [ 220.802145][ T9941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.802173][ T9941] ? aa_sock_msg_perm+0x94/0x160 [ 220.802199][ T9941] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 220.802224][ T9941] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.802257][ T9941] __sock_sendmsg+0x21c/0x270 [ 220.802290][ T9941] ____sys_sendmsg+0x505/0x830 [ 220.802322][ T9941] ? __pfx_____sys_sendmsg+0x10/0x10 [ 220.802357][ T9941] ? import_iovec+0x74/0xa0 [ 220.802382][ T9941] ___sys_sendmsg+0x21f/0x2a0 [ 220.802409][ T9941] ? __pfx____sys_sendmsg+0x10/0x10 [ 220.802477][ T9941] ? __fget_files+0x2a/0x420 [ 220.802497][ T9941] ? __fget_files+0x3a0/0x420 [ 220.802531][ T9941] __x64_sys_sendmsg+0x19b/0x260 [ 220.802559][ T9941] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 220.802596][ T9941] ? __pfx_ksys_write+0x10/0x10 [ 220.802611][ T9941] ? rcu_is_watching+0x15/0xb0 [ 220.802647][ T9941] ? do_syscall_64+0xbe/0x3b0 [ 220.802670][ T9941] do_syscall_64+0xfa/0x3b0 [ 220.802685][ T9941] ? lockdep_hardirqs_on+0x9c/0x150 [ 220.802713][ T9941] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.802732][ T9941] ? clear_bhb_loop+0x60/0xb0 [ 220.802757][ T9941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.802776][ T9941] RIP: 0033:0x7f089eb8e929 [ 220.802794][ T9941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.802812][ T9941] RSP: 002b:00007f089f9e1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 220.802835][ T9941] RAX: ffffffffffffffda RBX: 00007f089edb5fa0 RCX: 00007f089eb8e929 [ 220.802849][ T9941] RDX: 0000000000008000 RSI: 0000200000000100 RDI: 0000000000000005 [ 220.802862][ T9941] RBP: 00007f089f9e1090 R08: 0000000000000000 R09: 0000000000000000 [ 220.802875][ T9941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.802887][ T9941] R13: 0000000000000000 R14: 00007f089edb5fa0 R15: 00007ffc104a97d8 [ 220.802921][ T9941] [ 222.083364][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1299'. [ 222.139038][ T9960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1299'. [ 222.279206][ T9962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1305'. [ 222.438998][ T9965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1306'. [ 222.849728][ T9976] 0ªX¹¦D: entered promiscuous mode [ 222.854936][ T9976] 0ªX¹¦D: left allmulticast mode [ 222.938354][ T9976] 1ªX¹¦D: renamed from 30ªX¹¦D [ 223.701219][ T9993] FAULT_INJECTION: forcing a failure. [ 223.701219][ T9993] name failslab, interval 1, probability 0, space 0, times 0 [ 223.786176][ T9993] CPU: 1 UID: 0 PID: 9993 Comm: syz.1.1319 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 223.786210][ T9993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 223.786222][ T9993] Call Trace: [ 223.786231][ T9993] [ 223.786240][ T9993] dump_stack_lvl+0x189/0x250 [ 223.786276][ T9993] ? __pfx____ratelimit+0x10/0x10 [ 223.786304][ T9993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.786335][ T9993] ? __pfx__printk+0x10/0x10 [ 223.786360][ T9993] ? __pfx___might_resched+0x10/0x10 [ 223.786390][ T9993] ? fs_reclaim_acquire+0x7d/0x100 [ 223.786420][ T9993] should_fail_ex+0x414/0x560 [ 223.786451][ T9993] should_failslab+0xa8/0x100 [ 223.786475][ T9993] __kmalloc_noprof+0xcb/0x4f0 [ 223.786493][ T9993] ? iovec_from_user+0x87/0x250 [ 223.786517][ T9993] iovec_from_user+0x87/0x250 [ 223.786542][ T9993] __import_iovec+0x163/0x7f0 [ 223.786574][ T9993] import_iovec+0x74/0xa0 [ 223.786599][ T9993] ___sys_recvmsg+0x43a/0x510 [ 223.786632][ T9993] ? __pfx____sys_recvmsg+0x10/0x10 [ 223.786688][ T9993] ? __fget_files+0x3a0/0x420 [ 223.786723][ T9993] do_recvmmsg+0x307/0x770 [ 223.786759][ T9993] ? __pfx_do_recvmmsg+0x10/0x10 [ 223.786800][ T9993] ? _copy_from_user+0x94/0xb0 [ 223.786839][ T9993] __x64_sys_recvmmsg+0x1af/0x240 [ 223.786869][ T9993] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 223.786891][ T9993] ? rcu_is_watching+0x15/0xb0 [ 223.786927][ T9993] ? do_syscall_64+0xbe/0x3b0 [ 223.786949][ T9993] do_syscall_64+0xfa/0x3b0 [ 223.786965][ T9993] ? lockdep_hardirqs_on+0x9c/0x150 [ 223.787000][ T9993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.787019][ T9993] ? clear_bhb_loop+0x60/0xb0 [ 223.787044][ T9993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.787063][ T9993] RIP: 0033:0x7f782798e929 [ 223.787081][ T9993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 223.787099][ T9993] RSP: 002b:00007f78288d3038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 223.787122][ T9993] RAX: ffffffffffffffda RBX: 00007f7827bb5fa0 RCX: 00007f782798e929 [ 223.787136][ T9993] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 223.787150][ T9993] RBP: 00007f78288d3090 R08: 0000200000003700 R09: 0000000000000000 [ 223.787163][ T9993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.787175][ T9993] R13: 0000000000000000 R14: 00007f7827bb5fa0 R15: 00007ffe2d125348 [ 223.787214][ T9993] [ 224.045245][ T9996] __nla_validate_parse: 2 callbacks suppressed [ 224.045268][ T9996] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1321'. [ 224.096944][ T9997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1320'. [ 224.836061][ C0] net_ratelimit: 11222 callbacks suppressed [ 224.836085][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.854535][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.867098][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.879713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.892231][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.904728][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.917210][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.929792][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.942347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 224.954868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 224.982863][T10021] xt_hashlimit: size too large, truncated to 1048576 [ 225.033135][T10027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1331'. [ 225.043444][T10023] macsec2: entered allmulticast mode [ 225.252789][T10023] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 229.845888][ C1] net_ratelimit: 22214 callbacks suppressed [ 229.845913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.846320][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 229.852198][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.864359][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 229.876231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.888401][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.900242][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.912243][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.924138][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 229.936368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.855916][ C0] net_ratelimit: 23013 callbacks suppressed [ 234.855942][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.856160][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.862254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 234.874229][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.886228][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 234.898141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.910022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 234.922108][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 234.934049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 234.945957][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.790609][T10021] warn_alloc: 1 callbacks suppressed [ 239.790633][T10021] syz.0.1331: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null) [ 239.866036][ C0] net_ratelimit: 23231 callbacks suppressed [ 239.866061][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 239.866204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.880837][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.886760][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.898659][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 239.911333][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.922536][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 239.934456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 239.946394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 239.958403][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.875987][ C1] net_ratelimit: 23383 callbacks suppressed [ 244.876011][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.876177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 244.882301][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.894179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 244.906329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.918310][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.930121][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.942072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 244.953937][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 244.965833][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 249.886084][ C0] net_ratelimit: 23003 callbacks suppressed [ 249.886108][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 249.886233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.892430][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.904483][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.916320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 249.928318][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.940275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.952119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 249.964324][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 249.976126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.260923][T10021] ,cpuset=/,mems_allowed=0-1 [ 254.895973][ C0] net_ratelimit: 22619 callbacks suppressed [ 254.895998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.896144][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.902304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 254.914310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.926226][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.938197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.950065][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 254.962220][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 254.974215][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 254.986074][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 255.963624][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.905988][ C0] net_ratelimit: 23104 callbacks suppressed [ 259.906011][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 259.906158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.912308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.924303][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.936173][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 259.948337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.960183][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.972091][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 259.984877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 259.995914][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.916200][ C1] net_ratelimit: 22954 callbacks suppressed [ 264.916223][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.916599][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.922529][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.934478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 264.946353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.958272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 264.970203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 264.982109][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 264.994113][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 265.005984][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.925921][ C0] net_ratelimit: 23457 callbacks suppressed [ 269.925946][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.925967][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.932324][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 269.944400][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.956272][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.968141][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 269.980075][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 269.991954][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 270.003858][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 270.015880][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.935933][ C1] net_ratelimit: 23420 callbacks suppressed [ 274.935940][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 274.935956][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.936314][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.942222][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 274.954250][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.966171][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 274.978048][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 274.990036][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 275.001997][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 275.013921][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 279.945965][ C0] net_ratelimit: 23702 callbacks suppressed [ 279.945991][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 279.946197][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.952267][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.964351][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 279.976147][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 279.988224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.000082][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.012007][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.023915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 280.035804][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 280.894628][T10023] mac80211_hwsim hwsim4 wlan0: left allmulticast mode [ 284.956201][ C0] net_ratelimit: 23123 callbacks suppressed [ 284.956224][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 284.956235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.956649][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.962600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.974645][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 284.986460][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.998477][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.010454][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.022357][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 285.034261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.966045][ C1] net_ratelimit: 22888 callbacks suppressed [ 289.966069][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.966212][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 289.972460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 289.984298][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 289.996370][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.008145][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 290.020241][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.032070][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 290.044018][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 290.055979][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.976006][ C1] net_ratelimit: 23090 callbacks suppressed [ 294.976040][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.976214][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.982353][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 294.994276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 295.006232][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.018128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.030122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.042005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 295.053996][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 295.065937][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.986255][ C1] net_ratelimit: 22662 callbacks suppressed [ 299.986278][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 299.986306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 299.992583][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.004512][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.016506][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.028364][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 300.040418][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.052308][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 300.064204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 300.076188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.996080][ C0] net_ratelimit: 23035 callbacks suppressed [ 304.996106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 304.996166][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.002348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 305.014405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.026334][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.038202][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.050187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 305.062022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 305.074000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 305.085993][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 309.287804][T10021] CPU: 0 UID: 0 PID: 10021 Comm: syz.0.1331 Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 309.287839][T10021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 309.287852][T10021] Call Trace: [ 309.287860][T10021] [ 309.287872][T10021] dump_stack_lvl+0x189/0x250 [ 309.287917][T10021] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.287952][T10021] ? __pfx__printk+0x10/0x10 [ 309.287978][T10021] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 309.288003][T10021] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 309.288031][T10021] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 309.288060][T10021] warn_alloc+0x214/0x310 [ 309.288104][T10021] ? __pfx_warn_alloc+0x10/0x10 [ 309.288143][T10021] ? __get_vm_area_node+0x28f/0x300 [ 309.288166][T10021] ? htable_create+0xfc/0x7a0 [ 309.288202][T10021] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 309.288266][T10021] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 309.288300][T10021] ? rcu_is_watching+0x15/0xb0 [ 309.288334][T10021] ? htable_create+0xfc/0x7a0 [ 309.288361][T10021] ? htable_create+0xfc/0x7a0 [ 309.288387][T10021] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 309.288411][T10021] ? htable_create+0xfc/0x7a0 [ 309.288437][T10021] ? hashlimit_pernet+0x23/0x240 [ 309.288476][T10021] htable_create+0xfc/0x7a0 [ 309.288515][T10021] hashlimit_mt_check_common+0x719/0xa10 [ 309.288557][T10021] xt_check_match+0x3d1/0xab0 [ 309.288585][T10021] ? __pfx___mutex_lock+0x10/0x10 [ 309.288624][T10021] ? __pfx_xt_check_match+0x10/0x10 [ 309.288655][T10021] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 309.288690][T10021] ? xt_find_match+0x1f7/0x250 [ 309.288727][T10021] translate_table+0x1553/0x2040 [ 309.288785][T10021] ? __pfx_translate_table+0x10/0x10 [ 309.288815][T10021] ? __might_fault+0xb0/0x130 [ 309.288861][T10021] ? _copy_from_user+0x94/0xb0 [ 309.288891][T10021] do_ip6t_set_ctl+0x970/0xce0 [ 309.288927][T10021] ? rcu_is_watching+0x15/0xb0 [ 309.288958][T10021] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 309.289011][T10021] ? __pfx___mutex_lock+0x10/0x10 [ 309.289043][T10021] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.289093][T10021] ? __pfx_futex_wait+0x10/0x10 [ 309.289133][T10021] nf_setsockopt+0x26f/0x290 [ 309.289174][T10021] rawv6_setsockopt+0x23b/0x5b0 [ 309.289203][T10021] ? __lock_acquire+0xab9/0xd20 [ 309.289236][T10021] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 309.289267][T10021] ? aa_sock_opt_perm+0x74/0x110 [ 309.289294][T10021] ? sock_common_setsockopt+0x36/0xc0 [ 309.289316][T10021] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 309.289351][T10021] do_sock_setsockopt+0x257/0x3e0 [ 309.289381][T10021] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 309.289413][T10021] ? __fget_files+0x2a/0x420 [ 309.289448][T10021] __x64_sys_setsockopt+0x18b/0x220 [ 309.289483][T10021] do_syscall_64+0xfa/0x3b0 [ 309.289502][T10021] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.289532][T10021] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.289553][T10021] ? clear_bhb_loop+0x60/0xb0 [ 309.289580][T10021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.289602][T10021] RIP: 0033:0x7f089eb8e929 [ 309.289623][T10021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.289642][T10021] RSP: 002b:00007f089f9e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 309.289667][T10021] RAX: ffffffffffffffda RBX: 00007f089edb5fa0 RCX: 00007f089eb8e929 [ 309.289684][T10021] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 309.289697][T10021] RBP: 00007f089ec10b39 R08: 00000000000005c0 R09: 0000000000000000 [ 309.289711][T10021] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 309.289725][T10021] R13: 0000000000000000 R14: 00007f089edb5fa0 R15: 00007ffc104a97d8 [ 309.289762][T10021] [ 310.006081][ C0] net_ratelimit: 22161 callbacks suppressed [ 310.006106][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.006122][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.006472][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.012373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 310.024531][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.036479][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.048460][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.060699][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 310.072420][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 310.084382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 315.016016][ C0] net_ratelimit: 22008 callbacks suppressed [ 315.016024][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.016038][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 315.022354][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.034257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.046266][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.058086][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 315.070128][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.082016][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 315.093924][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 315.105913][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.025977][ C0] net_ratelimit: 21062 callbacks suppressed [ 320.025979][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.025999][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.026630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.032306][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.044247][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 320.056126][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.067992][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 320.079939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 320.091897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 320.103802][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 321.711614][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.036001][ C1] net_ratelimit: 23009 callbacks suppressed [ 325.036025][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.036064][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 325.042337][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.054361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 325.066331][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.078308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.090233][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.102771][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 325.114135][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 325.126098][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.045884][ C1] net_ratelimit: 22908 callbacks suppressed [ 330.045909][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.046005][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 330.052228][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.064162][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.076026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.087994][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 330.099826][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.111741][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 330.123673][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 330.135624][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.055878][ C1] net_ratelimit: 23028 callbacks suppressed [ 335.055904][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.055968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 335.062209][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.074172][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.086234][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.098119][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 335.110071][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.122027][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 335.133921][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 335.146024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 338.835266][T10021] Mem-Info: [ 338.855073][T10021] active_anon:3575 inactive_anon:0 isolated_anon:0 [ 338.855073][T10021] active_file:1621 inactive_file:39904 isolated_file:0 [ 338.855073][T10021] unevictable:768 dirty:0 writeback:1 [ 338.855073][T10021] slab_reclaimable:10119 slab_unreclaimable:217644 [ 338.855073][T10021] mapped:29194 shmem:1363 pagetables:896 [ 338.855073][T10021] sec_pagetables:0 bounce:0 [ 338.855073][T10021] kernel_misc_reclaimable:0 [ 338.855073][T10021] free:1189078 free_pcp:35955 free_cma:0 [ 340.065865][ C0] net_ratelimit: 22646 callbacks suppressed [ 340.065890][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.065961][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.072362][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 340.084494][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.096383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.108356][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.120259][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 340.132224][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 340.144772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 340.156077][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.075964][ C1] net_ratelimit: 22889 callbacks suppressed [ 345.075987][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.076092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.082313][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.094319][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 345.106235][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.118177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.130269][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.142158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 345.154096][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 345.166097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.085973][ C0] net_ratelimit: 22793 callbacks suppressed [ 350.085998][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.086045][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.092277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.104342][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.116862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.128365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.140228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 350.152236][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 350.164153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 350.176075][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.096103][ C0] net_ratelimit: 22668 callbacks suppressed [ 355.096125][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.096548][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.102466][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.114590][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.126427][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.138310][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.150371][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 355.162177][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 355.174113][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 355.186288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.105977][ C1] net_ratelimit: 22857 callbacks suppressed [ 360.106003][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.106406][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 360.112426][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.124317][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.136336][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.148280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 360.160119][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.172121][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 360.184150][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 360.196126][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.115986][ C0] net_ratelimit: 23024 callbacks suppressed [ 365.116020][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 365.116600][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.122312][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.134358][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.146179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.158350][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.170329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.182217][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 365.194076][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 365.206062][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 368.275807][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 368.282828][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P10024/1:b..l [ 368.291226][ C1] rcu: (detected by 1, t=10503 jiffies, g=33525, q=703 ncpus=2) [ 368.298994][ C1] task:syz.0.1331 state:R running task stack:28072 pid:10024 tgid:10018 ppid:5831 task_flags:0x400140 flags:0x00004006 [ 368.313408][ C1] Call Trace: [ 368.316724][ C1] [ 368.319692][ C1] __schedule+0x16f5/0x4d00 [ 368.324241][ C1] ? rcu_read_lock_sched_held+0x89/0x100 [ 368.329956][ C1] ? preempt_schedule_irq+0xb5/0x150 [ 368.335291][ C1] ? __pfx___schedule+0x10/0x10 [ 368.340204][ C1] ? preempt_schedule_irq+0xaa/0x150 [ 368.345536][ C1] preempt_schedule_irq+0xb5/0x150 [ 368.350684][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 368.356451][ C1] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 368.362297][ C1] irqentry_exit+0x6f/0x90 [ 368.366753][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 368.372764][ C1] RIP: 0010:unwind_next_frame+0x9e/0x2390 [ 368.378528][ C1] Code: b6 04 2c 84 c0 0f 85 de 1b 00 00 41 8b 06 85 c0 0f 84 32 02 00 00 89 84 24 84 00 00 00 4c 89 bc 24 90 00 00 00 e8 c2 3d 35 00 <4c> 8d 3d 00 00 00 00 48 c7 c7 60 ee 13 8e 31 f6 31 d2 b9 02 00 00 [ 368.398179][ C1] RSP: 0018:ffffc90003cf7518 EFLAGS: 00000283 [ 368.404291][ C1] RAX: 0000000000000001 RBX: ffffffff8223a092 RCX: dffffc0000000000 [ 368.412300][ C1] RDX: dffffc0000000000 RSI: ffffffff8223a092 RDI: ffffc90003cf75e8 [ 368.420305][ C1] RBP: dffffc0000000000 R08: ffffc90003cf76b0 R09: 0000000000000006 [ 368.428308][ C1] R10: ffffc90003cf7638 R11: ffffffff81ace6a0 R12: 1ffff9200079eebd [ 368.436318][ C1] R13: ffffc90003cf7620 R14: ffffc90003cf75e8 R15: ffffc90003cf7aa0 [ 368.444325][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 368.449121][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.455313][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 368.460108][ C1] ? unwind_next_frame+0x9e/0x2390 [ 368.465271][ C1] ? unwind_next_frame+0xa5/0x2390 [ 368.470421][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 368.476103][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 368.482289][ C1] arch_stack_walk+0x11c/0x150 [ 368.487093][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 368.491891][ C1] stack_trace_save+0x9c/0xe0 [ 368.496602][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 368.502018][ C1] save_stack+0xf5/0x1f0 [ 368.506296][ C1] ? __pfx_save_stack+0x10/0x10 [ 368.511178][ C1] ? __free_frozen_pages+0xc71/0xe70 [ 368.516489][ C1] ? __put_partials+0x161/0x1c0 [ 368.521369][ C1] ? put_cpu_partial+0x17c/0x250 [ 368.526335][ C1] ? __slab_free+0x2f7/0x400 [ 368.530958][ C1] ? qlist_free_all+0x97/0x140 [ 368.535758][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 368.541420][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 368.546227][ C1] ? page_ext_put+0x97/0xc0 [ 368.550779][ C1] __reset_page_owner+0x71/0x1f0 [ 368.555748][ C1] __free_frozen_pages+0xc71/0xe70 [ 368.560902][ C1] __put_partials+0x161/0x1c0 [ 368.565623][ C1] put_cpu_partial+0x17c/0x250 [ 368.570418][ C1] ? put_cpu_partial+0x6d/0x250 [ 368.575312][ C1] __slab_free+0x2f7/0x400 [ 368.579766][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 368.585695][ C1] ? __phys_addr+0xd3/0x180 [ 368.590239][ C1] qlist_free_all+0x97/0x140 [ 368.594883][ C1] kasan_quarantine_reduce+0x148/0x160 [ 368.600388][ C1] __kasan_kmalloc+0x22/0xb0 [ 368.605015][ C1] __kmalloc_cache_noprof+0x230/0x3d0 [ 368.610422][ C1] ? __request_module+0x2b5/0x5e0 [ 368.615487][ C1] __request_module+0x2b5/0x5e0 [ 368.620371][ C1] ? __pfx_aa_get_newest_label+0x10/0x10 [ 368.626042][ C1] ? __pfx___request_module+0x10/0x10 [ 368.631443][ C1] ? rcu_is_watching+0x15/0xb0 [ 368.636254][ C1] ? apparmor_capable+0x137/0x1b0 [ 368.641328][ C1] ? dev_load+0x21/0x1f0 [ 368.645606][ C1] dev_ioctl+0x680/0x1150 [ 368.649970][ C1] sock_do_ioctl+0x22c/0x300 [ 368.654603][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 368.659745][ C1] ? __lock_acquire+0xab9/0xd20 [ 368.664652][ C1] sock_ioctl+0x576/0x790 [ 368.669019][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 368.673909][ C1] ? __fget_files+0x2a/0x420 [ 368.678532][ C1] ? __fget_files+0x3a0/0x420 [ 368.683236][ C1] ? __fget_files+0x2a/0x420 [ 368.687871][ C1] ? bpf_lsm_file_ioctl+0x9/0x20 [ 368.692849][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 368.697737][ C1] __se_sys_ioctl+0xf9/0x170 [ 368.702371][ C1] do_syscall_64+0xfa/0x3b0 [ 368.706900][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.712135][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.718228][ C1] ? clear_bhb_loop+0x60/0xb0 [ 368.722951][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.728878][ C1] RIP: 0033:0x7f089eb8e929 [ 368.733320][ C1] RSP: 002b:00007f089f9c0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 368.741769][ C1] RAX: ffffffffffffffda RBX: 00007f089edb6080 RCX: 00007f089eb8e929 [ 368.749770][ C1] RDX: 0000200000000180 RSI: 0000000000008933 RDI: 0000000000000004 [ 368.757769][ C1] RBP: 00007f089ec10b39 R08: 0000000000000000 R09: 0000000000000000 [ 368.765768][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.773761][ C1] R13: 0000000000000001 R14: 00007f089edb6080 R15: 00007ffc104a97d8 [ 368.781781][ C1] [ 370.125855][ C0] net_ratelimit: 22304 callbacks suppressed [ 370.125880][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.125922][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.132153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.144158][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.156245][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.168123][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.180088][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 370.191856][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 370.203883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 370.215964][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.135888][ C1] net_ratelimit: 23017 callbacks suppressed [ 375.135913][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.136100][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 375.142365][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.154271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.166395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.178499][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:00:20:10:00:00:00, vlan:0) [ 375.190292][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.202276][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 375.214213][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 375.226106][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)