last executing test programs: 1m56.434859086s ago: executing program 3 (id=3182): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09020000000000000800010000000500040002000000060001004e200000"], 0x24}}, 0x0) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r4, 0x8, 0x70bd26, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x8040) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = socket(0x2d, 0x2, 0x0) ioctl$SIOCX25SSUBSCRIP(r6, 0x89e1, &(0x7f0000000000)={'pim6reg1\x00', 0x6, 0x10000}) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000002d00010000000000835bd3f033e40000000008000000", @ANYRES32=0x0, @ANYBLOB="040000800c0001800800000000000000"], 0x28}], 0x1}, 0x0) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f0000000240), &(0x7f0000000340)=0x30) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYRES32=r3, @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r8], 0x54}}, 0x800) socket$unix(0x1, 0x0, 0x0) 1m55.850247762s ago: executing program 3 (id=3188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8c0}, 0x48000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x6c, 0x2, 0x6, 0x1, 0x6000006, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xa00}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, 0x0, 0x6010) close(0xffffffffffffffff) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@ccm_128={{0x304}, "abb3ad4e5cfa0180", "d7f0d39ecb2d90957649325a1881e15f", "714e3ddc", "355860b7bcbbc742"}, 0x28) sendto$inet6(r2, &(0x7f0000000740)="7bdf9a", 0x3, 0x8000, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_SET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, r5, 0xf65de9ab34066b9d, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0) sendto$inet6(r2, &(0x7f00000000c0)="a03ff864b8bf25b87c6cba753c1c8fbdcd", 0x11, 0x8000, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000340)="e100", 0x2, 0x8040, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet(0x2, 0x6, 0x8d) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x2, 0x4) 1m53.557056162s ago: executing program 3 (id=3200): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000440)={@val={0x70}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x452c, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffdd86}}}}}}}, 0xfdef) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'xfrm0\x00', 0x100}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000100)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000200)={{0x6, @loopback, 0x15, 0x0, 'rr\x00'}, {@loopback, 0x15, 0x0, 0x1}}, 0x44) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000300)={0x6, @loopback, 0x15, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000400)={{0x6, @loopback, 0x15, 0x0, 'none\x00'}, {@loopback, 0x15}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000500)={{0x6, @loopback, 0x15, 0x0, 'none\x00'}, {@loopback, 0x15}}, 0x44) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000600)={0x6, @loopback, 0x15, 0x0, 'none\x00'}, 0x2c) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0100001000010000000000feffffffe000000200000000000000000000000000000000000000000000ffff0a01010200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000003300000000000000000000000000ffff7f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00000084000000000000001c00170000000000ffffffff00000000000000000000000000000000480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050021000200"/276], 0x15c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r5, {0x2, 0xfff0}, {}, {0x3}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x452, 0xf5, 0x4, 0x1}]}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x34000844}, 0x20084090) 1m52.527363692s ago: executing program 3 (id=3205): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32=r2, @ANYBLOB="3d000e00800000000802110000000802110000000802110000000000000002000000000064000100030168060208003c0401000a047206030303030303000000080026006c09000008000c006400000008090d000000000004002a00"], 0x78}}, 0x39db77225c63fa4c) 1m50.97230869s ago: executing program 3 (id=3212): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x1, 0x1000, 0x1, 0x7ff, 0xf84, 0x3}, 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaffed50ffff000900450000280000000000069078ac141400ac1efc0100000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5010000090780800"], 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x58, 0x42, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="000000002600010000112233445566778899aabb0800450000140000000001170000010203040506070800000c00020006000600080000000c00030008000c00040007"]}, 0x58}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@multicast, @random="c59a1b746cda", @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "0300", 0x0, 0x1d, 0xff, @remote, @local}}}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'veth1_vlan\x00', 0x23}) select(0x40, &(0x7f0000000000)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) 1m50.049193787s ago: executing program 3 (id=3217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000300010000000900030073797a320000000014000480080002400000000008000140000000050900010073797a310000000024010000050a01020000000000000000010000000c00024000000000000000010900010073797a3100000000040004800a0007"], 0x1ac}, 0x1, 0x0, 0x0, 0x4801}, 0x0) 1m22.094063331s ago: executing program 4 (id=3331): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newsa={0x12, 0x10, 0x8, 0xfffffffe, 0x100, {{@in=@broadcast, @in6=@remote, 0x1, 0x715, 0x4e22, 0x5, 0x0, 0x0, 0x100, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in=@rand_addr=0x64010101, {0x9871, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1c, 0xfffffffffffffffe}, {0x2, 0x400}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8888}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) socket$tipc(0x1e, 0x8, 0x0) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000780)=@newsa={0x12, 0x10, 0x8, 0xfffffffe, 0x100, {{@in=@broadcast, @in6=@remote, 0x1, 0x715, 0x4e22, 0x5, 0x0, 0x0, 0x100, 0x3a}, {@in6=@mcast1, 0x4d4, 0x6c}, @in=@rand_addr=0x64010101, {0x9871, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1c, 0xfffffffffffffffe}, {0x2, 0x400}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8888}, 0x0) (async) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) socket$tipc(0x1e, 0x8, 0x0) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)={0x14, 0x14, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000120001000000000000000000ff020000000004000000000000000000000004d50200040014000d"], 0x3c}}, 0x0) (async) 1m21.914606038s ago: executing program 1 (id=3333): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) r2 = socket$kcm(0xa, 0x2, 0x73) sendmsg$inet(r2, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @empty}, 0xffac, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x8, &(0x7f0000001280)=[@ip_tos_int={{0x6b, 0x29, 0x2}}, @ip_retopts={{0x100007f00000000, 0x8, 0x7, {[@end, @generic={0x0, 0x0, "34366567f22197875664"}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @loopback}}}], 0x6b}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000fedbdf251c00000008000300", @ANYRES32=r3, @ANYBLOB="0c00a0bb9e48000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000051}, 0x4000000) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="270000002700010324bd702afedbdfa5e1079ad9"], 0x14}, 0x1, 0x0, 0x0, 0x4044908}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x32, @empty, 0x4e22, 0x4, 'fo\x00', 0x20, 0x1ff, 0x7d}, 0x2c) 1m21.681055827s ago: executing program 2 (id=3334): sendmmsg(0xffffffffffffffff, &(0x7f0000001280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000240)="65cfeb0e03a97e7ae97d1413e586e23b8d38f547ab5a1eab12", 0x19}], 0x1}}], 0x1, 0x40008) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xa, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x98}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008006301"], 0x44}}, 0x0) 1m21.366720288s ago: executing program 1 (id=3335): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000400)={'veth1_to_team\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r5, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0xec, r6, 0x0, 0x70bd29, 0x7, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY={0x8c, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "fc5f1c749f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "bb15a74c558558ca6eb7e999fe"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "552631f4da2e4eafc4d3feeadb"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8f7f839ed831a4eaef2b9fc39c"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_SEQ={0xb, 0x4, "dd3e61ed9159ba"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d0ccc24a55b308eea1add7dbf8"}, @NL80211_KEY_TYPE={0x8}]}, @NL80211_ATTR_KEY_DEFAULT={0x4}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f3807d11eb4b88191aa21b28d5"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_SEQ={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0xec}, 0x1, 0x0, 0x0, 0x40150}, 0xc000) (async) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="02000000000020000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030005000000"], 0x3c}, 0x1, 0x2}, 0x0) 1m21.366357862s ago: executing program 4 (id=3336): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000180), 0x0}, 0x5d) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x19}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) 1m21.27143444s ago: executing program 2 (id=3337): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) socketpair(0x1, 0x0, 0x5, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) (async) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dummy0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c000000240005040200"/20, @ANYRES32=r5, @ANYBLOB="00000100ffffffff000000000c00010063616b655f6d71000c0002"], 0x3c}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000540)=@ccm_128={{0x303}, "2d74a2efa1df858e", "b74f034c00", "e44b1fb5", "1759311fc8fa92da"}, 0x28) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) (async) sendfile(r6, r7, 0x0, 0xffffffff004) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000800)=@generic={&(0x7f00000007c0)='./file0\x00', 0x0, 0x18}, 0x18) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff}) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r10}, &(0x7f0000000700), &(0x7f0000000740)=r9}, 0x20) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x6}, 0xc) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r12, &(0x7f0000000200), 0x806000) (async) ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x40000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x5}, 0x50) (async) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x0, 0xca, 0x3, 0x0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0xf, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1802001811cf05067fc63f6cadd5831874653aaf12b3c948f746fccce3ccf14e9159a90bc654cb8430dce26e98a423cbd2540d2e9cd0dc2ada8f7f5b22e56b50a9fd8c41f5e231869e", @ANYRES32=r14, @ANYBLOB="00000000000000002702000014000000b703000000000000850000009f000000bf0900000000000055090100000000009500000000000000bf91000000000000b702000000000000850000006c000000b7000000000000009500000000000000"], &(0x7f0000000200)='GPL\x00'}, 0x90) (async) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000900)={r2, 0x2, 0x1, 0x56d581e5}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000b00)={{r0, &(0x7f0000000940)='syz1\x00', 0x410282, &(0x7f0000000980)={@_ha_fsid={[0xffff, 0x7f]}, {0x200, 0x4117, 0xf, 0x9}}, 0x3, &(0x7f00000009c0), &(0x7f0000000a00)=0xffff23f0}, {[0x8, 0x8, 0x40000000, 0x9]}, 0x3, 0x84, &(0x7f0000000a40)=""/132}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x1a, &(0x7f0000000640)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2630, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}, @generic={0xd2, 0x5, 0x0, 0x7fff}, @call={0x85, 0x0, 0x0, 0x5e}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='syzkaller\x00', 0x1a, 0x0, 0x0, 0x41100, 0x12, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000780)={0x6, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000b80)=[0xffffffffffffffff, r8, r10, 0xffffffffffffffff, r11, r12, r13, r14, r15, r16], &(0x7f0000000bc0)=[{0x0, 0x1, 0x3, 0x7}, {0x2, 0x5, 0x9, 0x9}, {0x2, 0x4, 0x3, 0xa}, {0x1, 0x5, 0x0, 0x4}], 0x10, 0x2}, 0x94) (async) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)={0x308, r3, 0x300, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xa}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xade5}]}, @TIPC_NLA_MEDIA={0x5c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3682}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xfffff801}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}]}, @TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NODE={0x17c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0xd0, 0x3, "cb98f32b84be958c3aef9d128985eaa96110742ba3cab2771c6d3c8bddd20d0af3bc1fb773f889272b7eef7a2639efa7dbf1f3e015600024fe4b6b83f2b5dfc8895a6dfd1eb2069fb675232c0c993b70b437644981c05e7cc27342ea78aba048bddc1f251cec323c8354565ccc40fc4990636d8bc2a46ca63ebcc70e7eea18d2dee05d814f4423f095797f66797b25108bbbdc08fd5137bcb37c9846ced1ea503374d420a0b4b2e0ef6678b5799dc4d99d7d1c1b02a8ef66be2dea5a5e4dd1620a8ae0728b7d71acef1043e4"}, @TIPC_NLA_NODE_ID={0x1c, 0x3, "5998939ca2dd81824170476c8098797d83811ef92af4d19f"}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "b0411730298a91b1d61b11b471dfd889fa136dcd"}}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "00a619419e46590c2bb5e469e122732842a1bebc9d201c361f7fb084d5d102f54f"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x40}, 0xc5) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000004e40)={0x0, 0x0, &(0x7f0000004e00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x4) 1m20.947912186s ago: executing program 1 (id=3339): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f0000000180)}, 0x20) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000040)={0x2004}) epoll_pwait(r4, &(0x7f0000000400)=[{}], 0x1, 0x80, 0x0, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000001440)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001a40080002003f00020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597f0600000000000000307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xb, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="09000000ffffffff0700000040"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$alg(r7, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x80}, 0x4004080) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r7) writev(r7, &(0x7f00000026c0)=[{&(0x7f00000003c0)="efce26262f9664e339bcfe37d927424bbfc67f97fa792b31ce79d882", 0x1c}, {&(0x7f0000001240)="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", 0xf64}], 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)=@delnexthop={0x28, 0x69, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{0x8, 0x1, 0x2}, {0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x48400) 1m20.760634555s ago: executing program 4 (id=3340): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x6, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfd, 0x1, 0x3, 0x0, 0xffffffff}}, @TCA_GRED_STAB={0x104, 0x2, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00'}]}}]}, 0x170}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r0, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_emit_ethernet(0x5e, &(0x7f0000003680)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @mcast2, @mcast2={0xe}}}}}}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r6, 0x0) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f00000a2000)={0x1, &(0x7f0000000200)=[{0x94}]}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000063119d000000000007000000200000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="71ba181a4210fa1e6dc5b34b2b65ab1a3b5235b7709d3aa16601c3d6b8b56632d895f26b3f4488d74e03e9e514f8461f62", @ANYRES16=r5, @ANYBLOB="00082bbd7000fbdbdf254400000008000300", @ANYRES32=r8, @ANYBLOB="0c00238006001000ff010000"], 0x28}, 0x1, 0x0, 0x0, 0x20000884}, 0x8040) 1m20.576405532s ago: executing program 0 (id=3341): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x21, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADD(r1, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000080)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd70000000400a0100000007000100272a000014000500fc01000000000000000000000000000108000c000200000006000b000a0000000800020005000000080004000000000014000600"], 0x78}, 0x1, 0x2000000}, 0x50) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x7a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0x82, &(0x7f0000000680)={0x2, 0x0, 0x4, 0x3}, &(0x7f0000000280)=0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000000), 0x0, 0x4000, 0x0, 0x0) 1m20.38094344s ago: executing program 4 (id=3342): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4e21, 0xfffb, @loopback, 0xfffffffe}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x8848, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xb39}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) 1m20.097844438s ago: executing program 2 (id=3343): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 1m20.084691573s ago: executing program 0 (id=3344): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="503771ab228fe0948338d357df625653", 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000540)=ANY=[@ANYBLOB="18120000", @ANYRES32=r1, @ANYBLOB="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"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept$inet(r0, 0x0, 0x0) 1m19.931047675s ago: executing program 4 (id=3345): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x8810) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x34, r5, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40810}, 0x8810) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000092870000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r8, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) r9 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) socket(0x10, 0x3, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) ioctl$FS_IOC_GETFSLABEL(r9, 0x81009431, &(0x7f0000000480)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'gretap0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r12, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@getchain={0x44, 0x66, 0x8, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x7, 0xfff3}, {0xc, 0x3}, {0xb, 0x8}}, [{0x8, 0xb, 0x40000}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0x81}]}, 0x44}, 0x1, 0x0, 0x0, 0x40010}, 0x4000010) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000880)=@delqdisc={0x154, 0x25, 0x100, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r12, {0xffff, 0x6}, {0xc, 0x3}, {0xfff3, 0xffff}}, [@TCA_STAB={0xac, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x6, 0x238, 0x0, 0x0, 0x535, 0x5, 0x4}}, {0xc, 0x2, [0x0, 0xf1, 0x3, 0x200]}}, {{0x1c, 0x1, {0x8, 0x9, 0x7, 0x6, 0x1, 0x8, 0x0, 0x3}}, {0xa, 0x2, [0x81, 0x1ff, 0x7]}}, {{0x1c, 0x1, {0x9, 0x6, 0x9, 0x71, 0x2, 0x1, 0x1, 0x1}}, {0x6, 0x2, [0x6]}}, {{0x1c, 0x1, {0xa, 0x0, 0x2, 0xb6, 0x0, 0x0, 0x7fff, 0x9}}, {0x16, 0x2, [0x57b, 0xfffe, 0x200, 0x54b2, 0xa, 0x2, 0x7, 0x3, 0x2]}}]}, @TCA_STAB={0x73, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x7a, 0x6, 0x101, 0x2, 0x4, 0xde4, 0x2}}, {0x8, 0x2, [0x5, 0x8]}}, {{0x1c, 0x1, {0x80, 0x8, 0xfff8, 0x1, 0x0, 0xa, 0x2, 0x8}}, {0x14, 0x2, [0xffff, 0xa25, 0xff78, 0x7, 0xffff, 0xb3f4, 0x3, 0x1]}}, {{0x1c, 0x1, {0xb3, 0x8, 0x81, 0x1, 0x2, 0x2, 0x8, 0x5}}, {0xe, 0x2, [0x400, 0x9, 0x8001, 0xa31, 0x7f]}}]}]}, 0x154}}, 0x4) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000060030d00003000640000ac01"], 0x34) (async) write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="000060030d00003000640000ac01"], 0x34) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000000406030000000000000000dd050010070a595d7484797a32000000000900020073797a3000000000000000000900020033797afe3c0a4a29bbbcc322cc8fe92ae8fa6eaba21edf"], 0x4c}, 0x1, 0x0, 0x0, 0x480c3}, 0x24044040) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) recvfrom$inet6(r10, &(0x7f0000000340)=""/192, 0xc0, 0x40002100, &(0x7f0000000400)={0xa, 0x4e21, 0xb, @loopback, 0x4f}, 0x1c) sendmsg$nl_generic(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000003240)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x8450) 1m19.71544441s ago: executing program 0 (id=3346): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000030000000f00000008000300", @ANYRES32=r2, @ANYBLOB="3d000e00800000000802110000000802110000000802110000000003000000000000000064000100030168060208003c0401000a047206030303030303000000080026006c09000008000c006400000008090d000000000004002a00"], 0x78}}, 0x39db77225c63fa4c) 1m19.33624356s ago: executing program 1 (id=3347): r0 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x10c04}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_VALIDATE={0x8, 0x9, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r4, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='H\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r5, @ANYBLOB="140012800b030a00627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0x240440d1}, 0x40000) 1m19.202988371s ago: executing program 2 (id=3348): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x0, 0xffffffff, 0xffffffff, 0x190, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff0000ff], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x800, 0x93, 0x6, '\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0xffffff00], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x8, 0x2, 0x8, 'pptp\x00', 'syz1\x00', {0x5a}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x350) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b04, &(0x7f00000000c0)={'wlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x8000}, 0xc) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r3, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="f8", 0x1}], 0x1, &(0x7f0000000a40)=[@timestamping={{0x14, 0x1, 0x4f, 0x3ff}}], 0x18}}], 0x1, 0x40440d1) sendmsg$nl_generic(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000fdf52f0000f94ea612630400"/32], 0x20}, 0x1, 0x0, 0x0, 0x42004}, 0x4080000) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0xffffffffffffff21) 1m18.968871948s ago: executing program 0 (id=3349): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, 0x0, &(0x7f0000000580)="004f28528714f2dfa69abbd8f2aef5138cdc4ed99544d356947c5317ec121817bfa4012e5fcee694f38ec49bbf652c0d2c67368b2046e8f939452aff4c1670376e55940ba803654348", 0x0}, 0x50) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000200), 0xe) listen(r3, 0x0) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000100), 0x4) syz_emit_ethernet(0x8e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0180c208080086dd60d200400058eed5fe80000000000000003012cd29000000fe80000000eace9600000000000000000000aa04009078000000006031c90900002b0000000000000000000000000000000000fc0100000000000000000000000000016c0404fffe000000fe8a000000000000000000000100443fc35e61b684e19a4fb6b719d3c8"], 0x0) 1m18.369827038s ago: executing program 1 (id=3350): r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f000000ec40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) writev(r0, &(0x7f000000f0c0)=[{&(0x7f000000f000)="2dde8c", 0x3}], 0x1) 1m18.353466744s ago: executing program 2 (id=3351): ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000040)={0x0, 0x1}) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0xfffffffc, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x44004) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x439, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801, 0x131b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x40008c0) (async) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100), 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendto$inet6(r3, 0x0, 0x0, 0x24040850, &(0x7f00000002c0)={0xa, 0x4e24, 0x2, @remote, 0xfffffffa}, 0x1c) (async) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4d, &(0x7f0000000100)=0x9, 0x4) r5 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) accept4$tipc(r5, &(0x7f00000003c0)=@id, &(0x7f0000000440)=0x10, 0x80000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1802000000000000000000000000000085cd697d75be0d668e000000ab00000087b17b0715ea8c97b74c78a50bf23ddc753754937855d68188a349bd90423ece1084901bdc4d58cfb335293641db37050e91c7ca5f77fbdb793fb9f4232b0ff41d4994e500a9b051a64fe821a2b3692aa018c0be"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) (async) r6 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r6, 0x29, 0x32, &(0x7f0000000180)="9ea2a0b1a39471c2e58c96cae6850478554b8bab", 0x14) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 1m18.139640947s ago: executing program 0 (id=3352): syz_emit_ethernet(0x56, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x48, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0xd, 0x1, 0x8, 0x0, 0x1000, {[@mptcp=@syn={0x1e, 0xc, 0xb, 0x1, 0x0, 0x3, 0x2b43c763}, @generic={0x13, 0xe, "099f7786f6ce3c30eb72984b"}, @eol, @nop, @sack_perm={0x4, 0x2}]}}}}}}}, 0x0) (async) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 1m17.992505681s ago: executing program 1 (id=3353): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)={0x28, 0x3f, 0x107, 0x70bd2b, 0x0, {0x3, 0x7c}, [@typed={0x4, 0x110}, @nested={0xd, 0x1, 0x0, 0x1, [@generic="6d14ff356ee88bd200"]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) bpf$MAP_CREATE(0x0, &(0x7f0000004080)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a34000000140a01010000000000000000020000030900010073797a300000000008000340000000070900020073797a310000000018000000120a010300000000000000000200000904000d00000000001100010000000000000000000000000a"], 0x74}, 0x1, 0x0, 0x0, 0x4050}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="600000000206050000000000000000000300000005000400000000000900020073797a32000000000c00078008001200fffffffc040503006c6973743a736574000000a5ce000500010006000000140003006861f9960f6e702c706f72742c697000"], 0x60}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200), r5) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010029bd7000fbdbdf25010000000c00020000000000000000001c0007801800018008000100", @ANYBLOB="04"], 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3000040001010103000000000000000002000001100017000000000280080002001a0600"/48], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x44090) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x8010, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYRESHEX=0x0], 0x0, 0x26, 0x0, 0x1}, 0x28) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c0000001b0a01030000e6ff00000000020000000900010073797a3000000000090003"], 0x7c}}, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r11, 0x6, 0x21, &(0x7f0000001080)="3a53e6ff19acc27dfcd05fbc5da0cca1", 0x20) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r8, 0x111, 0x5, 0x6, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r7, 0x86, &(0x7f0000002600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000800)={{{@in=@private, @in6=@mcast1}}, {{@in=@multicast1}}}, &(0x7f0000000300)=0xffffffffffffff7b) r13 = socket$nl_generic(0x10, 0x3, 0x10) listen(r13, 0x5) r14 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r14, @ANYRESDEC=r12], 0x14}, 0x1, 0x0, 0x0, 0x24044894}, 0x0) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x4000010}, 0x448d0) 1m17.827621686s ago: executing program 0 (id=3354): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4e21, 0xfffb, @loopback, 0xfffffffe}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x8848, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xb39}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) 1m17.696796517s ago: executing program 4 (id=3355): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001400000000114000000020a090100000000000000000000000014000000110001"], 0xd4}}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r1) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0x3c, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x3c}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="50000000080211000001080211000000000000000000f800006400010000060212020202020100"], 0x2e) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000001480)=0x80000000003, 0x12) nanosleep(0x0, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x17, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014fa0000b7030000000000008500000083000000bf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x739, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) syz_80211_inject_frame(&(0x7f0000000000)=@device_b, &(0x7f0000000100)=ANY=[@ANYBLOB="d00400000802110000000802ff0f00004f75ec1502510000000000498bb1684dca75729c16d51d87d24a3744d4bb216c96849b72be1e010000000000000009e03a2cfe791f33bb4500000000000000"], 0x1b) r6 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) bind$alg(r6, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) clock_gettime(0x2, &(0x7f0000000080)) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000240)) r7 = accept4(r6, 0x0, 0x0, 0x0) accept4$inet(r7, &(0x7f0000000180)={0x2, 0x0, @initdev}, 0x0, 0x80000) socket(0x3, 0x5, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000040)=@mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x184}, @device_a, @broadcast, @from_mac, {0xd, 0x6}, @value=@ver_80211n={0x0, 0x6657, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1}}, 0x37, @val={0x8c, 0x18, {0x17a, "43fb1938a2dd", @long="28f95481bd0a3fc03ee6c75ff12f9ce1"}}}, 0x38) 1m17.682116958s ago: executing program 2 (id=3356): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000000)="503771ab228fe0948338d357df625653", 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001440)={0xffffffffffffffff, 0xfeffff, 0xc0, 0x0, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3ff07258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f", 0x0, 0xf0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x538, 0x2c0, 0x398, 0x398, 0x398, 0x0, 0x468, 0x468, 0x468, 0x468, 0x468, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [0xffffff00], [], 'nicvf0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@broadcast, @ipv6=@empty, 0x39, 0x16}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d4], 0x0, 0x5, 0x1}}]}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x0}}}, {{@ipv6={@mcast1, @loopback, [], [], 'batadv_slave_0\x00', 'ipvlan1\x00', {}, {}, 0x2}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}}}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'batadv0\x00', 'virt_wifi0\x00', {}, {0xff}}, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x598) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000000c2e00"/24], 0x0, 0x27}, 0x20) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller1\x00'}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESHEX=r4, @ANYBLOB="fe99d8a3650debd09207e81eba2e298e5aae1bfb3621f0466e84cf5f1eec0840e71eedc9077e1f53dbe10c3fccb0fa8dd46d027ea079f24e8edb02e9bc1e4e844bfa9fa1104f6ec5a99fef22146728ae3c1aaf794c4d4315cd52c82c2cdd071ebe7e0c438b3ec2c73e1135a45e2acdcd1b741d8acf14935dc10c25238f7ff412", @ANYRES16=r1, @ANYRES16=r4, @ANYRES8=r0], 0x38}, 0x1, 0x0, 0x0, 0x48d4}, 0x20008142) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) accept$inet(r0, 0x0, 0x0) 0s ago: executing program 32 (id=3354): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$kcm(0x2, 0x2, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000280)='dctcp', 0x5) sendto$inet6(r1, 0x0, 0x0, 0x20000045, &(0x7f0000000140)={0xa, 0x4e21, 0xfffb, @loopback, 0xfffffffe}, 0x1c) setsockopt$sock_attach_bpf(r0, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x31, &(0x7f0000000640), 0x4) r2 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x401, 0x70bd28, 0x8848, {0x0, 0x0, 0x0, 0x0, 0x8002, 0x8000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xb39}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x50}}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000080), 0x2, 0x0) sendfile(r3, r3, 0x0, 0x1) kernel console output (not intermixed with test programs): mode [ 460.642766][T15897] netlink: 'syz.2.2669': attribute type 1 has an invalid length. [ 460.717809][T15893] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2668'. [ 460.741670][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 460.884051][T15897] bond13: entered promiscuous mode [ 460.886338][T15897] 8021q: adding VLAN 0 to HW filter on device bond13 [ 460.902333][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 461.047668][T15912] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2671'. [ 461.093009][T15910] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2671'. [ 461.115656][T15900] 8021q: adding VLAN 0 to HW filter on device bond13 [ 461.116834][T15900] bond13: (slave wireguard0): The slave device specified does not support setting the MAC address [ 461.116861][T15900] bond13: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 461.191343][T15910] netlink: 'syz.0.2671': attribute type 8 has an invalid length. [ 461.191369][T15910] netlink: 12127 bytes leftover after parsing attributes in process `syz.0.2671'. [ 461.232821][T15900] bond13: (slave wireguard0): making interface the new active one [ 461.232851][T15900] wireguard0: entered promiscuous mode [ 461.270718][T15900] bond13: (slave wireguard0): Enslaving as an active interface with an up link [ 461.744066][T15926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2673'. [ 461.753028][T15919] syzkaller0: entered promiscuous mode [ 461.753093][T15919] syzkaller0: entered allmulticast mode [ 461.782855][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.054479][T15936] xt_TCPMSS: Only works on TCP SYN packets [ 462.840239][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.878704][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.943102][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.921509][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.950513][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.696366][T15953] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 466.827347][T15960] geneve5: entered promiscuous mode [ 466.827376][T15960] geneve5: entered allmulticast mode [ 466.969702][T15968] ip6gre3: entered allmulticast mode [ 466.980991][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 466.981178][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 467.250010][T15980] netlink: 'syz.0.2686': attribute type 10 has an invalid length. [ 467.710951][T16000] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2693'. [ 467.710978][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2693'. [ 467.710996][T16000] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2693'. [ 467.718286][T16000] block nbd1: Unsupported socket: should be TCP or UNIX. [ 467.792036][T16008] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 467.949089][T16004] netlink: zone id is out of range [ 467.949109][T16004] netlink: zone id is out of range [ 467.949134][T16004] netlink: zone id is out of range [ 467.949155][T16004] netlink: zone id is out of range [ 467.949212][T16004] netlink: zone id is out of range [ 467.949222][T16004] netlink: zone id is out of range [ 467.949233][T16004] netlink: zone id is out of range [ 468.023657][ T8241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.427368][T16018] syzkaller0: entered promiscuous mode [ 468.427399][T16018] syzkaller0: entered allmulticast mode [ 468.655603][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2699'. [ 470.626389][T16001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.653347][T16036] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 470.653375][T16036] netlink: 'syz.1.2699': attribute type 1 has an invalid length. [ 470.819787][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 472.190432][ T8244] net_ratelimit: 7 callbacks suppressed [ 472.190457][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 472.931404][T16039] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 473.060647][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.230349][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 473.371951][T16077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.541028][T16077] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.697617][T16083] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2708'. [ 473.714602][T16096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.756147][T16077] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2708'. [ 473.767294][T16077] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2708'. [ 473.827966][T16080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.108302][T16104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2712'. [ 474.226669][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2714'. [ 474.249266][T16106] x_tables: duplicate underflow at hook 2 [ 474.260575][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 474.552398][T16108] wlan1 speed is unknown, defaulting to 1000 [ 474.572734][T16108] netdevsim0 speed is unknown, defaulting to 1000 [ 475.301050][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.352041][T16131] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2722'. [ 475.352076][T16131] openvswitch: netlink: Message has 512 unknown bytes. [ 475.458933][T16108] lo speed is unknown, defaulting to 1000 [ 475.468071][T16108] lo speed is unknown, defaulting to 1000 [ 475.863501][T16111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2715'. [ 475.939991][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 476.003988][T16143] syzkaller0: entered promiscuous mode [ 476.004017][T16143] syzkaller0: entered allmulticast mode [ 476.100113][ T8203] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.245640][T16154] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2729'. [ 476.340799][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 476.511060][T16157] bond16: option primary: mode dependency failed, not supported in mode balance-xor(2) [ 476.548815][T16157] bond16 (unregistering): Released all slaves [ 476.736055][T16164] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2731'. [ 477.223433][T16179] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 477.330397][ T173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.330683][ T173] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.362604][ T8203] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 477.384694][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 477.532179][T16186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2738'. [ 477.653468][T16186] bond_slave_0: entered promiscuous mode [ 477.653497][T16186] bond_slave_0: entered allmulticast mode [ 477.946250][T16166] openvswitch: netlink: Key type 260 is out of range max 32 [ 478.055633][T16202] openvswitch: netlink: ct_state flags ffffffff unsupported [ 478.056042][T16201] openvswitch: netlink: ct_state flags ffffffff unsupported [ 478.183312][ T8203] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.183631][ T8203] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 478.420686][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 478.638949][T16201] lo: Caught tx_queue_len zero misconfig [ 478.924008][T16209] netlink: 'syz.0.2742': attribute type 24 has an invalid length. [ 479.153341][ T5740] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.322117][T16219] __nla_validate_parse: 2 callbacks suppressed [ 479.322141][T16219] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2746'. [ 479.463293][ T8244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 479.526999][T16236] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2746'. [ 479.622987][T16239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2748'. [ 480.179772][T16247] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 480.428244][T16266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.428406][T16266] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 480.964896][T16284] netlink: 580 bytes leftover after parsing attributes in process `syz.3.2761'. [ 480.964931][T16284] netlink: 188 bytes leftover after parsing attributes in process `syz.3.2761'. [ 480.964985][T16284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2761'. [ 481.400106][T16289] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2763'. [ 481.496457][T16304] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.2767'. [ 481.531269][T16289] bridge0: port 2(bridge_slave_1) entered disabled state [ 481.647459][T16306] team0 (unregistering): Port device team_slave_1 removed [ 481.700031][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.705977][T16298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2764'. [ 481.833503][T16306] team0 (unregistering): Port device wlan0 removed [ 482.563859][T16338] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2772'. [ 482.580633][T16338] netlink: 'syz.0.2772': attribute type 9 has an invalid length. [ 482.722399][T16335] netlink: 'syz.4.2773': attribute type 5 has an invalid length. [ 482.750752][ T8218] net_ratelimit: 6 callbacks suppressed [ 482.750776][ T8218] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 483.792980][ T8241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 484.032957][T16391] netlink: 'syz.1.2784': attribute type 4 has an invalid length. [ 484.378941][T16411] IPVS: set_ctl: invalid protocol: 11612 224.0.0.2:21 [ 485.487252][T16443] tc action pedit offset 0 out of bounds [ 485.487281][T16443] tc action pedit offset 0 out of bounds [ 485.487294][T16443] tc action pedit offset 0 out of bounds [ 485.487306][T16443] tc action pedit offset 0 out of bounds [ 485.487318][T16443] tc action pedit offset 0 out of bounds [ 485.487330][T16443] tc action pedit offset 0 out of bounds [ 485.487342][T16443] tc action pedit offset 0 out of bounds [ 485.487354][T16443] tc action pedit offset 0 out of bounds [ 485.487366][T16443] tc action pedit offset 0 out of bounds [ 485.487379][T16443] tc action pedit offset 0 out of bounds [ 485.487404][T16443] 0: reclassify loop, rule prio 0, protocol 800 [ 485.665706][T16453] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 485.722382][T16450] netlink: 'syz.0.2803': attribute type 1 has an invalid length. [ 485.758614][T16448] __nla_validate_parse: 7 callbacks suppressed [ 485.758637][T16448] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2804'. [ 485.862666][T16462] sctp_getsockopt_maxseg: 23 callbacks suppressed [ 485.862692][T16462] sctp: [Deprecated]: syz.2.2807 (pid 16462) Use of int in maxseg socket option. [ 485.862692][T16462] Use struct sctp_assoc_value instead [ 485.868671][T16451] netlink: 'syz.0.2803': attribute type 10 has an invalid length. [ 485.868699][T16451] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2803'. [ 485.888070][T16451] dummy0: entered promiscuous mode [ 485.983194][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 485.983404][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 485.983549][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 485.983690][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 485.983845][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 485.983987][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 485.984126][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 486.070109][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 486.070738][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 486.071295][T16467] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 486.484500][T16475] bond0: entered promiscuous mode [ 486.484526][T16475] bond_slave_0: entered promiscuous mode [ 486.486302][T16475] bond_slave_1: entered promiscuous mode [ 486.490300][T16475] team0: entered promiscuous mode [ 486.490354][T16475] team_slave_0: entered promiscuous mode [ 486.493304][T16475] team_slave_1: entered promiscuous mode [ 486.568156][T16475] batadv0: entered promiscuous mode [ 486.569306][T16475] debugfs: 'hsr1' already exists in 'hsr' [ 486.569331][T16475] Cannot create hsr debugfs directory [ 486.592469][T16475] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 486.619414][T16475] bond0: left promiscuous mode [ 486.619438][T16475] bond_slave_0: left promiscuous mode [ 486.632461][T16475] bond_slave_1: left promiscuous mode [ 486.632672][T16475] team0: left promiscuous mode [ 486.632689][T16475] team_slave_0: left promiscuous mode [ 486.632916][T16475] team_slave_1: left promiscuous mode [ 486.637912][T16475] batadv0: left promiscuous mode [ 486.798998][T16480] bond0: entered promiscuous mode [ 486.799024][T16480] bond_slave_0: entered promiscuous mode [ 486.799270][T16480] bond_slave_1: entered promiscuous mode [ 486.799467][T16480] team0: entered promiscuous mode [ 486.799482][T16480] team_slave_0: entered promiscuous mode [ 486.847712][T16480] team_slave_1: entered promiscuous mode [ 486.858742][T16480] batadv0: entered promiscuous mode [ 486.868258][T16480] debugfs: 'hsr1' already exists in 'hsr' [ 486.868284][T16480] Cannot create hsr debugfs directory [ 486.868855][T16480] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 486.958820][T16480] bond0: left promiscuous mode [ 486.958851][T16480] bond_slave_0: left promiscuous mode [ 486.959313][T16480] bond_slave_1: left promiscuous mode [ 486.984900][T16480] team0: left promiscuous mode [ 486.984930][T16480] team_slave_0: left promiscuous mode [ 486.985201][T16480] team_slave_1: left promiscuous mode [ 487.051116][T16480] batadv0: left promiscuous mode [ 487.081487][T16495] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2814'. [ 487.384634][T16507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 487.781566][T16255] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.781627][T16255] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.781667][T16255] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.781708][T16255] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 488.411843][T16539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.446146][T16534] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2826'. [ 489.296782][T16564] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 489.660236][T16578] FAULT_INJECTION: forcing a failure. [ 489.660236][T16578] name failslab, interval 1, probability 0, space 0, times 0 [ 489.660274][T16578] CPU: 0 UID: 0 PID: 16578 Comm: syz.3.2839 Not tainted syzkaller #0 PREEMPT(full) [ 489.660302][T16578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 489.660316][T16578] Call Trace: [ 489.660325][T16578] [ 489.660335][T16578] dump_stack_lvl+0xe8/0x150 [ 489.660376][T16578] should_fail_ex+0x410/0x560 [ 489.660568][T16578] should_failslab+0xa8/0x100 [ 489.660602][T16578] __kmalloc_cache_noprof+0xa3/0x600 [ 489.660629][T16578] ? bpf_uprobe_multi_link_attach+0x6c9/0x11b0 [ 489.660657][T16578] ? bpf_uprobe_multi_link_attach+0x6c9/0x11b0 [ 489.660694][T16578] bpf_uprobe_multi_link_attach+0x6c9/0x11b0 [ 489.660741][T16578] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 489.660768][T16578] ? __fget_files+0x2a/0x420 [ 489.660814][T16578] ? __fget_files+0x2a/0x420 [ 489.660848][T16578] ? __fget_files+0x2a/0x420 [ 489.660886][T16578] ? bpf_prog_attach_check_attach_type+0x46a/0x570 [ 489.660924][T16578] link_create+0x621/0x850 [ 489.660965][T16578] __sys_bpf+0x760/0xd90 [ 489.661003][T16578] ? __pfx___sys_bpf+0x10/0x10 [ 489.661043][T16578] ? __fget_files+0x2a/0x420 [ 489.661098][T16578] ? ksys_write+0x242/0x270 [ 489.661124][T16578] ? __pfx_ksys_write+0x10/0x10 [ 489.661153][T16578] __x64_sys_bpf+0xba/0xd0 [ 489.661182][T16578] do_syscall_64+0x166/0x520 [ 489.661216][T16578] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.661240][T16578] ? clear_bhb_loop+0x70/0xc0 [ 489.661268][T16578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.661291][T16578] RIP: 0033:0x7f42c8f9e159 [ 489.661314][T16578] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.661334][T16578] RSP: 002b:00007f42c9f4e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 489.661360][T16578] RAX: ffffffffffffffda RBX: 00007f42c9225fa0 RCX: 00007f42c8f9e159 [ 489.661377][T16578] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 489.661391][T16578] RBP: 00007f42c9f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 489.661407][T16578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.661421][T16578] R13: 00007f42c9226038 R14: 00007f42c9225fa0 R15: 00007ffe01341ca8 [ 489.661459][T16578] [ 489.789326][T16577] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 490.065517][T16582] veth1_macvtap: left promiscuous mode [ 490.123963][T16582] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2841'. [ 490.124010][T16582] netlink: 'syz.4.2841': attribute type 7 has an invalid length. [ 490.124026][T16582] netlink: 'syz.4.2841': attribute type 8 has an invalid length. [ 490.124041][T16582] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 490.128602][T16582] x_tables: duplicate entry at hook 4 [ 490.217727][T16588] xt_policy: too many policy elements [ 490.294039][T16590] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2841'. [ 490.294080][T16590] netlink: 'syz.4.2841': attribute type 7 has an invalid length. [ 490.294093][T16590] netlink: 'syz.4.2841': attribute type 8 has an invalid length. [ 490.294106][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2841'. [ 490.296259][T16582] x_tables: duplicate entry at hook 4 [ 490.356172][T16597] netlink: 'syz.3.2843': attribute type 15 has an invalid length. [ 490.452823][T16600] tipc: MTU too low for tipc bearer [ 490.659994][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 490.934978][T16609] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 491.243065][T16619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 491.299909][ C1] ip6_tunnel:  xmit: Local address not yet configured! [ 491.991926][T16650] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2854'. [ 492.086162][T16654] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2854'. [ 492.144560][T16650] hsr_slave_0: left promiscuous mode [ 492.156757][T16650] hsr_slave_1: left promiscuous mode [ 492.355443][T16255] bond0: (slave team0): link status definitely down, disabling slave [ 492.754734][T16679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2857'. [ 492.931632][T16675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2858'. [ 493.598998][T16703] FAULT_INJECTION: forcing a failure. [ 493.598998][T16703] name failslab, interval 1, probability 0, space 0, times 0 [ 493.599039][T16703] CPU: 1 UID: 0 PID: 16703 Comm: syz.2.2861 Not tainted syzkaller #0 PREEMPT(full) [ 493.599072][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 493.599086][T16703] Call Trace: [ 493.599095][T16703] [ 493.599115][T16703] dump_stack_lvl+0xe8/0x150 [ 493.599154][T16703] should_fail_ex+0x410/0x560 [ 493.599188][T16703] should_failslab+0xa8/0x100 [ 493.599228][T16703] __kmalloc_cache_noprof+0xa3/0x600 [ 493.599256][T16703] ? bpf_uprobe_multi_link_attach+0x6c9/0x11b0 [ 493.599284][T16703] ? bpf_uprobe_multi_link_attach+0x6c9/0x11b0 [ 493.599319][T16703] bpf_uprobe_multi_link_attach+0x6c9/0x11b0 [ 493.599363][T16703] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 493.599389][T16703] ? __fget_files+0x2a/0x420 [ 493.599424][T16703] ? __fget_files+0x2a/0x420 [ 493.599454][T16703] ? __fget_files+0x2a/0x420 [ 493.599496][T16703] ? bpf_prog_attach_check_attach_type+0x46a/0x570 [ 493.599538][T16703] link_create+0x621/0x850 [ 493.599573][T16703] __sys_bpf+0x760/0xd90 [ 493.599609][T16703] ? __pfx___sys_bpf+0x10/0x10 [ 493.599648][T16703] ? __fget_files+0x2a/0x420 [ 493.599699][T16703] ? ksys_write+0x242/0x270 [ 493.599724][T16703] ? __pfx_ksys_write+0x10/0x10 [ 493.599753][T16703] __x64_sys_bpf+0xba/0xd0 [ 493.599781][T16703] do_syscall_64+0x166/0x520 [ 493.599813][T16703] ? trace_irq_disable+0x3b/0x140 [ 493.599837][T16703] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.599862][T16703] ? clear_bhb_loop+0x70/0xc0 [ 493.599909][T16703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.599933][T16703] RIP: 0033:0x7f63fd19e159 [ 493.599955][T16703] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.599976][T16703] RSP: 002b:00007f63fe102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 493.600003][T16703] RAX: ffffffffffffffda RBX: 00007f63fd425fa0 RCX: 00007f63fd19e159 [ 493.600021][T16703] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 493.600037][T16703] RBP: 00007f63fe102090 R08: 0000000000000000 R09: 0000000000000000 [ 493.600053][T16703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.600068][T16703] R13: 00007f63fd426038 R14: 00007f63fd425fa0 R15: 00007ffe31f35b98 [ 493.600115][T16703] [ 494.051417][T16707] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2862'. [ 494.052970][T16707] netlink: 59 bytes leftover after parsing attributes in process `syz.4.2862'. [ 494.081488][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2864'. [ 494.176066][T16717] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2863'. [ 494.190151][T16718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2863'. [ 494.391563][T16726] netlink: 'syz.4.2867': attribute type 2 has an invalid length. [ 494.491034][T16731] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 494.648043][T16738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2870'. [ 494.814811][T16741] netlink: 'syz.4.2873': attribute type 21 has an invalid length. [ 494.814842][T16741] IPv6: NLM_F_CREATE should be specified when creating new route [ 494.893696][T16744] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 494.894609][T16744] batman_adv: batadv0: Adding interface: gretap2 [ 494.894626][T16744] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 494.894822][T16744] batman_adv: batadv0: Interface activated: gretap2 [ 495.064580][T16749] netlink: 'syz.3.2872': attribute type 1 has an invalid length. [ 495.208837][T16740] wlan1 speed is unknown, defaulting to 1000 [ 495.218462][T16740] netdevsim0 speed is unknown, defaulting to 1000 [ 495.394910][T16761] FAULT_INJECTION: forcing a failure. [ 495.394910][T16761] name failslab, interval 1, probability 0, space 0, times 0 [ 495.394951][T16761] CPU: 0 UID: 0 PID: 16761 Comm: syz.1.2876 Not tainted syzkaller #0 PREEMPT(full) [ 495.394976][T16761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 495.394993][T16761] Call Trace: [ 495.395003][T16761] [ 495.395013][T16761] dump_stack_lvl+0xe8/0x150 [ 495.395053][T16761] should_fail_ex+0x410/0x560 [ 495.395088][T16761] should_failslab+0xa8/0x100 [ 495.395119][T16761] ? radix_tree_node_alloc+0x82/0x3a0 [ 495.395152][T16761] kmem_cache_alloc_noprof+0xa1/0x600 [ 495.395179][T16761] ? radix_tree_node_alloc+0x82/0x3a0 [ 495.395218][T16761] radix_tree_node_alloc+0x82/0x3a0 [ 495.395258][T16761] idr_get_free+0x28f/0xa10 [ 495.395303][T16761] idr_alloc_u32+0x18a/0x330 [ 495.395344][T16761] ? __pfx_idr_alloc_u32+0x10/0x10 [ 495.395382][T16761] ? do_raw_spin_lock+0x12b/0x2f0 [ 495.395424][T16761] idr_alloc_cyclic+0x9c/0x1b0 [ 495.395479][T16761] bpf_link_prime+0x6b/0x220 [ 495.395507][T16761] bpf_uprobe_multi_link_attach+0xf50/0x11b0 [ 495.395556][T16761] ? __pfx_bpf_uprobe_multi_link_attach+0x10/0x10 [ 495.395584][T16761] ? __fget_files+0x2a/0x420 [ 495.395621][T16761] ? __fget_files+0x2a/0x420 [ 495.395654][T16761] ? __fget_files+0x2a/0x420 [ 495.395691][T16761] ? bpf_prog_attach_check_attach_type+0x46a/0x570 [ 495.395730][T16761] link_create+0x621/0x850 [ 495.395767][T16761] __sys_bpf+0x760/0xd90 [ 495.395806][T16761] ? __pfx___sys_bpf+0x10/0x10 [ 495.395846][T16761] ? __fget_files+0x2a/0x420 [ 495.395900][T16761] ? ksys_write+0x242/0x270 [ 495.395927][T16761] ? __pfx_ksys_write+0x10/0x10 [ 495.395956][T16761] __x64_sys_bpf+0xba/0xd0 [ 495.395985][T16761] do_syscall_64+0x166/0x520 [ 495.396016][T16761] ? trace_irq_disable+0x3b/0x140 [ 495.396041][T16761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.396065][T16761] ? clear_bhb_loop+0x70/0xc0 [ 495.396094][T16761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.396117][T16761] RIP: 0033:0x7f4342f9e159 [ 495.396140][T16761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.396161][T16761] RSP: 002b:00007f4343ef3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 495.396186][T16761] RAX: ffffffffffffffda RBX: 00007f4343225fa0 RCX: 00007f4342f9e159 [ 495.396204][T16761] RDX: 0000000000000040 RSI: 0000200000000180 RDI: 000000000000001c [ 495.396219][T16761] RBP: 00007f4343ef3090 R08: 0000000000000000 R09: 0000000000000000 [ 495.396234][T16761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.396248][T16761] R13: 00007f4343226038 R14: 00007f4343225fa0 R15: 00007ffd03deba28 [ 495.396293][T16761] [ 496.326041][T16740] lo speed is unknown, defaulting to 1000 [ 496.347327][T16740] lo speed is unknown, defaulting to 1000 [ 497.464288][T16814] __nla_validate_parse: 1 callbacks suppressed [ 497.464314][T16814] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2889'. [ 497.513437][T16820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2891'. [ 497.755264][T16828] netlink: 'syz.3.2889': attribute type 1 has an invalid length. [ 497.953857][ T5634] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 497.961268][ T5634] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 497.989226][ T5634] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 498.009432][ T5634] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 498.019834][ T5634] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 498.119243][T16837] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2893'. [ 498.626410][T16841] x_tables: unsorted underflow at hook 3 [ 498.711636][T16846] x_tables: unsorted underflow at hook 3 [ 499.084387][ T5634] block nbd1: Receive control failed (result -32) [ 499.099397][ T5634] block nbd1: Receive control failed (result -32) [ 500.102145][ T5634] Bluetooth: hci5: command tx timeout [ 500.185777][T16830] wlan1 speed is unknown, defaulting to 1000 [ 500.187656][T16830] netdevsim0 speed is unknown, defaulting to 1000 [ 501.108365][T16902] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 501.207534][T16902] bond14: entered promiscuous mode [ 501.209216][T16902] 8021q: adding VLAN 0 to HW filter on device bond14 [ 501.260733][T16830] lo speed is unknown, defaulting to 1000 [ 501.265827][T16830] lo speed is unknown, defaulting to 1000 [ 501.835240][T16918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2911'. [ 501.878034][T16921] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2912'. [ 501.878127][T16922] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2912'. [ 502.168174][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2913'. [ 502.186030][ T5634] Bluetooth: hci5: command tx timeout [ 502.254941][T16929] netlink: 'syz.4.2913': attribute type 83 has an invalid length. [ 502.623805][T16954] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2917'. [ 502.626868][T16955] netlink: 144 bytes leftover after parsing attributes in process `syz.1.2917'. [ 503.086834][T16965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.151097][T16830] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.151203][T16830] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.151359][T16830] bridge_slave_0: entered allmulticast mode [ 503.155206][T16830] bridge_slave_0: entered promiscuous mode [ 503.198464][T16830] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.198636][T16830] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.198816][T16830] bridge_slave_1: entered allmulticast mode [ 503.225597][T16830] bridge_slave_1: entered promiscuous mode [ 503.444058][T16830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 503.474436][T16830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.666651][T16973] netlink: del zone limit has 4 unknown bytes [ 503.676580][T16830] team0: Port device team_slave_0 added [ 503.694053][T16830] team0: Port device team_slave_1 added [ 503.871706][T16830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 503.871727][T16830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.871756][T16830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 503.875874][T16830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 503.875891][T16830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 503.875921][T16830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 504.259933][ T5634] Bluetooth: hci5: command tx timeout [ 504.283978][T16986] netlink: 'syz.3.2924': attribute type 1 has an invalid length. [ 504.401596][T16992] netlink: 'syz.3.2924': attribute type 1 has an invalid length. [ 504.626725][T16830] hsr_slave_0: entered promiscuous mode [ 504.636117][T16830] hsr_slave_1: entered promiscuous mode [ 504.638160][T16830] debugfs: 'hsr0' already exists in 'hsr' [ 504.638185][T16830] Cannot create hsr debugfs directory [ 504.887371][T17010] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2929'. [ 505.351121][T17012] netlink: 'syz.1.2930': attribute type 1 has an invalid length. [ 505.834807][T17036] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2935'. [ 506.253542][T17055] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 506.339623][ T5634] Bluetooth: hci5: command tx timeout [ 506.783835][T16830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 506.783877][T16830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.783907][T16830] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 506.825922][T17067] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2942'. [ 506.992511][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2937'. [ 507.047882][T17047] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2937'. [ 507.048026][T17070] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2937'. [ 507.092947][T17067] bond17: (slave bridge13): Enslaving as an active interface with an up link [ 507.097220][T17047] gretap0: entered promiscuous mode [ 507.097246][T17047] gretap0: left allmulticast mode [ 507.132238][T17070] 0{X: renamed from gretap0 [ 507.160585][T17070] 0{X: left promiscuous mode [ 507.160614][T17070] 0{X: entered allmulticast mode [ 507.166156][T17070] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check. [ 507.296907][T16830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.296952][T16830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.296982][T16830] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 507.341229][T17074] openvswitch: netlink: Unexpected mask (mask=200440, allowed=10048) [ 507.676307][T16830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 507.676352][T16830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.676384][T16830] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 508.009431][T17089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2945'. [ 508.075366][T16830] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 508.075410][T16830] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.075441][T16830] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 508.600826][T17110] netlink: 'syz.4.2949': attribute type 1 has an invalid length. [ 508.600855][T17110] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2949'. [ 509.219794][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 509.672540][T16830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 509.718474][T16830] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 509.758352][T16830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 509.808101][T16830] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 509.829653][T16830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 509.887482][T16830] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 509.907217][T16830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 509.952462][T16830] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.180864][T17133] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2956'. [ 510.220499][T17132] IPv6: NLM_F_REPLACE set, but no existing node found! [ 510.551833][T17139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2957'. [ 510.551915][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'. [ 510.595426][T17139] netlink: 198796 bytes leftover after parsing attributes in process `syz.2.2957'. [ 510.595458][T17139] netlink: 'syz.2.2957': attribute type 2 has an invalid length. [ 510.616379][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'. [ 510.643591][T17139] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2957'. [ 510.711432][T16830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.794392][T16830] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.835142][T16255] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.835288][T16255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 510.891720][ T9859] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.891838][ T9859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.417268][T17161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2962'. [ 511.936363][T17185] netlink: 'syz.1.2968': attribute type 1 has an invalid length. [ 511.936401][T17185] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2968'. [ 511.973378][T17185] ip_tables: iptables: counters copy to user failed while replacing table [ 512.327033][T17195] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 513.036700][T16830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.298978][T17226] __nla_validate_parse: 3 callbacks suppressed [ 513.299003][T17226] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2980'. [ 513.495908][T16830] veth0_vlan: entered promiscuous mode [ 513.545655][T16830] veth1_vlan: entered promiscuous mode [ 513.674848][ T1355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 513.674875][ T1355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 513.804724][T16830] veth0_macvtap: entered promiscuous mode [ 513.853747][T16830] veth1_macvtap: entered promiscuous mode [ 513.965865][T16830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.023380][T16830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.088601][T17241] x_tables: duplicate underflow at hook 3 [ 514.161760][T17241] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2985'. [ 514.182410][ T1355] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.182845][ T1355] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.183473][ T1355] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.183515][ T1355] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.241472][T17244] netlink: 27 bytes leftover after parsing attributes in process `syz.3.2986'. [ 514.260794][T17244] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 514.278755][T17245] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2987'. [ 514.629739][T12676] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.629765][T12676] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.751154][T17259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.763713][T17263] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2991'. [ 514.886156][T16252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.886185][T16252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.534281][T17284] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2890'. [ 516.021743][ T5632] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 516.026860][ T5632] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 516.028949][ T5632] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 516.046354][ T5632] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 516.068131][ T5632] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 516.156673][T17302] netlink: 'syz.4.3001': attribute type 3 has an invalid length. [ 516.156700][T17302] netlink: 666 bytes leftover after parsing attributes in process `syz.4.3001'. [ 516.298029][T17305] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3002'. [ 516.298078][T17305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3002'. [ 516.594625][T17315] netlink: 'syz.4.3003': attribute type 1 has an invalid length. [ 516.976859][T17319] veth9: entered allmulticast mode [ 517.029284][T17319] bond18: (slave veth9): Enslaving as an active interface with a down link [ 517.227044][T17323] bond18: (slave veth0_to_bond): making interface the new active one [ 517.271259][T17323] bond18: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 517.362507][T17312] macvlan3: entered promiscuous mode [ 517.362536][T17312] macvlan3: entered allmulticast mode [ 517.363228][T17312] bond18: entered promiscuous mode [ 517.363246][T17312] veth0_to_bond: entered promiscuous mode [ 517.378919][T17312] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 517.414110][T17312] bond18: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 517.414231][T17312] bond18: left promiscuous mode [ 517.414249][T17312] veth0_to_bond: left promiscuous mode [ 517.492891][T17337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3009'. [ 517.495725][T17331] tipc: Started in network mode [ 517.495760][T17331] tipc: Node identity aaaaaaaaaaaa, cluster identity 4711 [ 517.496020][T17331] tipc: Enabled bearer , priority 0 [ 518.180665][ T5632] Bluetooth: hci0: command tx timeout [ 518.607697][T17297] wlan1 speed is unknown, defaulting to 1000 [ 518.609735][ T8203] tipc: Node number set to 43690 [ 518.615454][T17297] netdevsim0 speed is unknown, defaulting to 1000 [ 519.288006][T17387] __nla_validate_parse: 1 callbacks suppressed [ 519.288030][T17387] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3020'. [ 519.689447][T17297] lo speed is unknown, defaulting to 1000 [ 519.697037][T17297] lo speed is unknown, defaulting to 1000 [ 519.842260][T17395] syzkaller0: entered promiscuous mode [ 519.842286][T17395] syzkaller0: entered allmulticast mode [ 519.887328][T17395] netlink: 452 bytes leftover after parsing attributes in process `syz.4.3021'. [ 520.045925][T17402] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3025'. [ 520.128426][T17404] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3026'. [ 520.261964][ T5632] Bluetooth: hci0: command tx timeout [ 521.021923][T17427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3032'. [ 521.193276][T17432] netlink: 'syz.3.3034': attribute type 1 has an invalid length. [ 521.323005][T17441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3033'. [ 521.627859][T17442] bond19: entered promiscuous mode [ 521.627887][T17442] bond19: entered allmulticast mode [ 522.025000][T17461] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3037'. [ 522.294199][T17468] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3039'. [ 522.294394][T17297] bridge0: port 1(bridge_slave_0) entered blocking state [ 522.296243][T17297] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.296426][T17297] bridge_slave_0: entered allmulticast mode [ 522.300421][T17297] bridge_slave_0: entered promiscuous mode [ 522.340323][ T5632] Bluetooth: hci0: command tx timeout [ 522.405710][T17297] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.405938][T17297] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.406669][T17297] bridge_slave_1: entered allmulticast mode [ 522.434776][T17297] bridge_slave_1: entered promiscuous mode [ 522.658978][T17487] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 522.857646][T17297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.878746][T17297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 523.101009][T17496] netlink: 'syz.4.3044': attribute type 1 has an invalid length. [ 523.105184][T17297] team0: Port device team_slave_0 added [ 523.152110][T17297] team0: Port device team_slave_1 added [ 523.193479][T17297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 523.193500][T17297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.193529][T17297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 523.195758][T17297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 523.195775][T17297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 523.195806][T17297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 523.383905][T17493] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3044'. [ 523.512878][T17493] bond18: (slave veth0_to_bond): Releasing active interface [ 523.578108][T17493] bond20: (slave veth0_to_bond): making interface the new active one [ 523.589999][T17493] bond20: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 523.637897][T17506] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3049'. [ 523.651185][T17297] hsr_slave_0: entered promiscuous mode [ 523.655585][T17297] hsr_slave_1: entered promiscuous mode [ 523.658490][T17297] debugfs: 'hsr0' already exists in 'hsr' [ 523.658516][T17297] Cannot create hsr debugfs directory [ 524.192601][T17297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.192644][T17297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.361977][T17297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.362018][T17297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.424726][ T5632] Bluetooth: hci0: command tx timeout [ 524.513051][T17297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.513103][T17297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.683016][T17297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.683061][T17297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.957157][T17297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 524.967486][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 524.968865][T17297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 524.985823][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 524.987135][T17297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 525.008090][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 525.015368][T17297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 525.029341][T17297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 525.166914][T17297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.200495][T17297] 8021q: adding VLAN 0 to HW filter on device team0 [ 525.208465][ T84] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.208580][ T84] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.248599][ T84] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.248722][ T84] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.914008][T17297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 525.998958][T17297] veth0_vlan: entered promiscuous mode [ 526.018341][T17297] veth1_vlan: entered promiscuous mode [ 526.073912][T17297] veth0_macvtap: entered promiscuous mode [ 526.084093][T17297] veth1_macvtap: entered promiscuous mode [ 526.117309][T17297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 526.138098][T17297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 526.250923][ T9859] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.263469][T16255] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.264814][ T1355] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.265183][ T1355] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.411156][T16255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.411183][T16255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 526.495494][T16255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 526.495523][T16255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.700592][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 562.986273][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.662729][T17549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3054'. [ 587.812302][ T5634] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 587.819650][ T5634] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 587.838245][ T5634] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 587.839325][ T5634] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 587.855524][ T5634] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 588.299277][T17564] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3055'. [ 588.550166][T17568] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 588.550315][T17568] FAULT_INJECTION: forcing a failure. [ 588.550315][T17568] name failslab, interval 1, probability 0, space 0, times 0 [ 588.550345][T17568] CPU: 0 UID: 0 PID: 17568 Comm: syz.3.3056 Not tainted syzkaller #0 PREEMPT(full) [ 588.550371][T17568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 588.550387][T17568] Call Trace: [ 588.550397][T17568] [ 588.550407][T17568] dump_stack_lvl+0xe8/0x150 [ 588.550448][T17568] should_fail_ex+0x410/0x560 [ 588.550485][T17568] should_failslab+0xa8/0x100 [ 588.550516][T17568] ? dst_alloc+0x105/0x170 [ 588.550541][T17568] kmem_cache_alloc_noprof+0xa1/0x600 [ 588.550568][T17568] ? dst_alloc+0x105/0x170 [ 588.550601][T17568] dst_alloc+0x105/0x170 [ 588.550632][T17568] xfrm_lookup_with_ifid+0x7c8/0x1db0 [ 588.550674][T17568] ? __pfx_xfrm_lookup_with_ifid+0x10/0x10 [ 588.550721][T17568] xfrm_lookup_route+0x3c/0x1c0 [ 588.550755][T17568] inet6_csk_route_req+0x5d5/0x8c0 [ 588.550791][T17568] ? apparmor_inet_conn_request+0xd6/0x320 [ 588.550930][T17568] ? __pfx_inet6_csk_route_req+0x10/0x10 [ 588.550967][T17568] ? tcp_v6_route_req+0x385/0x4d0 [ 588.551011][T17568] tcp_conn_request+0xd80/0x36c0 [ 588.551078][T17568] ? __pfx_tcp_conn_request+0x10/0x10 [ 588.551119][T17568] ? fib6_table_lookup+0xa8f/0xae0 [ 588.551150][T17568] ? __lock_acquire+0x747/0x2de0 [ 588.551202][T17568] ? tcp_v6_conn_request+0x231/0x3e0 [ 588.551227][T17568] ? tcp_rcv_state_process+0x213/0x4980 [ 588.551258][T17568] tcp_rcv_state_process+0x1aeb/0x4980 [ 588.551300][T17568] ? sk_filter_trim_cap+0x192/0xd70 [ 588.551327][T17568] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 588.551360][T17568] ? sk_filter_trim_cap+0x948/0xd70 [ 588.551402][T17568] tcp_v6_do_rcv+0xf70/0x1cc0 [ 588.551450][T17568] tcp_v6_rcv+0x209c/0x2d90 [ 588.551515][T17568] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 588.551542][T17568] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 588.551573][T17568] ? __pfx_tcp_v6_rcv+0x10/0x10 [ 588.551596][T17568] ip6_protocol_deliver_rcu+0xab9/0x1680 [ 588.551664][T17568] ip6_input_finish+0x191/0x370 [ 588.551704][T17568] NF_HOOK+0x336/0x3c0 [ 588.551740][T17568] ? __pfx_ip6_input_finish+0x10/0x10 [ 588.551774][T17568] ? NF_HOOK+0x9e/0x3c0 [ 588.551805][T17568] ? __pfx_NF_HOOK+0x10/0x10 [ 588.551843][T17568] ? __pfx_ip6_input_finish+0x10/0x10 [ 588.551893][T17568] ip6_input+0x16a/0x270 [ 588.551925][T17568] ? ip6_input+0x23/0x270 [ 588.551962][T17568] NF_HOOK+0x336/0x3c0 [ 588.551994][T17568] ? __pfx_sock_wfree+0x10/0x10 [ 588.552029][T17568] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 588.552061][T17568] ? NF_HOOK+0x9e/0x3c0 [ 588.552093][T17568] ? __pfx_NF_HOOK+0x10/0x10 [ 588.552132][T17568] ? ip6_rcv_core+0xa1/0x1870 [ 588.552168][T17568] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 588.552209][T17568] ? netif_receive_skb+0x102/0xbf0 [ 588.552239][T17568] netif_receive_skb+0x278/0xbf0 [ 588.552272][T17568] ? __pfx_netif_receive_skb+0x10/0x10 [ 588.552305][T17568] ? rcu_is_watching+0x16/0xb0 [ 588.552333][T17568] ? tun_rx_batched+0x185/0x790 [ 588.552405][T17568] tun_rx_batched+0x1de/0x790 [ 588.552441][T17568] ? __pfx_tun_rx_batched+0x10/0x10 [ 588.552470][T17568] ? lock_acquire+0x115/0x350 [ 588.552504][T17568] ? tun_get_user+0x23ba/0x44d0 [ 588.552532][T17568] ? __local_bh_enable_ip+0xd6/0x140 [ 588.552562][T17568] ? tun_get_user+0x27b0/0x44d0 [ 588.552593][T17568] tun_get_user+0x2be0/0x44d0 [ 588.552655][T17568] ? tun_get_user+0x27b0/0x44d0 [ 588.552691][T17568] ? aa_file_perm+0x4ed/0x15f0 [ 588.552751][T17568] ? __pfx_tun_get_user+0x10/0x10 [ 588.552782][T17568] ? __lock_acquire+0x747/0x2de0 [ 588.552826][T17568] ? ref_tracker_alloc+0x341/0x4b0 [ 588.552884][T17568] ? lock_acquire+0x115/0x350 [ 588.552912][T17568] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 588.552946][T17568] ? lock_acquire+0x115/0x350 [ 588.552972][T17568] ? tun_get+0x1c/0x2f0 [ 588.553007][T17568] ? tun_get+0x1c/0x2f0 [ 588.553034][T17568] ? tun_get+0x1c/0x2f0 [ 588.553067][T17568] tun_chr_write_iter+0x113/0x200 [ 588.553100][T17568] vfs_write+0x612/0xba0 [ 588.553142][T17568] ? __pfx_vfs_write+0x10/0x10 [ 588.553178][T17568] ? __fget_files+0x2a/0x420 [ 588.553224][T17568] ksys_write+0x150/0x270 [ 588.553250][T17568] ? __pfx_ksys_write+0x10/0x10 [ 588.553288][T17568] do_syscall_64+0x166/0x520 [ 588.553321][T17568] ? trace_irq_disable+0x3b/0x140 [ 588.553346][T17568] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.553371][T17568] ? clear_bhb_loop+0x70/0xc0 [ 588.553400][T17568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 588.553424][T17568] RIP: 0033:0x7f42c8f5e98e [ 588.553447][T17568] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 588.553468][T17568] RSP: 002b:00007f42c9f4dfb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 588.553494][T17568] RAX: ffffffffffffffda RBX: 00007f42c9f4e6c0 RCX: 00007f42c8f5e98e [ 588.553511][T17568] RDX: 0000000000000056 RSI: 0000200000000200 RDI: 00000000000000c8 [ 588.553527][T17568] RBP: 00007f42c9f4e090 R08: 0000000000000000 R09: 0000000000000000 [ 588.553542][T17568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 588.553556][T17568] R13: 00007f42c9226038 R14: 00007f42c9225fa0 R15: 00007ffe01341ca8 [ 588.553595][T17568] [ 589.332773][T17575] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3058'. [ 589.402996][T17579] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3060'. [ 589.403029][T17579] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3060'. [ 589.403048][T17579] netlink: 'syz.3.3060': attribute type 6 has an invalid length. [ 589.403063][T17579] netlink: 'syz.3.3060': attribute type 5 has an invalid length. [ 589.403077][T17579] netlink: 43 bytes leftover after parsing attributes in process `syz.3.3060'. [ 589.541198][T17571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3057'. [ 589.676155][T17584] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3061'. [ 589.762846][T17576] bridge0: Caught tx_queue_len zero misconfig [ 589.851285][ T5617] syz_tun (unregistering): left allmulticast mode [ 589.940783][ T5634] Bluetooth: hci4: command tx timeout [ 590.333656][T17604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3067'. [ 590.359198][T17604] netlink: get zone limit has 4 unknown bytes [ 590.710483][T17607] syzkaller0: entered promiscuous mode [ 590.710716][T17607] syzkaller0: entered allmulticast mode [ 590.728946][T17555] wlan1 speed is unknown, defaulting to 1000 [ 590.759258][T17555] netdevsim0 speed is unknown, defaulting to 1000 [ 591.367514][T17623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 591.416151][T17626] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3073'. [ 591.638610][T17555] lo speed is unknown, defaulting to 1000 [ 591.656415][T17555] lo speed is unknown, defaulting to 1000 [ 592.020204][ T5634] Bluetooth: hci4: command tx timeout [ 592.577733][T17655] veth9: entered promiscuous mode [ 592.630904][T17657] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 592.931290][T17555] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.931941][T17664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3086'. [ 592.932565][T17555] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.932750][T17555] bridge_slave_0: entered allmulticast mode [ 592.972145][T17555] bridge_slave_0: entered promiscuous mode [ 592.990074][T17555] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.992995][T17555] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.993177][T17555] bridge_slave_1: entered allmulticast mode [ 592.997487][T17555] bridge_slave_1: entered promiscuous mode [ 593.086630][T17555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 593.100900][T17555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 593.152018][T17555] team0: Port device team_slave_0 added [ 593.155372][T17555] team0: Port device team_slave_1 added [ 593.212692][T17555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 593.212726][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.212756][T17555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.215059][T17555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.215080][T17555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.215115][T17555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.444310][T17673] sctp: [Deprecated]: syz.2.3090 (pid 17673) Use of int in max_burst socket option deprecated. [ 593.444310][T17673] Use struct sctp_assoc_value instead [ 593.471803][T17674] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3088'. [ 593.541109][T17676] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3089'. [ 593.585429][T17666] syzkaller0: entered promiscuous mode [ 593.585456][T17666] syzkaller0: entered allmulticast mode [ 593.700063][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 593.725447][T17555] hsr_slave_0: entered promiscuous mode [ 593.746793][T17555] hsr_slave_1: entered promiscuous mode [ 593.759970][T17555] debugfs: 'hsr0' already exists in 'hsr' [ 593.759998][T17555] Cannot create hsr debugfs directory [ 593.978865][ T5634] Bluetooth: hci0: ISO packet too small [ 594.050735][T17684] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3092'. [ 594.100616][ T5634] Bluetooth: hci4: command tx timeout [ 594.132713][T17685] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3092'. [ 594.272360][T17692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3095'. [ 594.461405][T17695] netlink: 'syz.4.3097': attribute type 11 has an invalid length. [ 594.461433][T17695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3097'. [ 594.761850][T17705] netlink: 232 bytes leftover after parsing attributes in process `syz.4.3100'. [ 594.910854][T17711] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 595.258075][T17714] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.3104'. [ 595.768377][T17726] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 595.869145][T17728] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 595.896235][T17733] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3110'. [ 595.896235][T17555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.896268][T17555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 595.896297][T17555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.896330][T17555] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 46880 - 0 [ 596.180642][ T5634] Bluetooth: hci4: command tx timeout [ 596.324653][T17753] Bluetooth: MGMT ver 1.23 [ 596.425433][T17756] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 596.724443][T17555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.724483][T17555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 596.724513][T17555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.724542][T17555] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 46880 - 0 [ 596.961803][T17555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.961854][T17555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 596.961884][T17555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.961914][T17555] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 46880 - 0 [ 597.316098][ T9859] smc: removing ib device syz1 [ 597.348679][T17555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.348720][T17555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 597.348750][T17555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.348779][T17555] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 46880 - 0 [ 597.492118][T17785] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 597.670139][ T8203] infiniband syz1: ib_query_port failed (-19) [ 598.405769][T17793] __nla_validate_parse: 6 callbacks suppressed [ 598.405792][T17793] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3124'. [ 598.515701][ T9859] smbdirect: ib_dev[syz1] removed [ 598.631284][T17807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 598.675918][T17809] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3127'. [ 598.788415][T17812] ip_tables: iptables: counters copy to user failed while replacing table [ 599.077487][T17821] netlink: 'syz.2.3130': attribute type 9 has an invalid length. [ 599.157260][T17826] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 599.296861][T17831] netlink: 'syz.0.3134': attribute type 1 has an invalid length. [ 599.538614][T17831] bond2: entered promiscuous mode [ 599.539237][T17831] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.607506][T17837] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3135'. [ 599.873939][T17834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 599.876971][T17834] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 599.876998][T17834] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 599.959154][T17834] bond2: (slave ip6gre1): making interface the new active one [ 599.959186][T17834] ip6gre1: entered promiscuous mode [ 599.993562][T17834] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 600.203263][T17839] ip_tables: iptables: counters copy to user failed while replacing table [ 600.509302][T17844] bridge0: port 3(veth1_to_bridge) entered blocking state [ 600.509419][T17844] bridge0: port 3(veth1_to_bridge) entered disabled state [ 600.537940][T17844] veth1_to_bridge: entered allmulticast mode [ 600.587277][T17849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3138'. [ 600.587303][T17849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3138'. [ 600.710495][T17844] veth1_to_bridge: entered promiscuous mode [ 600.710690][T17844] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 600.711559][T17844] bridge0: port 3(veth1_to_bridge) entered blocking state [ 600.711678][T17844] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 601.328949][ T84] IPVS: starting estimator thread 0... [ 601.341167][T17860] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3143'. [ 601.440338][T17862] IPVS: using max 24 ests per chain, 57600 per kthread [ 601.864868][T17872] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3148'. [ 602.040891][T17874] netlink: 'syz.0.3147': attribute type 2 has an invalid length. [ 602.064010][T17878] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 602.301762][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 602.344473][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 602.377573][T17883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3152'. [ 603.721579][T17920] netlink: 'syz.3.3162': attribute type 64 has an invalid length. [ 603.940515][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 604.014094][T17925] FAULT_INJECTION: forcing a failure. [ 604.014094][T17925] name failslab, interval 1, probability 0, space 0, times 0 [ 604.014131][T17925] CPU: 1 UID: 0 PID: 17925 Comm: syz.4.3164 Not tainted syzkaller #0 PREEMPT(full) [ 604.014157][T17925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 604.014171][T17925] Call Trace: [ 604.014180][T17925] [ 604.014190][T17925] dump_stack_lvl+0xe8/0x150 [ 604.014227][T17925] should_fail_ex+0x410/0x560 [ 604.014259][T17925] ? __pfx_sock_alloc_inode+0x10/0x10 [ 604.014284][T17925] should_failslab+0xa8/0x100 [ 604.014316][T17925] ? __pfx_sock_alloc_inode+0x10/0x10 [ 604.014339][T17925] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 604.014365][T17925] ? sock_alloc_inode+0x2c/0x1a0 [ 604.014387][T17925] ? sock_alloc_inode+0x2c/0x1a0 [ 604.014416][T17925] ? __pfx_sock_alloc_inode+0x10/0x10 [ 604.014440][T17925] sock_alloc_inode+0x2c/0x1a0 [ 604.014464][T17925] ? __pfx_sock_alloc_inode+0x10/0x10 [ 604.014487][T17925] alloc_inode+0x6a/0x1b0 [ 604.014518][T17925] do_accept+0x13e/0x750 [ 604.014553][T17925] ? __pfx_do_accept+0x10/0x10 [ 604.014605][T17925] __sys_accept4+0x139/0x230 [ 604.014637][T17925] ? __pfx___sys_accept4+0x10/0x10 [ 604.014673][T17925] ? __pfx_ksys_write+0x10/0x10 [ 604.014704][T17925] __x64_sys_accept+0x7d/0x90 [ 604.014734][T17925] do_syscall_64+0x166/0x520 [ 604.014764][T17925] ? trace_irq_disable+0x3b/0x140 [ 604.014787][T17925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.014810][T17925] ? clear_bhb_loop+0x70/0xc0 [ 604.014838][T17925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.014860][T17925] RIP: 0033:0x7f24d299e159 [ 604.014880][T17925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 604.014899][T17925] RSP: 002b:00007f24d38c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 604.014924][T17925] RAX: ffffffffffffffda RBX: 00007f24d2c25fa0 RCX: 00007f24d299e159 [ 604.014940][T17925] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 604.014954][T17925] RBP: 00007f24d38c2090 R08: 0000000000000000 R09: 0000000000000000 [ 604.014968][T17925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 604.014982][T17925] R13: 00007f24d2c26038 R14: 00007f24d2c25fa0 R15: 00007fff88a81d48 [ 604.015017][T17925] [ 604.405877][T17932] netlink: 'syz.3.3166': attribute type 1 has an invalid length. [ 604.405901][T17932] netlink: 'syz.3.3166': attribute type 4 has an invalid length. [ 604.405914][T17932] __nla_validate_parse: 34 callbacks suppressed [ 604.405927][T17932] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3166'. [ 604.505518][T17932] netlink: 'syz.3.3166': attribute type 1 has an invalid length. [ 604.505546][T17932] netlink: 'syz.3.3166': attribute type 4 has an invalid length. [ 604.505561][T17932] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.3166'. [ 604.536197][ T5632] Bluetooth: hci3: ISO packet for unknown connection handle 2723 [ 606.019803][ T5632] Bluetooth: hci3: command 0x0405 tx timeout [ 606.165687][T17961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3169'. [ 606.165723][T17961] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3169'. [ 606.235773][T17555] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 606.273651][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 606.346034][T17977] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3175'. [ 606.396906][T17555] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 606.463330][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 606.464369][T17555] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 606.492021][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 606.494275][T17555] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 606.528040][T17555] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 606.746477][T17984] syz_tun: entered allmulticast mode [ 606.788275][T17981] syz_tun: left allmulticast mode [ 607.009347][T17555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 607.133225][T17555] 8021q: adding VLAN 0 to HW filter on device team0 [ 607.191971][T16254] bridge0: port 1(bridge_slave_0) entered blocking state [ 607.192092][T16254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 607.244764][T18012] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3184'. [ 607.333544][T18005] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3182'. [ 607.352882][T16254] bridge0: port 2(bridge_slave_1) entered blocking state [ 607.353003][T16254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 607.535165][T18014] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 607.916852][T18029] netlink: 'syz.3.3188': attribute type 39 has an invalid length. [ 608.367709][T18040] netlink: 232 bytes leftover after parsing attributes in process `syz.0.3191'. [ 608.813662][T18046] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 609.082481][T18057] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3195'. [ 610.099217][T17555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.218403][T18085] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3201'. [ 610.303325][T17555] veth0_vlan: entered promiscuous mode [ 610.388250][T18081] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3200'. [ 610.558179][T17555] veth1_vlan: entered promiscuous mode [ 610.943646][T17555] veth0_macvtap: entered promiscuous mode [ 611.152854][T17555] veth1_macvtap: entered promiscuous mode [ 611.228756][T18100] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3204'. [ 611.228789][T18100] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3204'. [ 611.335384][T17555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 611.395030][T17555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 611.590652][ T84] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.702548][ T84] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.702649][ T84] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.702692][ T84] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 611.975639][T18115] netlink: 'syz.2.3209': attribute type 4 has an invalid length. [ 612.072113][T18100] netlink: 10 bytes leftover after parsing attributes in process `syz.4.3204'. [ 612.138622][T18104] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3204'. [ 612.138656][T18104] nbd: device at index 64 is going down [ 612.613442][ T1355] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 612.613466][ T1355] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 612.993782][T18127] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3211'. [ 613.027569][T18131] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3213'. [ 613.027601][T18131] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3213'. [ 613.027621][T18131] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3213'. [ 613.078114][T16254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 613.078143][T16254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 613.558505][T18140] FAULT_INJECTION: forcing a failure. [ 613.558505][T18140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.558672][T18140] CPU: 0 UID: 0 PID: 18140 Comm: syz.0.3216 Not tainted syzkaller #0 PREEMPT(full) [ 613.558723][T18140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.558744][T18140] Call Trace: [ 613.558755][T18140] [ 613.558768][T18140] dump_stack_lvl+0xe8/0x150 [ 613.558810][T18140] should_fail_ex+0x410/0x560 [ 613.558845][T18140] _copy_to_user+0x31/0xb0 [ 613.558999][T18140] simple_read_from_buffer+0xe1/0x170 [ 613.559040][T18140] proc_fail_nth_read+0x1bb/0x230 [ 613.559065][T18140] ? common_file_perm+0x20e/0x2b0 [ 613.559099][T18140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 613.559129][T18140] ? rw_verify_area+0x24a/0x4c0 [ 613.559168][T18140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 613.559193][T18140] vfs_read+0x213/0xa80 [ 613.559269][T18140] ? __pfx___mutex_lock+0x10/0x10 [ 613.559308][T18140] ? __pfx_vfs_read+0x10/0x10 [ 613.559349][T18140] ? __fget_files+0x2a/0x420 [ 613.559390][T18140] ? __fget_files+0x3a2/0x420 [ 613.559423][T18140] ? __fget_files+0x2a/0x420 [ 613.559463][T18140] ksys_read+0x150/0x270 [ 613.559490][T18140] ? __pfx_ksys_read+0x10/0x10 [ 613.559526][T18140] do_syscall_64+0x166/0x520 [ 613.559561][T18140] ? trace_irq_disable+0x3b/0x140 [ 613.559587][T18140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.559614][T18140] ? clear_bhb_loop+0x70/0xc0 [ 613.559644][T18140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.559670][T18140] RIP: 0033:0x7f3da935e98e [ 613.559709][T18140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 613.559731][T18140] RSP: 002b:00007f3daa319fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 613.559854][T18140] RAX: ffffffffffffffda RBX: 00007f3daa31a6c0 RCX: 00007f3da935e98e [ 613.559872][T18140] RDX: 000000000000000f RSI: 00007f3daa31a0a0 RDI: 0000000000000004 [ 613.559884][T18140] RBP: 00007f3daa31a090 R08: 0000000000000000 R09: 0000000000000000 [ 613.559898][T18140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.559910][T18140] R13: 00007f3da9626038 R14: 00007f3da9625fa0 R15: 00007ffdfa83ff18 [ 613.559945][T18140] [ 613.696893][T18120] udevd[18120]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 614.358883][T18141] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 614.777691][T18160] netlink: 'syz.2.3225': attribute type 1 has an invalid length. [ 614.792804][T18154] bridge1: entered promiscuous mode [ 614.794939][T18154] bridge1: entered allmulticast mode [ 614.943412][ T5632] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 614.959159][ T5632] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 614.970376][ T5632] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 614.988595][ T5632] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 615.003100][ T5632] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 615.299380][T18165] bond1: (slave gretap1): making interface the new active one [ 615.373498][T18165] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 615.825578][T18183] __nla_validate_parse: 6 callbacks suppressed [ 615.825601][T18183] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3228'. [ 615.944634][ T5632] Bluetooth: hci0: command 0x0c20 tx timeout [ 615.988915][ T5619] tipc: Resetting bearer [ 616.017936][T18180] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3227'. [ 616.156535][ T5619] tipc: Disabling bearer [ 616.174621][T18180] bridge_slave_1: left allmulticast mode [ 616.174653][T18180] bridge_slave_1: left promiscuous mode [ 616.174965][T18180] bridge0: port 2(bridge_slave_1) entered disabled state [ 616.211577][T18180] bridge_slave_0: left allmulticast mode [ 616.211610][T18180] bridge_slave_0: left promiscuous mode [ 616.211925][T18180] bridge0: port 1(bridge_slave_0) entered disabled state [ 616.465617][T18201] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3231'. [ 617.013715][T16260] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.014576][T16260] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.014613][T16260] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.059947][ T5632] Bluetooth: hci1: command tx timeout [ 617.287810][T18187] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 617.464501][T18226] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3234'. [ 617.605750][T16260] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.605796][T16260] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 617.605827][T16260] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 617.871298][T18236] netlink: 'syz.1.3237': attribute type 1 has an invalid length. [ 617.943228][T18239] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3237'. [ 618.095500][T16260] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.095536][T16260] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.095562][T16260] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 618.189262][T18245] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 618.237372][T18236] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3237'. [ 618.284158][T18167] wlan1 speed is unknown, defaulting to 1000 [ 618.307480][T18167] lo speed is unknown, defaulting to 1000 [ 618.342276][T18167] lo speed is unknown, defaulting to 1000 [ 618.574607][T16260] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.574652][T16260] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.574683][T16260] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 618.846278][T18255] netlink: 'syz.4.3240': attribute type 16 has an invalid length. [ 618.846306][T18255] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3240'. [ 618.846534][T18255] veth0_macvtap: entered allmulticast mode [ 619.140514][ T5632] Bluetooth: hci1: command tx timeout [ 619.300530][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 619.435459][T18273] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3247'. [ 620.264920][T18291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3249'. [ 620.285146][T16260] pim6reg527: left allmulticast mode [ 620.285338][T16260] dvmrp0: left allmulticast mode [ 620.285443][T16260] dvmrp1: left allmulticast mode [ 620.285535][T16260] dvmrp8: left allmulticast mode [ 620.375876][T18295] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3250'. [ 620.410208][T18297] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 620.996658][T18315] __nla_validate_parse: 1 callbacks suppressed [ 620.996681][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3253'. [ 621.221263][ T5632] Bluetooth: hci1: command tx timeout [ 621.222157][T18319] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3253'. [ 621.387415][ T5632] Bluetooth: hci5: command 0x0406 tx timeout [ 621.774616][T16260] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 621.926921][T16260] bond5 (unregistering): (slave bridge3): Releasing backup interface [ 621.997872][T16260] bond9 (unregistering): (slave bridge9): Releasing backup interface [ 622.023024][T16260] bond10 (unregistering): (slave bridge10): Releasing backup interface [ 622.092268][T16260] bond0 (unregistering): (slave bond7): Releasing backup interface [ 622.093365][T16260] bond0 (unregistering): Released all slaves [ 622.115096][T16260] bond1 (unregistering): Released all slaves [ 622.140565][T16260] bond2 (unregistering): Released all slaves [ 622.165623][T16260] bond3 (unregistering): Released all slaves [ 622.188661][T16260] bond4 (unregistering): Released all slaves [ 622.217802][T16260] bond5 (unregistering): Released all slaves [ 622.244223][T16260] bond6 (unregistering): Released all slaves [ 622.273956][T16260] bond7 (unregistering): Released all slaves [ 622.298458][T16260] bond8 (unregistering): Released all slaves [ 622.327821][T16260] bond9 (unregistering): Released all slaves [ 622.364161][T16260] bond10 (unregistering): Released all slaves [ 622.393287][T16260] bond11 (unregistering): Released all slaves [ 622.415748][T16260] bond12 (unregistering): Released all slaves [ 622.454520][T16260] bond13 (unregistering): Released all slaves [ 622.476576][T16260] bond14 (unregistering): Released all slaves [ 622.506045][T16260] bond15 (unregistering): Released all slaves [ 622.538749][T16260] bond16 (unregistering): Released all slaves [ 622.600166][T18315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 622.815860][T18315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 622.927751][T18326] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3254'. [ 622.955052][T18328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3255'. [ 622.955084][T18328] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3255'. [ 623.044553][ T5279] 8021q: adding VLAN 0 to HW filter on device eth1 [ 623.303654][T16260] tipc: Left network mode [ 623.303796][ T5634] Bluetooth: hci1: command tx timeout [ 624.556299][T18360] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3261'. [ 624.563465][T18360] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3261'. [ 624.563496][T18360] netlink: 292 bytes leftover after parsing attributes in process `syz.2.3261'. [ 624.652315][T18360] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3261'. [ 624.773526][T18365] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 625.506153][T18384] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3265'. [ 625.554232][T18387] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 626.780395][T18405] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3269'. [ 626.878673][ T5279] 8021q: adding VLAN 0 to HW filter on device eth2 [ 626.998628][T18406] bond1: Unable to set peer notification delay as MII monitoring is disabled [ 627.014380][T18406] bond1 (unregistering): Released all slaves [ 627.124048][T18405] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3269'. [ 627.310449][T18418] netlink: 'syz.2.3272': attribute type 1 has an invalid length. [ 627.310475][T18418] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3272'. [ 627.657982][T18442] netlink: 'syz.4.3274': attribute type 1 has an invalid length. [ 628.136852][T18167] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.136973][T18167] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.137160][T18167] bridge_slave_0: entered allmulticast mode [ 628.169358][T18167] bridge_slave_0: entered promiscuous mode [ 628.358019][T18167] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.358154][T18167] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.358391][T18167] bridge_slave_1: entered allmulticast mode [ 628.385751][T18167] bridge_slave_1: entered promiscuous mode [ 628.641848][T18457] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3278'. [ 628.834729][T18167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.947143][T18167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 629.226863][T18465] tipc: Started in network mode [ 629.226901][T18465] tipc: Node identity 5e158d71db1a, cluster identity 4711 [ 629.227195][T18465] tipc: Enabled bearer , priority 0 [ 629.309318][T18473] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3281'. [ 629.537523][T18471] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3279'. [ 629.792758][T18465] tipc: Resetting bearer [ 629.816778][T18167] team0: Port device team_slave_0 added [ 629.817049][T18467] syzkaller0: entered promiscuous mode [ 629.817068][T18467] syzkaller0: entered allmulticast mode [ 629.891123][T16260] hsr_slave_0: left promiscuous mode [ 629.917780][T16260] hsr_slave_1: left promiscuous mode [ 630.000795][T16260] veth1_vlan: left promiscuous mode [ 630.002456][T16260] veth0_vlan: left promiscuous mode [ 630.924691][T18488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3285'. [ 631.676492][T18458] tipc: Resetting bearer [ 631.758165][T18458] tipc: Disabling bearer [ 631.798774][T18167] team0: Port device team_slave_1 added [ 631.806323][ T944] tipc: Node number set to 2232388977 [ 631.855262][T18488] x9: renamed from bridge_slave_0 (while UP) [ 631.880310][ T5279] 8021q: adding VLAN 0 to HW filter on device eth3 [ 632.146382][T18167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 632.146400][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.146425][T18167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 632.190142][T18167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 632.190197][T18167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.190313][T18167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 632.387942][T18510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3290'. [ 632.525991][T18167] hsr_slave_0: entered promiscuous mode [ 632.541224][T18167] hsr_slave_1: entered promiscuous mode [ 632.810648][T16260] IPVS: stop unused estimator thread 0... [ 633.515171][T18546] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3295'. [ 633.617637][T18549] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3299'. [ 633.765918][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3300'. [ 634.363216][T18572] rdma_op ffff888067823a38 conn xmit_rdma 0000000000000000 [ 634.515187][T18570] li: renamed from lo [ 634.663375][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.663976][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.664391][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.664803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.665233][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.665629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.666040][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.666479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.666903][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.667306][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 635.639091][T18587] tipc: Started in network mode [ 635.639129][T18587] tipc: Node identity ac1414aa, cluster identity 4711 [ 635.654776][T18587] tipc: New replicast peer: 172.20.20.187 [ 635.668077][T18587] tipc: Enabled bearer , priority 10 [ 636.080233][T18613] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3314'. [ 636.196806][T18615] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3313'. [ 636.542017][T18624] IPVS: set_ctl: invalid protocol: 4 0.0.0.0:20002 [ 636.769678][ T5740] tipc: Node number set to 2886997162 [ 637.358012][T18640] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 637.367916][T18640] sctp: [Deprecated]: syz.1.3319 (pid 18640) Use of int in maxseg socket option. [ 637.367916][T18640] Use struct sctp_assoc_value instead [ 637.825840][T18638] syzkaller1: entered promiscuous mode [ 637.825868][T18638] syzkaller1: entered allmulticast mode [ 637.905704][T18167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 638.002617][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 638.005955][T18167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 638.053784][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 638.058846][T18167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 638.116895][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 638.118161][T18167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 638.319023][T18167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 638.563674][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058adf000: rx timeout, send abort [ 638.563939][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888058adf000: 0x10000: (3) A timeout occurred and this is the connection abort to close the session. [ 639.497407][T18683] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3325'. [ 639.669558][ C1] net_ratelimit: 10900 callbacks suppressed [ 639.669582][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.670003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.670408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.670809][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.671222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.671625][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.672023][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.672415][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.672803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.673210][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.939198][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3326'. [ 639.956708][T18167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 640.105359][T18167] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.156315][T16255] bridge0: port 1(bridge_slave_0) entered blocking state [ 640.156431][T16255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 640.240962][T16255] bridge0: port 2(bridge_slave_1) entered blocking state [ 640.241073][T16255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.594083][T18696] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3327'. [ 640.642161][T18699] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3329'. [ 640.781311][T18690] team0 (unregistering): Port device team_slave_0 removed [ 641.037573][T18690] team0 (unregistering): Port device team_slave_1 removed [ 641.811356][T18712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3332'. [ 642.881983][T18750] veth1_macvtap: Caught tx_queue_len zero misconfig [ 642.945324][T18750] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3340'. [ 643.131720][T18754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3341'. [ 643.525782][T18757] netlink: 'syz.1.3339': attribute type 14 has an invalid length. [ 643.525810][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 643.777740][T18757] netlink: 'syz.1.3339': attribute type 14 has an invalid length. [ 643.777765][T18757] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3339'. [ 643.843010][ T84] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.844111][ T84] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.844159][ T84] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 643.844201][ T84] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 644.197041][T18776] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3346'. [ 644.537138][T18785] __nla_validate_parse: 1 callbacks suppressed [ 644.537164][T18785] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3347'. [ 644.679816][ C1] net_ratelimit: 11266 callbacks suppressed [ 644.679841][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.680313][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.680718][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.681241][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.681670][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.682085][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.682499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.682956][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.683440][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.683866][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.283363][T18167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 645.838868][T18167] veth0_vlan: entered promiscuous mode [ 645.885975][T18807] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3353'. [ 645.929729][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3353'. [ 645.953223][T18167] veth1_vlan: entered promiscuous mode [ 646.047610][T18807] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3353'. [ 649.689590][ C0] net_ratelimit: 11065 callbacks suppressed [ 649.689616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.690509][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.691425][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.691879][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.691947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.692413][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.692908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.693353][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.693377][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.693841][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.024821][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 652.679476][ C0] sched: DL replenish lagged too much [ 654.699681][ C0] net_ratelimit: 14564 callbacks suppressed [ 654.699707][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.700175][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.700530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.700672][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.700980][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 654.701134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.701629][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.702464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.702912][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 654.703395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.709516][ C0] net_ratelimit: 14070 callbacks suppressed [ 659.709543][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.710001][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.710522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.711008][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.711104][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 659.711478][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.711633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 659.711925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.712386][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 659.713160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.720367][ C0] net_ratelimit: 14006 callbacks suppressed [ 664.720399][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.720997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.720997][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.721636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.721757][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 664.722158][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.722613][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.723173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 664.723330][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 664.723667][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.729761][ C0] net_ratelimit: 13011 callbacks suppressed [ 669.729787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.729902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.730329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.730365][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 669.730809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.731312][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.731815][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.732008][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 669.732291][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 669.732471][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 674.739843][ C0] net_ratelimit: 15272 callbacks suppressed [ 674.739869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.740331][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.740373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.740800][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 674.740808][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.741248][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.741698][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.742150][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 674.742271][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 674.742614][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.749810][ C0] net_ratelimit: 15640 callbacks suppressed [ 679.749837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.750153][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.750304][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.750616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 679.750818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.751262][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.751719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.752086][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 679.752182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 679.752510][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 684.759595][ C0] net_ratelimit: 15530 callbacks suppressed [ 684.759595][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.759619][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.760034][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.760052][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 684.760443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.760876][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.761313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.761525][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 684.761725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 684.761972][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 689.769700][ C1] net_ratelimit: 15479 callbacks suppressed [ 689.769727][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 689.769759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 689.771314][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.771768][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 689.773339][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.773818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 689.775245][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.775699][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 689.777221][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 689.777667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 694.779522][ C0] net_ratelimit: 15621 callbacks suppressed [ 694.779546][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.779544][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 694.780016][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.780020][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 694.780489][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.780933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.781388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.781482][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 694.781867][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 694.781913][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 699.789480][ C0] net_ratelimit: 15695 callbacks suppressed [ 699.789506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.789539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.789957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 699.789981][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.790436][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.790886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.791305][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 699.791404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 699.791742][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 699.791890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.799879][ C0] net_ratelimit: 15215 callbacks suppressed [ 704.799910][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.799908][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.800559][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.800559][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 704.801058][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.801555][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.802063][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 704.802064][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 704.802515][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 704.802535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.809562][ C0] net_ratelimit: 14161 callbacks suppressed [ 709.809587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.810010][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.810040][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.810418][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 709.810548][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.811006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.811463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.811813][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 709.811910][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.812224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 714.819525][ C0] net_ratelimit: 13873 callbacks suppressed [ 714.819554][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.820090][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.820525][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.820631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.821068][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 714.821170][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.821703][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.822281][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 714.822820][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 714.822820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.147555][T17299] Bluetooth: hci4: command 0x0406 tx timeout [ 719.829499][ C0] net_ratelimit: 13741 callbacks suppressed [ 719.829529][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.830002][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.830418][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.830772][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 719.830820][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.831239][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 719.831316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.831752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.832171][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 719.832859][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.839552][ C1] net_ratelimit: 13581 callbacks suppressed [ 724.839579][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.839663][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.840032][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 724.840226][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.840748][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.841228][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.841553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 724.841766][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 724.842003][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 724.842716][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.849889][ C0] net_ratelimit: 14005 callbacks suppressed [ 729.849915][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.850433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.850469][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.850889][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 729.850976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.851460][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.851928][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.852415][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 729.852416][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 729.852912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.859587][ C0] net_ratelimit: 15884 callbacks suppressed [ 734.859611][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.860046][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 734.860084][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.860462][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 734.860527][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.860961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.861397][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.861854][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 734.861864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 734.862261][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 739.870018][ C0] net_ratelimit: 15378 callbacks suppressed [ 739.870041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.870494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.870520][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.870948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.870954][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 739.871383][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.871820][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.872242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 739.872463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 739.872778][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.879559][ C0] net_ratelimit: 15511 callbacks suppressed [ 744.879585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.880178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.880380][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 744.880665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.880859][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 744.881104][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.881516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.881989][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 744.882378][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 744.882431][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.889466][ C1] net_ratelimit: 15832 callbacks suppressed [ 749.889492][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.889611][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.889999][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 749.890095][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.890583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.891052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.891585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.891603][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 749.892066][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 749.892077][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ae:16:a9:35:7c:5c, vlan:0) [ 753.739408][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 753.746433][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P18814/1:b..l [ 753.754530][ C1] rcu: (detected by 1, t=10503 jiffies, g=99217, q=2438 ncpus=2) [ 753.762393][ C1] task:syz.4.3355 state:R running task stack:25928 pid:18814 tgid:18812 ppid:5618 task_flags:0x400140 flags:0x00080000 [ 753.775965][ C1] Call Trace: [ 753.779286][ C1] [ 753.782283][ C1] __schedule+0x17db/0x58f0 [ 753.786855][ C1] ? lock_acquire+0x115/0x350 [ 753.791589][ C1] ? __lock_acquire+0x747/0x2de0 [ 753.796579][ C1] ? __pfx___schedule+0x10/0x10 [ 753.801504][ C1] ? __lock_acquire+0x747/0x2de0 [ 753.806501][ C1] preempt_schedule_irq+0x4b/0x90 [ 753.811599][ C1] irqentry_exit+0x14f/0x910 [ 753.816253][ C1] ? trace_irq_disable+0x3b/0x140 [ 753.821334][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 753.827369][ C1] RIP: 0010:deref_stack_reg+0x183/0x220 [ 753.832976][ C1] Code: 39 c4 0f 96 c1 4d 39 c6 0f 97 c2 20 c2 20 ca 80 fa 01 75 46 49 8d 40 08 4c 39 e0 0f 97 c1 4c 39 f0 0f 96 c0 20 c8 3c 01 75 30 <4c> 89 c7 49 89 f7 e8 12 07 00 00 49 89 c6 48 8b 5c 24 08 48 89 d8 [ 753.852640][ C1] RSP: 0018:ffffc90005fdeb78 EFLAGS: 00000202 [ 753.858760][ C1] RAX: ffffc90005fdfb01 RBX: 1ffff92000bfbd8d RCX: 0000000000000001 [ 753.866779][ C1] RDX: ffffc90005fdeca8 RSI: dffffc0000000000 RDI: ffffc90005fdec78 [ 753.874809][ C1] RBP: ffffc90005fd8000 R08: ffffc90005fdfb30 R09: 0000000000000000 [ 753.882836][ C1] R10: ffffc90005fdecb8 R11: fffff52000bfbd99 R12: 1ffff92000bfbd8e [ 753.890954][ C1] R13: 1ffff92000bfbd8f R14: ffffc90005fe0000 R15: ffffc90005fdec68 [ 753.899018][ C1] unwind_next_frame+0x19bd/0x2550 [ 753.904210][ C1] ? ____sys_sendmsg+0x54e/0x850 [ 753.909218][ C1] ? unwind_next_frame+0x8f/0x2550 [ 753.916261][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 753.922486][ C1] arch_stack_walk+0x11b/0x150 [ 753.927334][ C1] ? ___sys_sendmsg+0x2a5/0x360 [ 753.932273][ C1] stack_trace_save+0xa9/0x100 [ 753.937099][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 753.942542][ C1] kasan_save_track+0x3e/0x80 [ 753.947271][ C1] ? kasan_save_track+0x3e/0x80 [ 753.952175][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 753.956992][ C1] ? __kmalloc_noprof+0x36b/0x720 [ 753.962064][ C1] ? nla_strdup+0x9d/0x140 [ 753.966565][ C1] ? nf_tables_newchain+0x1aba/0x28b0 [ 753.972004][ C1] ? nfnetlink_rcv+0x1288/0x28c0 [ 753.977004][ C1] ? netlink_unicast+0x7bd/0x940 [ 753.982001][ C1] ? netlink_sendmsg+0x813/0xb40 [ 753.986986][ C1] ? sock_sendmsg_nosec+0x13a/0x180 [ 753.992229][ C1] ? ____sys_sendmsg+0x54e/0x850 [ 753.997274][ C1] __kasan_kmalloc+0x93/0xb0 [ 754.001924][ C1] __kmalloc_noprof+0x36b/0x720 [ 754.006823][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 754.011885][ C1] ? nla_strdup+0x9d/0x140 [ 754.016352][ C1] ? nla_strdup+0x9d/0x140 [ 754.020828][ C1] nla_strdup+0x9d/0x140 [ 754.025134][ C1] nf_tables_newchain+0x1aba/0x28b0 [ 754.030406][ C1] ? __pfx_nf_tables_newchain+0x10/0x10 [ 754.036041][ C1] ? nfnl_pernet+0x23/0x240 [ 754.040625][ C1] ? __nla_parse+0x40/0x60 [ 754.045114][ C1] nfnetlink_rcv+0x1288/0x28c0 [ 754.050004][ C1] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 754.055205][ C1] ? ref_tracker_free+0x689/0x830 [ 754.060318][ C1] ? skb_clone+0x246/0x3a0 [ 754.064804][ C1] ? __netlink_deliver_tap+0x811/0x860 [ 754.070330][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 754.075619][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 754.080880][ C1] netlink_unicast+0x7bd/0x940 [ 754.085726][ C1] netlink_sendmsg+0x813/0xb40 [ 754.090553][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.095912][ C1] ? apparmor_socket_sendmsg+0x98/0x360 [ 754.101510][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 754.107367][ C1] sock_sendmsg_nosec+0x13a/0x180 [ 754.112452][ C1] ____sys_sendmsg+0x54e/0x850 [ 754.117276][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 754.122805][ C1] ? import_iovec+0x73/0xa0 [ 754.127469][ C1] ___sys_sendmsg+0x2a5/0x360 [ 754.132208][ C1] ? __lock_acquire+0x747/0x2de0 [ 754.137236][ C1] ? __pfx____sys_sendmsg+0x10/0x10 [ 754.142507][ C1] ? futex_wait+0x2a2/0x390 [ 754.147095][ C1] ? __fget_files+0x2a/0x420 [ 754.151742][ C1] ? __fget_files+0x3a2/0x420 [ 754.156493][ C1] __x64_sys_sendmsg+0x1b1/0x290 [ 754.161492][ C1] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 754.167043][ C1] do_syscall_64+0x166/0x520 [ 754.171776][ C1] ? trace_irq_disable+0x3b/0x140 [ 754.176849][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.182938][ C1] ? clear_bhb_loop+0x70/0xc0 [ 754.187645][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.193549][ C1] RIP: 0033:0x7f24d299e159 [ 754.197973][ C1] RSP: 002b:00007f24d38c2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 754.206400][ C1] RAX: ffffffffffffffda RBX: 00007f24d2c25fa0 RCX: 00007f24d299e159 [ 754.214495][ C1] RDX: 0000000004000010 RSI: 0000200000000100 RDI: 0000000000000003 [ 754.222584][ C1] RBP: 00007f24d2a3506b R08: 0000000000000000 R09: 0000000000000000 [ 754.230683][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 754.238793][ C1] R13: 00007f24d2c26038 R14: 00007f24d2c25fa0 R15: 00007fff88a81d48 [ 754.246808][ C1] [ 754.249887][ C1] rcu: rcu_preempt kthread starved for 1410 jiffies! g99217 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 754.260891][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 754.270906][ C1] rcu: RCU grace-period kthread stack dump: [ 754.276913][ C1] task:rcu_preempt state:R running task stack:28104 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 754.290471][ C1] Call Trace: [ 754.293799][ C1] [ 754.296781][ C1] __schedule+0x17db/0x58f0 [ 754.301348][ C1] ? __lock_acquire+0x747/0x2de0 [ 754.306352][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 754.311528][ C1] ? __pfx___schedule+0x10/0x10 [ 754.316477][ C1] ? lock_acquire+0x115/0x350 [ 754.321236][ C1] ? schedule+0x90/0x2b0 [ 754.325555][ C1] schedule+0x164/0x2b0 [ 754.329777][ C1] schedule_timeout+0x152/0x2c0 [ 754.334677][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 754.340104][ C1] ? __pfx_process_timeout+0x10/0x10 [ 754.345492][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 754.351355][ C1] ? prepare_to_swait_event+0x322/0x350 [ 754.356979][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 754.361891][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 754.368099][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 754.373432][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 754.378698][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 754.384564][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 754.389209][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 754.394456][ C1] ? __kthread_parkme+0x71/0x1f0 [ 754.399466][ C1] ? __kthread_parkme+0x199/0x1f0 [ 754.404551][ C1] kthread+0x38b/0x480 [ 754.408671][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 754.414786][ C1] ? __pfx_kthread+0x10/0x10 [ 754.419424][ C1] ret_from_fork+0x514/0xb70 [ 754.424066][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 754.429321][ C1] ? __switch_to+0xc89/0x1420 [ 754.434164][ C1] ? __pfx_kthread+0x10/0x10 [ 754.438814][ C1] ret_from_fork_asm+0x1a/0x30 [ 754.443667][ C1] [ 754.446735][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 754.453235][ C1] Sending NMI from CPU 1 to CPUs 0: [ 754.458606][ C0] NMI backtrace for cpu 0 [ 754.458627][ C0] CPU: 0 UID: 0 PID: 4973 Comm: klogd Not tainted syzkaller #0 PREEMPT(full) [ 754.458649][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.458661][ C0] RIP: 0010:match_held_lock+0x0/0x120 [ 754.458695][ C0] Code: 67 48 0f b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f e9 05 00 03 00 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 57 41 56 53 bb 01 00 00 00 48 39 77 10 0f 84 c6 00 00 00 0f b7 [ 754.458711][ C0] RSP: 0018:ffffc90000006df0 EFLAGS: 00000006 [ 754.458729][ C0] RAX: 0000000000000003 RBX: 000000000000000a RCX: 8000000000000100 [ 754.458742][ C0] RDX: ffffc90000006f48 RSI: ffffffff8ed5c8a0 RDI: ffff88807f13ab40 [ 754.458757][ C0] RBP: ffff88807f13ab40 R08: ffffc90002f87678 R09: 0000000000000000 [ 754.458770][ C0] R10: ffffc90000006f58 R11: fffff52000000ded R12: 0000000000000002 [ 754.458784][ C0] R13: 0000000000000002 R14: ffffffff8ed5c8a0 R15: ffff88807f139f40 [ 754.458797][ C0] FS: 00007ff5ebd4fc80(0000) GS:ffff888124cc7000(0000) knlGS:0000000000000000 [ 754.458814][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 754.458827][ C0] CR2: 00007ffdcb37afa8 CR3: 000000007f5ea000 CR4: 00000000003526f0 [ 754.458844][ C0] Call Trace: [ 754.458851][ C0] [ 754.458858][ C0] lock_release+0x10c/0x3c0 [ 754.458881][ C0] ? unwind_next_frame+0x8f/0x2550 [ 754.458905][ C0] ? unwind_next_frame+0x8f/0x2550 [ 754.458926][ C0] unwind_next_frame+0x1baa/0x2550 [ 754.458950][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 754.458976][ C0] ? unwind_next_frame+0x8f/0x2550 [ 754.458998][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 754.459016][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 754.459036][ C0] arch_stack_walk+0x11b/0x150 [ 754.459060][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 754.459081][ C0] ? skb_clone+0x212/0x3a0 [ 754.459111][ C0] stack_trace_save+0xa9/0x100 [ 754.459130][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 754.459146][ C0] ? __lock_acquire+0x747/0x2de0 [ 754.459171][ C0] kasan_save_track+0x3e/0x80 [ 754.459191][ C0] ? kasan_save_track+0x3e/0x80 [ 754.459210][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 754.459231][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 754.459248][ C0] ? skb_clone+0x212/0x3a0 [ 754.459275][ C0] ? br_flood+0x3c0/0x8d0 [ 754.459300][ C0] ? br_handle_frame_finish+0x1119/0x1950 [ 754.459318][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 754.459334][ C0] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 754.459355][ C0] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 754.459377][ C0] ? br_handle_frame+0x1329/0x1600 [ 754.459394][ C0] ? __netif_receive_skb_core+0x989/0x30c0 [ 754.459416][ C0] ? process_backlog+0x727/0x18b0 [ 754.459438][ C0] ? __napi_poll+0xaa/0x330 [ 754.459458][ C0] ? net_rx_action+0x61d/0xf50 [ 754.459480][ C0] ? handle_softirqs+0x226/0x860 [ 754.459504][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 754.459527][ C0] ? irq_exit_rcu+0x9/0x30 [ 754.459550][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 754.459593][ C0] __kasan_slab_alloc+0x6c/0x80 [ 754.459623][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 754.459640][ C0] ? skb_clone+0x212/0x3a0 [ 754.459668][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 754.459685][ C0] ? skb_clone+0x212/0x3a0 [ 754.459716][ C0] skb_clone+0x212/0x3a0 [ 754.459745][ C0] br_flood+0x3c0/0x8d0 [ 754.459777][ C0] br_handle_frame_finish+0x1119/0x1950 [ 754.459801][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 754.459820][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 754.459844][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 754.459867][ C0] ? nf_hook_slow+0x176/0x220 [ 754.459891][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 754.459909][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 754.459926][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 754.459950][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 754.459969][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 754.459987][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 754.460010][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 754.460031][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 754.460052][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 754.460073][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 754.460093][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 754.460116][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 754.460136][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 754.460157][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 754.460174][ C0] br_handle_frame+0x1329/0x1600 [ 754.460197][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 754.460216][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 754.460234][ C0] ? ip_local_deliver_finish+0x2ae/0x6f0 [ 754.460261][ C0] ? ip_local_deliver_finish+0x449/0x6f0 [ 754.460291][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 754.460319][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 754.460343][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 754.460377][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 754.460398][ C0] ? ip_local_deliver+0x113/0x190 [ 754.460426][ C0] ? NF_HOOK+0x336/0x3c0 [ 754.460460][ C0] ? process_backlog+0x3de/0x18b0 [ 754.460482][ C0] ? process_backlog+0x3de/0x18b0 [ 754.460507][ C0] process_backlog+0x727/0x18b0 [ 754.460532][ C0] ? process_backlog+0x3de/0x18b0 [ 754.460562][ C0] __napi_poll+0xaa/0x330 [ 754.460585][ C0] net_rx_action+0x61d/0xf50 [ 754.460620][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 754.460652][ C0] ? lapic_next_event+0x11/0x20 [ 754.460677][ C0] handle_softirqs+0x226/0x860 [ 754.460703][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 754.460730][ C0] __irq_exit_rcu+0xcb/0x220 [ 754.460754][ C0] irq_exit_rcu+0x9/0x30 [ 754.460778][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 754.460802][ C0] [ 754.460809][ C0] [ 754.460816][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 754.460835][ C0] RIP: 0010:qlist_free_all+0x1f/0x100 [ 754.460857][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 41 55 41 54 53 48 8b 2f 48 85 ed 0f 84 d3 00 00 00 49 89 f6 48 89 fb 45 31 ed <49> 89 ef 4d 89 f4 4d 85 f6 75 42 4c 8b 25 2f 0c 36 0c 4c 89 ff e8 [ 754.460873][ C0] RSP: 0018:ffffc90002f87730 EFLAGS: 00000282 [ 754.460889][ C0] RAX: 935ac6ec5be46c00 RBX: ffffc90002f87768 RCX: 000000020010000b [ 754.460903][ C0] RDX: 000000020010000c RSI: ffffea0001315700 RDI: ffff888140487c80 [ 754.460917][ C0] RBP: ffff88804c55a280 R08: 0000000000000000 R09: ffffffff8238033e [ 754.460931][ C0] R10: dffffc0000000000 R11: fffffbfff20f4c90 R12: ffff888140487c80 [ 754.460945][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88804c55cd00 [ 754.460961][ C0] ? qlist_free_all+0x8e/0x100 [ 754.460986][ C0] kasan_quarantine_reduce+0x148/0x160 [ 754.461008][ C0] __kasan_kmalloc+0x22/0xb0 [ 754.461037][ C0] __kmalloc_node_track_caller_noprof+0x4b4/0x720 [ 754.461058][ C0] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 754.461079][ C0] ? alloc_skb_with_frags+0xc6/0x760 [ 754.461106][ C0] ? alloc_skb_with_frags+0xc6/0x760 [ 754.461134][ C0] __alloc_skb+0x2c1/0x7a0 [ 754.461160][ C0] alloc_skb_with_frags+0xc6/0x760 [ 754.461192][ C0] sock_alloc_send_pskb+0x878/0x990 [ 754.461218][ C0] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 754.461238][ C0] ? sock_def_readable+0xae/0x550 [ 754.461260][ C0] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 754.461289][ C0] unix_dgram_sendmsg+0x4da/0x17b0 [ 754.461321][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 754.461343][ C0] ? aa_sock_msg_perm+0x129/0x210 [ 754.461371][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 754.461393][ C0] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 754.461413][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 754.461435][ C0] __sys_sendto+0x408/0x5a0 [ 754.461458][ C0] ? bpf_lsm_capable+0x9/0x20 [ 754.461479][ C0] ? __pfx___sys_sendto+0x10/0x10 [ 754.461508][ C0] ? ktime_get+0x1f5/0x220 [ 754.461533][ C0] ? rcu_is_watching+0x16/0xb0 [ 754.461559][ C0] __x64_sys_sendto+0xde/0x100 [ 754.461585][ C0] do_syscall_64+0x166/0x520 [ 754.461621][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.461640][ C0] ? clear_bhb_loop+0x70/0xc0 [ 754.461661][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.461680][ C0] RIP: 0033:0x7ff5ebe9f407 [ 754.461697][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 754.461713][ C0] RSP: 002b:00007ffc57067750 EFLAGS: 00000202 ORIG_RAX: 000000000000002c [ 754.461732][ C0] RAX: ffffffffffffffda RBX: 00007ff5ebd4fc80 RCX: 00007ff5ebe9f407 [ 754.461746][ C0] RDX: 000000000000005b RSI: 00007ffc57067890 RDI: 0000000000000003 [ 754.461758][ C0] RBP: 00007ffc57067cc0 R08: 0000000000000000 R09: 0000000000000000 [ 754.461770][ C0] R10: 0000000000004000 R11: 0000000000000202 R12: 00007ffc57067cd8 [ 754.461783][ C0] R13: 00007ffc57067890 R14: 0000000000000040 R15: 00007ffc57067890 [ 754.461805][ C0] [ 754.900491][ C0] net_ratelimit: 13023 callbacks suppressed [ 754.900555][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.901727][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.902928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.904112][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.905322][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.906582][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.907790][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.909048][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.910440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 754.911646][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)