last executing test programs: 4.718179307s ago: executing program 1 (id=8476): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@gettaction={0x44, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffff0001}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x63}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x20040818) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000bf0000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f00000003c0)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48, 0x83, 0x0, 0x80000001}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES16=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22e8a65c15}, 0x4008840) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3.845446723s ago: executing program 1 (id=8484): syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000300)=ANY=[@ANYRESOCT=r1, @ANYRES32=0x41424344, @ANYRES32=r1, @ANYBLOB="b400000090783c000a0300050a0000000007ffffff0008d58838068b910000009d122352b0747d2fe0114005c30565bb937faef2624a158852cff5fc7d40b2f1dd58a24a96125c9974061319ca89465c80a12a67d5d655dc5b9a24d4e578ae91c0c76cd0eceef7bd99f6a30000000000000000"], 0x4e) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000bc0)}}], 0x1, 0x400c011) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x60, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x34, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x8}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x60}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xfff1}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x6, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x4, 0x206, 0x4}]}}]}}]}, 0x5c}}, 0x24040084) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) unshare(0x2a060400) 3.111963306s ago: executing program 2 (id=8486): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200000000fe180000000000000000000000000000009500040000000000360a0200000000001801000020207825fffffffd002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.994215951s ago: executing program 0 (id=8487): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r0 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r0, 0x0, 0x24008004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r1, &(0x7f0000000000), &(0x7f0000000600)=@udp=r2, 0x2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r3, r5}, 0x14) syz_emit_ethernet(0xd81, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0) 2.847496796s ago: executing program 2 (id=8489): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0x8}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r8) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc3ffffff}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r11}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r13 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r12, r14, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x6d}}, 0x30) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, 0x0, 0x20008044) syz_emit_ethernet(0x11, &(0x7f00000009c0)={@random="000000e3ff00", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xc}, @void, {@mpls_uc={0x8847, {[], @llc={@llc={0xfc, 0x2, "02"}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56441, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r15, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfff, 0x7, 0x5, 0x5, 0xfffffdff, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x9, 0xfffd, 0x5, 0x96, 0xfff, 0xc}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) 2.262155571s ago: executing program 1 (id=8492): socket(0xa, 0x3, 0xff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_delrule={0x24, 0x21, 0x9, 0x0, 0x20000000, {0x2, 0x80}, [@FRA_DST={0x8, 0x1, @empty}]}, 0x24}, 0x1, 0x0, 0x0, 0x4001}, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x77c, @empty, 0x1}, 0x1c) listen(r1, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000700)=0x2000008, 0x4) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r3, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb01001800000000000000700000007000000002000000ffffffff0000000e0000000000000000000000000600000d00000000000000000000000b00000000000000000000000000000001000000000000000003000000fdfffffffcffffff000000000000000000000009000000000000000000000009040000000000000000000009060000000000106670d7f0773ab389c6173b6efeaada78256e6fb1a4c1c423606b50def63d091426221d5e4320f677cb618c0f3a0484e424"], 0x0, 0x8a}, 0x28) r5 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x90, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000480), &(0x7f0000000300), 0x8, 0x55, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000740)={r6, 0x1, 0x6}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r7, 0x10040) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) accept$phonet_pipe(r4, &(0x7f0000000400), &(0x7f0000000440)=0x10) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xfffe, 0x0, 0x95, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x8, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x5, 0x400055}]}}}}}}}, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="128b3b8a2c5102e4013618666fa3bb497d", 0x11}], 0x1}], 0x1, 0x600008d0) recvmmsg(0xffffffffffffffff, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x11}], 0x1, 0x40000140, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28) 2.261645326s ago: executing program 4 (id=8493): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000300000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.18529476s ago: executing program 0 (id=8494): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x2, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r2, @ANYBLOB="0100000002"], 0x40) unshare(0x28000600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r3}, &(0x7f0000000780)=0x20, &(0x7f00000007c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r4, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x10, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) sendmsg$kcm(r1, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff3556b3b598b353011a5b90650042e2dacdc165ecece4e6be1862e2bdacd2737d00ad6f9f030000005e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f8049f260c603dbc317f54b901ee80eae132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x24008000) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x0, 0x4, 0x3, 0x25dfdbfb, {0x3d}}, 0x14}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c040) 2.163554781s ago: executing program 4 (id=8495): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$inet(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) pipe(0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r0, &(0x7f0000000000), &(0x7f0000000600)=@udp, 0x2}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r1, r3}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000700)={@local, @remote, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0x10, 0x2b, 0x0, @private2, @local, {[], {0x2100, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x6, 0x100, @val=0x80}}}}}}}}, 0x0) 1.997253199s ago: executing program 3 (id=8496): r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @default}, [@bcast, @null, @null, @rose, @default, @remote, @remote, @default]}, &(0x7f0000000080)=0x80) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x30}}, @nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x2000000}, @vsock={0x28, 0x0, 0x0, @local}, 0xa4b1, 0x0, 0x0, 0x0, 0x8000, &(0x7f00000000c0)='veth0_to_bridge\x00', 0x3, 0x8, 0x1}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'ip6gre0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x4, 0xa, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, @private1, 0x7800, 0x40, 0x8, 0x4}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000380)=0x0, &(0x7f00000003c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000400)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x58, r1, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x9, '\x00', r6, 0xffffffffffffffff, 0x29c, 0x3, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x2, &(0x7f0000000940)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3}], &(0x7f0000000980)='GPL\x00', 0x68, 0x0, 0x0, 0x41000, 0x5a, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000009c0)={0x1, 0x9, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a00)=[0xffffffffffffffff], &(0x7f0000000a40)=[{0x2, 0x3, 0x8, 0x1}], 0x10, 0x7}, 0x94) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b40)={r3, 0x6, 0x20}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000b80), &(0x7f0000000bc0)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000cc0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c40), &(0x7f0000000c80)}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000e40)={{r0, &(0x7f0000000d00)='nicvf0\x00', 0x10482, &(0x7f0000000d40)={@align=0x7, {0xc6e, 0x93, 0x101, 0xf}}, 0x2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x5}, {[0xb5a4, 0xa, 0x9, 0x8]}, 0x5, 0x1e, &(0x7f0000000e00)=""/30}) r15 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000f00)=@bpf_ext={0x1c, 0x17, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xc0000000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0x8}, @map_fd={0x18, 0xb, 0x1, 0x0, r8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x63}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0xe76}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000740)='syzkaller\x00', 0x7, 0xe9, &(0x7f0000000780)=""/233, 0x41100, 0x4, '\x00', r4, 0x0, r9, 0x8, &(0x7f00000008c0)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000900)={0x0, 0x0, 0xa77c, 0x3}, 0x10, 0x2a1f8, r10, 0x0, &(0x7f0000000ec0)=[r11, r12, r13, r14], 0x0, 0x10, 0x3}, 0x94) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3000007, 0x10, r0, 0x2502000) openat$tun(0xffffffffffffff9c, &(0x7f0000000fc0), 0x221, 0x0) r16 = accept$packet(r0, 0x0, &(0x7f0000001000)) recvmmsg(r16, &(0x7f0000009480)=[{{&(0x7f0000001040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001100)=[{&(0x7f00000010c0)=""/22, 0x16}], 0x1, &(0x7f0000001140)=""/239, 0xef}, 0x7}, {{&(0x7f0000001240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001540)=[{&(0x7f00000012c0)=""/157, 0x9d}, {&(0x7f0000001380)=""/60, 0x3c}, {&(0x7f00000013c0)=""/80, 0x50}, {&(0x7f0000001440)=""/95, 0x5f}, {&(0x7f00000014c0)=""/99, 0x63}], 0x5, &(0x7f00000015c0)=""/99, 0x63}}, {{&(0x7f0000001640)=@phonet, 0x80, &(0x7f0000002840)=[{&(0x7f00000016c0)=""/1, 0x1}, {&(0x7f0000001700)=""/185, 0xb9}, {&(0x7f00000017c0)=""/104, 0x68}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x4, &(0x7f0000002880)=""/38, 0x26}, 0xd2}, {{&(0x7f00000028c0)=@hci, 0x80, &(0x7f0000003e40)=[{&(0x7f0000002940)=""/251, 0xfb}, {&(0x7f0000002a40)=""/233, 0xe9}, {&(0x7f0000002b40)=""/160, 0xa0}, {&(0x7f0000002c00)=""/4096, 0x1000}, {&(0x7f0000003c00)=""/167, 0xa7}, {&(0x7f0000003cc0)=""/108, 0x6c}, {&(0x7f0000003d40)=""/227, 0xe3}], 0x7, &(0x7f0000003ec0)=""/147, 0x93}, 0x4}, {{&(0x7f0000003f80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000006300)=[{&(0x7f0000004000)=""/57, 0x39}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/106, 0x6a}, {&(0x7f00000050c0)=""/4096, 0x1000}, {&(0x7f00000060c0)=""/235, 0xeb}, {&(0x7f00000061c0)=""/232, 0xe8}, {&(0x7f00000062c0)=""/47, 0x2f}], 0x7, &(0x7f0000006380)=""/234, 0xea}, 0xa8}, {{0x0, 0x0, &(0x7f00000064c0)=[{&(0x7f0000006480)=""/54, 0x36}], 0x1, &(0x7f0000006500)=""/63, 0x3f}, 0x6}, {{&(0x7f0000006540)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000006800)=[{&(0x7f00000065c0)=""/148, 0x94}, {&(0x7f0000006680)=""/230, 0xe6}, {&(0x7f0000006780)=""/39, 0x27}, {&(0x7f00000067c0)=""/34, 0x22}], 0x4, &(0x7f0000006840)=""/4, 0x4}, 0x9}, {{&(0x7f0000006880)=@phonet, 0x80, &(0x7f0000007e00)=[{&(0x7f0000006900)=""/51, 0x33}, {&(0x7f0000006940)=""/154, 0x9a}, {&(0x7f0000006a00)=""/10, 0xa}, {&(0x7f0000006a40)=""/78, 0x4e}, {&(0x7f0000006ac0)=""/4096, 0x1000}, {&(0x7f0000007ac0)=""/193, 0xc1}, {&(0x7f0000007bc0)=""/221, 0xdd}, {&(0x7f0000007cc0)=""/166, 0xa6}, {&(0x7f0000007d80)=""/94, 0x5e}], 0x9, &(0x7f0000007ec0)=""/206, 0xce}, 0x8}, {{&(0x7f0000007fc0)=@pptp={0x18, 0x2, {0x0, @private}}, 0x80, &(0x7f00000081c0)=[{&(0x7f0000008040)=""/106, 0x6a}, {&(0x7f00000080c0)=""/238, 0xee}], 0x2, &(0x7f0000008200)=""/4096, 0x1000}, 0xe}, {{&(0x7f0000009200)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000009340)=[{&(0x7f0000009280)=""/114, 0x72}, {&(0x7f0000009300)=""/60, 0x3c}], 0x2, &(0x7f0000009380)=""/228, 0xe4}, 0xff}], 0xa, 0x40000000, &(0x7f0000009700)={0x0, 0x989680}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r17, 0x89f2, &(0x7f0000009880)={'erspan0\x00', &(0x7f0000009780)={'gretap0\x00', r5, 0x0, 0x40, 0x4, 0x5, {{0x35, 0x4, 0x2, 0x16, 0xd4, 0x65, 0x0, 0x3, 0x2f, 0x0, @multicast2, @multicast2, {[@rr={0x7, 0x23, 0x66, [@multicast1, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast2, @remote, @broadcast, @local]}, @rr={0x7, 0xb, 0xe1, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0x7, 0xcb, [@private=0xa010100]}, @end, @cipso={0x86, 0x31, 0x2, [{0x6, 0x4, "fd7b"}, {0x5, 0x11, "09500ef49d4ef6d54bbfaaa9ec74e6"}, {0x7, 0x10, "c06a0a06b6cdcd439bc7e931a06d"}, {0x1, 0x6, "2791f35f"}]}, @timestamp_prespec={0x44, 0x34, 0x37, 0x3, 0x7, [{@local, 0xffff0001}, {@multicast2}, {@multicast1, 0x4}, {@remote, 0x1}, {@multicast1, 0x7}, {@broadcast, 0x7}]}, @ssrr={0x89, 0x23, 0xe0, [@dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @empty, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x2f}]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000009980)={&(0x7f0000009740), 0xc, &(0x7f0000009940)={&(0x7f00000098c0)={0x60, r1, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r18}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000) r19 = bpf$PROG_LOAD(0x5, &(0x7f0000009cc0)={0x11, 0x1c, &(0x7f00000099c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd4}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @ldst={0x0, 0x1, 0x4, 0x9, 0x0, 0x50, 0xffffffffffffffff}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r13}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @btf_id={0x18, 0x1afb36b98d9a2881, 0x3, 0x0, 0x2}]}, &(0x7f0000009ac0)='GPL\x00', 0x9, 0xcb, &(0x7f0000009b00)=""/203, 0x41000, 0x46, '\x00', r4, @fallback=0x30, r14, 0x8, &(0x7f0000009c00)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000009c40)={0x0, 0x1, 0x1, 0xc0}, 0x10, 0x0, r15, 0x0, &(0x7f0000009c80)=[r13, r0, r13, r11, r12, r8, r7, r7, r14], 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r14, 0x1, 0x32, &(0x7f0000009d80)=r19, 0x4) r20 = syz_genetlink_get_family_id$nl80211(&(0x7f0000009e00), r14) sendmsg$NL80211_CMD_START_P2P_DEVICE(r17, &(0x7f0000009ec0)={&(0x7f0000009dc0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000009e80)={&(0x7f0000009e40)={0x20, r20, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x19}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000890) r21 = syz_genetlink_get_family_id$mptcp(&(0x7f0000009f40), r17) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f000000a000)={'syztnl2\x00', &(0x7f0000009f80)={'ip6gre0\x00', 0x0, 0x29, 0x64, 0x4, 0x142e1fb2, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x8, 0x40, 0x3, 0xbd5}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r14, &(0x7f000000a140)={&(0x7f0000009f00)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f000000a100)={&(0x7f000000a040)={0x84, r21, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x8}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x84}}, 0x44000) 1.960762898s ago: executing program 2 (id=8497): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180a0000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000feffffff1800000000000000000000000000000195000000000000001801000020207825000000000a2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 1.94880555s ago: executing program 3 (id=8498): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) close(r0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001cc0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_BETA={0x8, 0x5, 0x3}, @TCA_PIE_ALPHA={0x8, 0x4, 0x12}]}}]}, 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a8020000180140003000000000000000000000000000100000004000200040001"], 0x40}}, 0x0) 1.896235544s ago: executing program 0 (id=8499): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000)=0x78, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000140)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x2f, &(0x7f0000000340)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x8, 0x71, 0x10, 0xb3, 0x2}, [@map_fd={0x18, 0x6, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x76}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_val={0x18, 0xb, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x10}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7c1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ldst={0x2, 0x0, 0x6, 0x4, 0x77196560a5a974fc, 0x8, 0x1}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.89468791s ago: executing program 4 (id=8500): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1080, 0x9, 0x5, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x9, 0x4, 0x2, 0x762, 0x3, 0x80, 0x3, 0x2b12, 0x100, 0x6, 0x1c04, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x80000000, 0x8, 0x79b, 0x2, 0x1, 0x7d, 0x8, 0x2, 0x7, 0xd, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x400a, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x5, 0x6, 0x9, 0x9, 0xb, 0x4009, 0x0, 0x4, 0xffffff01, 0x8, 0x752, 0x0, 0x1005, 0x5, 0x10001, 0x2, 0xffffffff, 0x6, 0x4, 0x9, 0x7ffffffe, 0xfdffffff, 0xfffffffe, 0x2, 0x84, 0x800100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0xffffffff, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x2, 0x2, 0x5, 0x1, 0x0, 0x0, 0x2, 0x40, 0x8, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) unshare(0x22020600) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000100000a20000000000a050000000000000000000100fffc0900010073797a300000000040000000030a210100000000000000000100ffff0900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000005f000000060a010400000000000000000100000024000480200001800700010072740000140002800800014000000014080002400000000308000b40000000000900010073797a30"], 0xd4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000001c0)={0x0, 0x1000, 0x3}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f00000005c0)={0x1, 0x2, @start={r2, 0x0, "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", "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"}, [0x7071, 0x400, 0x3, 0x6, 0x0, 0x10001, 0x10001, 0x4, 0x1ff, 0x7, 0x0, 0xfffffffffffffffe, 0xf5, 0x5, 0x200, 0xbcf, 0xffffffffffffffff, 0xa, 0x1, 0xffffffffffffffef, 0x100000000, 0x6d8, 0x100, 0x6, 0xffffffff, 0xfffffffffffffffa, 0x3e690763, 0x45c, 0x5, 0x9, 0x8, 0xd, 0x400, 0x9, 0x7fffffff, 0x4, 0x100000001, 0x7404efff, 0x4745, 0x7, 0x80000000, 0x1, 0x2, 0x7fffffffffffffff, 0x2, 0x9, 0x6, 0x96, 0x8, 0xef, 0x4, 0xfc, 0x2, 0x7, 0x5, 0x8, 0x2, 0x2, 0x7, 0x1, 0x0, 0x9, 0x1ff, 0x9]}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1.7396767s ago: executing program 0 (id=8501): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000fbffffff850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bca2000000000000a6020000f8fffffeb703000008080000b704000000000000850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0xfffffffffffffece, &(0x7f0000000540)="63ec33c929ba8600000000f0ffff", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c000280050021"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x1, 0xa}}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@empty}}, 0xe8) r5 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_RM_DEV(r2, 0x5000940b, &(0x7f0000000c00)={{r0}, "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"}) sendmsg$key(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x2, 0xd, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_x_policy={0x2, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x6, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@private1, @in6=@private1}}, @sadb_lifetime={0x4, 0x4}]}, 0xc0}}, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x3}]}}}]}, 0x38}}, 0x40) 1.700629999s ago: executing program 2 (id=8502): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000380)={"d6e8d79898c32918e0d69bc70cf1199d", 0x0, 0x0, {}, {0x4, 0x2f09}, 0x4, [0x7, 0xa, 0x2, 0x100000000, 0x0, 0x7, 0x8, 0x1557c16f, 0x8, 0x6, 0x5, 0x49da, 0x8000, 0x0, 0xf115, 0x7]}) (async) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000480)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r1, 0xc0c89425, &(0x7f00000004c0)={"62c99acc677b7e1f177bd22b0d7fffc5", r2, r3, {0x4, 0x8146}, {0x3, 0x6}, 0x8001, [0x5, 0xab, 0x1, 0x1, 0x3315, 0x9, 0x1, 0xb00000000000000, 0xa, 0x3ff, 0x0, 0x4, 0x7fff, 0x4, 0x9, 0xffffffffffffffff]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f0000000040)={r0, 0x0, 0x9, 0x6, 0x9, 0x1}) (async) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000faffffff8500000005000000bf09200000000000650901001c20692566000000ffffff80180100002020692500000000002020207b1a00fe00000000de9100000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000020000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000002000006000000000000", @ANYRES32=r7], 0x20}}, 0x4000) 1.67992388s ago: executing program 4 (id=8503): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000fd3f02000000000009000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="00000000008500000000000000"], &(0x7f00000002c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0xd02}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=ANY=[@ANYBLOB="c26238010000100001000000000000000000fc020000000000000000000000000000fc0200000000800000000000000000000000ecdf000000030000000000000000", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000640100fe00000000000000000000000000000000000000000000000000000000010000002000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000100000000000000000000800000000000000000000000000000000000000000020000000000000000000000020000734c00000000000000480002006362632873657270656e742900"/225], 0x138}}, 0x0) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0e00000004000000040000000a"], 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000aaaf000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000850000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000860000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb7030000e8ff0000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8801}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000ac0)=[{0x0}], 0x1}, 0xc854) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000040)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3}, 0xa) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x2, 0x338, 0x98, 0x140, 0xfeffffff, 0x1e8, 0x140, 0x2a0, 0x2a0, 0xffffffff, 0x2a0, 0x2a0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x8}, 0x0, 0x70, 0x98}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @loopback, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x66}}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00', @ipv4=@dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC=r11, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000580)="63eced8e46aa7ce5a833c9f7b942", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.586761399s ago: executing program 3 (id=8504): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) r1 = socket$inet(0x2, 0x3, 0x1) sendmsg$inet(r1, 0x0, 0x24008004) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000e80)=@filter={'filter\x00', 0xe, 0x2, 0x45c, [0x0, 0x200000000a00, 0x200000000a30, 0x200000000be6], 0x0, &(0x7f0000000080), &(0x7f0000000a00)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x1, [{0x11, 0x8, 0x600, 'bridge0\x00', 'batadv0\x00', '\x00', 'veth1_to_team\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0x0, 0xff], @random="9f2920bcd629", [0x0, 0x0, 0xff, 0x0, 0x0, 0xff], 0xae, 0x136, 0x186, [@connbytes={{'connbytes\x00', 0x0, 0x18}, {{[{0x5}], 0x0, 0x1}}}], [@common=@LED={'LED\x00', 0x28, {{'syz1\x00'}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0x10}}}], @common=@log={'log\x00', 0x28, {{0x9, "caa3073418f2366f0e334abbe2498f749bfc8d10d633a781f98ea2efd0af", 0x3}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffc}, {0x0, '\x00', 0x1, 0xffffffffffffffff, 0x1, [{0x9, 0x2, 0x9, 'team_slave_0\x00', 'wg1\x00', 'veth0\x00', '\x00', @random="c423f7e77b21", [0xff, 0x0, 0xff, 0x0, 0x0, 0xff], @broadcast, [0xff, 0xff, 0x0, 0xff, 0xff], 0x1c6, 0x1c6, 0x216, [@comment={{'comment\x00', 0x0, 0x100}}, @connlabel={{'connlabel\x00', 0x0, 0x8}, {{0x101, 0x2}}}], [], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x8, 'syz1\x00', {0x800}}}}}]}]}, 0x4d4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000640)={r2, &(0x7f0000000000), &(0x7f0000000600)=@udp=r3, 0x2}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000010000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000002c0)={r4, r6}, 0x14) syz_emit_ethernet(0xd81, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], 0x0) 1.440841917s ago: executing program 1 (id=8505): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000040)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000ff02000000000000000000000000000100000008000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000001000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000300000000000000000a000000000000000000000080400002000000000000080000000000000000000000000000000044000500fc000000000000000000000000000001000000003c000000000000007f0000010000000000000000000000000200000004"], 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="ac0100001700010000000000000000007f0000010000000000000000000000000000fefffffffffffd8000"/52, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00802000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000200000000f9ffffff00000000000000000000000084000500ffffffff000000000000000000000000000004d33c0000000a00000000000000000000000000000000000001053500000200ac0003000000010000000900000000000000000000000000000000000001000004d56c"], 0x1ac}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="ec000000210001000400000000000000fc020000000000000000000000000001fe80000000000000000000000000003a00000000000000020a0000a02e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100fc0000000000000000000400000000017f000001000000000000000000000000fc020000000000000000000000000001000000000000000000000000000000013c04"], 0xec}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.322749694s ago: executing program 0 (id=8506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8008}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x15}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket(0x2b, 0x1, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x70bd28, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_LINKMODE={0x5, 0x11, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000040000000000000000000020085000000ad00000095"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x30}, 0x94) 1.274154082s ago: executing program 3 (id=8507): r0 = socket(0x9, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) listen(r2, 0x4) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x7c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_DATA={0x68, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfa}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x73}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x81}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x2e}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x4}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x10}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4400}, 0x91) r3 = accept4(r2, 0x0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = epoll_create(0x202) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000040)={0xa0000008}) (async) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000040)={0x20000000}) (async) close(r3) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0x3, 0xffe5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000000000000001}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x6}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.223878101s ago: executing program 4 (id=8508): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x10}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0xf}, @NFTA_PAYLOAD_OFFSET={0x8}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x4, 0x7, 0x0, 0xd, 0x1, 0x3, 0x0, 0x0, 0x5, 0x40}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r2, 0x8}, &(0x7f00000001c0)=0x8) 1.153436889s ago: executing program 1 (id=8509): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001480)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c4, 0x1c4, 0x5, [@enum={0xd, 0xa, 0x0, 0x6, 0x4, [{0x2, 0x9}, {0x1, 0x9}, {0x7, 0x3}, {0x4, 0x40}, {0xd, 0x6}, {0xc, 0x1}, {0x4, 0x8000}, {0x10, 0x80}, {0x8, 0x2}, {0x1, 0x8}]}, @volatile={0x3, 0x0, 0x0, 0x9, 0x2}, @type_tag={0xe, 0x0, 0x0, 0x12, 0x1}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x60, 0x0, 0x13, 0x1}, @enum64={0x9, 0x4, 0x0, 0x13, 0x1, 0x7, [{0x4, 0x400, 0x3ff}, {0x4, 0x5, 0x1}, {0xe, 0x101, 0x3}, {0xc, 0x5, 0xfffffff7}]}, @enum64={0xa, 0x4, 0x0, 0x13, 0x0, 0xc, [{0x9, 0xcc8d, 0x4b9}, {0x9, 0x8, 0xfffffffd}, {0x4, 0x3, 0x2}, {0xf, 0x1}]}, @enum64={0xa, 0x2, 0x0, 0x13, 0x0, 0x1, [{0x6, 0x1, 0x1000}, {0xb, 0x9, 0x9}]}, @union={0xa, 0x8, 0x0, 0x5, 0x1, 0xffff, [{0x5, 0x1, 0x5}, {0x10, 0x1, 0x2}, {0x3, 0x3, 0x6}, {0x9, 0x1, 0x7f}, {0xc, 0x0, 0x2}, {0x3, 0x3, 0xffffffff}, {0x3, 0x5, 0xff37}, {0x3, 0x1, 0x255b}]}, @func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0xe, 0x4}, {0x2}, {0x6}, {0x1}]}, @float={0xe, 0x0, 0x0, 0x10, 0x4}]}, {0x0, [0x30, 0x30, 0x30]}}, &(0x7f0000000480)=""/4096, 0x1e1, 0x1000, 0x0, 0x8, 0x10000}, 0x28) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f00000014c0)) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x39) (rerun: 64) 982.320673ms ago: executing program 3 (id=8510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) (rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, r2, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_DEVICE={0x40, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x2}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x8001) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000000400048008000c8004000b800800020001000000a00008801c000780080077144ebb0000080006000000000008000500000003"], 0xd0}}, 0x571f68543cec8180) 933.886278ms ago: executing program 4 (id=8511): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x7, 0x4) socket(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @mss={0x2, 0x1}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x2000000000000205) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x40880) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400100001a000100feffffff00010000ac1e0101000000000000000000000000fc010000000000000000000000000001000107174e2300050a0000203a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x140}}, 0x20000844) r7 = socket(0x2b, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000740)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000900)={&(0x7f0000000f00)={0x188, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0xc}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x0, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x0, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0xffffffffffffff85, 0x3, 0x3}]}, @HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x188}}, 0x800) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x290) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 820.43884ms ago: executing program 2 (id=8512): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=ANY=[@ANYBLOB="180a0000d0ff00000000000000000004851000000600000018000000", @ANYRES32, @ANYBLOB="000000000000000066080000feffffff1800000000000000000000000000000195000000000000001801000020207825000000000c2020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 645.519062ms ago: executing program 3 (id=8513): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x9, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x64, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x4}}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x4050) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000680)={0x120, r4, 0x800, 0x70bd2d, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x120}, 0x1, 0x0, 0x0, 0x48880}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x170, 0x24, 0x405, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) 311.280456ms ago: executing program 0 (id=8514): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x38, 0x1, [@m_tunnel_key={0x34, 0x1, 0x0, 0x0, {{0xf}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x4000000) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000002900)=r1, 0x4) bind$netlink(r2, &(0x7f00000000c0)={0x10, 0x0, 0x4, 0x200000}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0xf, 0x5}, {0xffff, 0xc}, {0x4, 0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0xffff}, @TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x6a36, 0x8, 0x6, 0x11}, {0x8, 0x1, 0x2, 0x0, 0x400, 0x1}, 0x10001, 0x401, 0x151b}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x24749959584949a0}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc8a5}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r3, 0x1) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89f1, &(0x7f0000000340)={'ip6tnl0\x00', &(0x7f0000000280)=@ethtool_cmd={0xa, 0x8, 0xffffffff, 0x9, 0x4, 0x51, 0x5, 0xfc, 0x3, 0x4, 0x0, 0x1, 0x4a, 0xfe, 0xb, 0xfffffeff, [0x4, 0x3ff]}}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) 191.609761ms ago: executing program 2 (id=8515): sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x64, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="1e00000000000000ca00000003"], 0x48) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r1, &(0x7f0000001380)=[{{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000300)="99", 0x1}], 0x1}}, {{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000001140)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}], 0x2, 0x48000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000780)={0xffffffffffffffff, r2, 0x25, 0x2, @val=@netkit}, 0x1c) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f00000008c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x8, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x7}, {0x5, 0x4}, {0xd, 0x4}, {0x8, 0x1}]}]}, {0x0, [0x2e, 0x61, 0x0, 0x2e, 0x2e, 0x0]}}, &(0x7f0000000940)=""/29, 0x4c, 0x1d, 0x0, 0x4, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000ac0)={0x6, 0x13, &(0x7f0000000580)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8c}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x7, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3ff}, @generic={0x1f, 0x1, 0x8, 0x9, 0xfffffffb}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='syzkaller\x00', 0x6, 0xdd, &(0x7f0000000740)=""/221, 0x40f00, 0xc, '\x00', r2, 0x25, r3, 0x8, &(0x7f00000009c0)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000a00)={0x3, 0x9, 0x7ff, 0x74cfb860}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000a40)=[r0], &(0x7f0000000a80)=[{0x2, 0x4, 0xe, 0x2}], 0x10, 0xe41f}, 0x94) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r4) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000880)={0x40, r5, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x4000804) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f00000000c0), 0x4) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_opts(r6, 0x29, 0x37, 0x0, &(0x7f0000000180)) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0x4, 0x4, 0x73, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x7, 0x8000, 0x14e400, 0x2}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES32=r0, @ANYBLOB="0000000000000000a702000014000000b703000000000000850000009c000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x25, '\x00', r7}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x100, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r13 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r14, {0x9}, {0xffff}, {0x2, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x0) r15 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r15, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r16 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_vlan={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}, @TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 0s ago: executing program 1 (id=8516): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20044001}, 0x0) recvmmsg(r1, &(0x7f000000b400)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f0000001bc0)=""/4105, 0x1009}], 0x1}, 0x5dd7}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000002c80)=""/178, 0xb2}, {&(0x7f00000003c0)=""/187, 0xbb}, {&(0x7f0000002fc0)=""/171, 0xab}, {&(0x7f0000000740)=""/4086, 0xff6}, {&(0x7f00000005c0)=""/46, 0x2e}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000040)=""/125, 0x7d}], 0x7}, 0x3}, {{0x0, 0x0, 0x0}, 0x4}], 0x3, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000000), 0x4) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x2, 0x4}, 0x6) kernel console output (not intermixed with test programs): 970.348607][ T4051] netlink: 'syz.4.7618': attribute type 2 has an invalid length. [ 970.348651][ T4051] netlink: 'syz.4.7618': attribute type 2 has an invalid length. [ 970.452866][ T3937] hsr_slave_0: entered promiscuous mode [ 970.461679][ T3937] hsr_slave_1: entered promiscuous mode [ 970.471434][ T3937] debugfs: 'hsr0' already exists in 'hsr' [ 970.471471][ T3937] Cannot create hsr debugfs directory [ 970.659724][ T4068] veth1_macvtap: left promiscuous mode [ 970.665488][ T4068] macsec0: entered promiscuous mode [ 970.845128][ T4075] netlink: 'syz.1.7624': attribute type 1 has an invalid length. [ 970.925703][ T4074] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7621'. [ 971.166994][T31273] Bluetooth: hci0: command tx timeout [ 971.231366][ T4089] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7628'. [ 971.383090][ T3937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.403392][ T3937] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.429604][ T4090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7628'. [ 971.511689][ T4090] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 971.547969][ T4090] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 971.600412][ T4099] batadv_slave_1: entered allmulticast mode [ 971.694662][ T3937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.694729][ T3937] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.759347][ T4095] batadv_slave_1: left allmulticast mode [ 971.763001][ T4089] lo speed is unknown, defaulting to 1000 [ 972.000899][ T3937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.000966][ T3937] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.210972][ T3937] netdevsim netdevsim3 €Â (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.222140][ T3937] netdevsim netdevsim3 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.563566][ T4119] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 972.696142][ T4126] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 972.732275][ T3937] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 972.764170][ T3937] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 972.770151][ T3937] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 972.787953][ T4132] netlink: 'syz.2.7640': attribute type 39 has an invalid length. [ 972.797347][ T3937] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 972.802634][ T3937] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 972.824436][ T3937] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 972.858852][ T3937] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 972.876647][ T3937] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 973.119110][ T4150] mac80211_hwsim hwsim86 wlan0: entered allmulticast mode [ 973.127546][ T4150] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 973.148194][ T4150] openvswitch: netlink: Unexpected mask (mask=4000010, allowed=10058) [ 973.175367][ T3937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 973.215462][ T3937] 8021q: adding VLAN 0 to HW filter on device team0 [ 973.241787][T11581] bridge0: port 1(bridge_slave_0) entered blocking state [ 973.242201][T11581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 973.249283][T31273] Bluetooth: hci0: command tx timeout [ 973.274771][T10572] bridge0: port 2(bridge_slave_1) entered blocking state [ 973.274887][T10572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 973.348664][ T4157] ip6tnl0: Caught tx_queue_len zero misconfig [ 973.394557][ T4158] bond8: down delay (3) is not a multiple of miimon (100), value rounded to 0 ms [ 973.395445][ T4158] bond8: entered allmulticast mode [ 973.397595][ T4158] 8021q: adding VLAN 0 to HW filter on device bond8 [ 973.797126][ T4179] netlink: 'syz.2.7653': attribute type 15 has an invalid length. [ 973.867570][T10572] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 973.872255][T10572] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 973.872381][T10572] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 973.872486][T10572] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 973.923430][ T4179] netlink: 'syz.2.7653': attribute type 15 has an invalid length. [ 973.935212][ T4187] syzkaller1: entered promiscuous mode [ 973.935273][ T4187] syzkaller1: entered allmulticast mode [ 974.019276][ T4183] __nla_validate_parse: 2 callbacks suppressed [ 974.019325][ T4183] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7653'. [ 974.313267][ T4197] netlink: 'syz.4.7655': attribute type 1 has an invalid length. [ 974.323083][ T4197] netlink: 'syz.4.7655': attribute type 7 has an invalid length. [ 974.323170][ T4197] netlink: 'syz.4.7655': attribute type 8 has an invalid length. [ 974.323191][ T4197] netlink: 208 bytes leftover after parsing attributes in process `syz.4.7655'. [ 974.323214][ T4197] NCSI netlink: No device for ifindex 1073545264 [ 974.865519][ T3937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 974.915166][ T4221] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 974.994644][ T3937] veth0_vlan: entered promiscuous mode [ 975.002630][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7658'. [ 975.023749][ T4221] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7658'. [ 975.042592][ T3937] veth1_vlan: entered promiscuous mode [ 975.092036][ T3937] veth0_macvtap: entered promiscuous mode [ 975.107283][ T3937] veth1_macvtap: entered promiscuous mode [ 975.131243][ T3937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 975.143632][ T3937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 975.192057][T11583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.209690][T11581] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.222075][T10562] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.222179][T10562] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.326655][T31273] Bluetooth: hci0: command tx timeout [ 975.339457][T10572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.339497][T10572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.404497][T10572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 975.404541][T10572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 975.599289][ T4240] ip6erspan0: entered allmulticast mode [ 975.652277][ T4242] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7665'. [ 975.734906][ T4244] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7666'. [ 975.790643][ T4248] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7668'. [ 982.130580][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 999.406165][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1044.208776][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1059.566246][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1065.159624][ T4278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7673'. [ 1065.159669][ T4278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1065.243463][ T4284] xt_cluster: node mask cannot exceed total number of nodes [ 1065.243721][ T4274] bond5: option xmit_hash_policy: invalid value (10) [ 1065.263379][ T4274] bond5 (unregistering): Released all slaves [ 1065.946101][T10572] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1065.946183][T10572] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1065.946264][T10572] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1065.946305][T10572] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 1066.121561][ T4321] netlink: 44 bytes leftover after parsing attributes in process `syz.3.7683'. [ 1066.278346][ T4301] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1066.445051][ T4317] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7681'. [ 1067.004696][ T4355] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7690'. [ 1067.022090][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7689'. [ 1067.031300][ T4354] netlink: 'syz.2.7689': attribute type 30 has an invalid length. [ 1067.075874][ T4354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7689'. [ 1067.085311][ T4354] netlink: 'syz.2.7689': attribute type 30 has an invalid length. [ 1067.085315][ T4359] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7689'. [ 1067.111362][ T4339] macsec1: entered promiscuous mode [ 1067.118062][ T4339] hsr0: entered promiscuous mode [ 1067.268513][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.270470][T10572] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.270576][T10572] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.270682][T10572] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1067.385623][ T4352] syzkaller0: entered promiscuous mode [ 1067.385671][ T4352] syzkaller0: entered allmulticast mode [ 1067.403439][ T4370] netlink: 'syz.0.7690': attribute type 4 has an invalid length. [ 1067.832654][ T4379] bridge_slave_1: left allmulticast mode [ 1067.840151][ T4379] bridge_slave_1: left promiscuous mode [ 1067.840399][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.905056][ T4379] bond3: (slave veth0_to_bond): Releasing backup interface [ 1067.965206][ T4379] team0: Port device team_slave_0 removed [ 1067.998453][ T4379] team0: Port device team_slave_1 removed [ 1068.019450][ T4379] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1068.290237][ T4391] x_tables: ip6_tables: set.2 match: invalid size 8 (kernel) != (user) 16 [ 1068.448960][ T4393] syzkaller0: entered promiscuous mode [ 1068.454683][ T4393] syzkaller0: entered allmulticast mode [ 1068.952976][ T4395] macsec0: left promiscuous mode [ 1068.992156][ T4395] bond1: left promiscuous mode [ 1068.998299][ T4395] bond6: left promiscuous mode [ 1069.021622][ T4395] bridge4: left promiscuous mode [ 1069.029643][ T4395] bridge5: left promiscuous mode [ 1069.079597][ T3374] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.079671][ T3374] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.079842][ T3374] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.079916][ T3374] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.080043][ T3374] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.080124][ T3374] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.303301][ T4410] lo speed is unknown, defaulting to 1000 [ 1069.309229][ T13] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.309347][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.724986][ T4435] bond1 (unregistering): Released all slaves [ 1070.191419][ T4453] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7714'. [ 1070.483468][ T4461] tipc: Started in network mode [ 1070.483660][ T4461] tipc: Node identity 1, cluster identity 4711 [ 1070.483715][ T4461] tipc: Node number set to 1 [ 1070.523110][ T4462] syzkaller0: entered promiscuous mode [ 1070.523170][ T4462] syzkaller0: entered allmulticast mode [ 1070.554085][ T4462] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7717'. [ 1070.569468][ T4465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7718'. [ 1070.650123][ T4468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.023292][ T4497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7726'. [ 1071.276359][ T4518] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7731'. [ 1071.394850][ T4518] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7731'. [ 1071.672001][ T4539] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1071.721895][ T4540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1071.721955][ T4540] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1071.722404][ T4543] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7735'. [ 1071.851656][ T4538] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 1071.902440][ T4540] erspan0: entered promiscuous mode [ 1071.912627][ T4540] erspan0: left promiscuous mode [ 1072.013164][ T4543] erspan0: entered promiscuous mode [ 1072.024709][ T4543] erspan0: left promiscuous mode [ 1072.259029][ T4563] mac80211_hwsim hwsim86 wlan0: left allmulticast mode [ 1072.285741][ T4563] bond8: left allmulticast mode [ 1072.328124][T10560] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.330370][ T6845] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.330552][ T6845] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.330641][ T6845] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1072.490835][ T4571] netlink: 'syz.3.7742': attribute type 4 has an invalid length. [ 1072.548552][ T3295] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.557697][ T3295] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.566656][ T3295] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.575650][ T3295] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1072.758736][ T4585] bond5: option updelay: invalid value (18446744073709518847) [ 1072.758786][ T4585] bond5: option updelay: allowed values 0 - 2147483647 [ 1072.792989][ T4585] bond5 (unregistering): Released all slaves [ 1073.111443][ T4605] netlink: 'syz.2.7748': attribute type 13 has an invalid length. [ 1073.139293][ T4606] netlink: 'syz.2.7748': attribute type 13 has an invalid length. [ 1073.733233][ T4634] veth0_virt_wifi: Caught tx_queue_len zero misconfig [ 1074.363206][ T4673] netlink: 'syz.3.7759': attribute type 1 has an invalid length. [ 1074.706343][ T4644] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1074.709712][ T4644] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1074.712675][ T4647] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1075.133681][ T4701] syzkaller0: entered promiscuous mode [ 1075.139449][ T4701] syzkaller0: entered allmulticast mode [ 1075.152015][ T4701] tipc: Enabled bearer , priority 0 [ 1075.194767][ T4701] tipc: Resetting bearer [ 1075.242564][ T4694] tipc: Resetting bearer [ 1075.315563][ T4694] tipc: Disabling bearer [ 1075.709253][ T4732] __nla_validate_parse: 10 callbacks suppressed [ 1075.716228][ T4732] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7772'. [ 1075.735104][ T4735] netlink: 'syz.2.7771': attribute type 1 has an invalid length. [ 1075.743632][ T4735] netlink: 16118 bytes leftover after parsing attributes in process `syz.2.7771'. [ 1075.800250][ T4735] netlink: 'syz.2.7771': attribute type 1 has an invalid length. [ 1075.815114][ T4735] netlink: 16118 bytes leftover after parsing attributes in process `syz.2.7771'. [ 1075.870015][ T4736] netlink: 80 bytes leftover after parsing attributes in process `syz.0.7772'. [ 1076.161962][ T4753] sit2: entered allmulticast mode [ 1076.300999][ T4762] IPVS: set_ctl: invalid protocol: 41 172.20.20.187:20004 [ 1076.336987][ T4762] vlan4: entered promiscuous mode [ 1076.337026][ T4762] macvlan0: entered promiscuous mode [ 1076.390873][ T4769] IPVS: set_ctl: invalid protocol: 1472 0.32.0.0:52224 [ 1076.447775][ T4771] vlan4: entered promiscuous mode [ 1076.619104][ T4779] FAULT_INJECTION: forcing a failure. [ 1076.619104][ T4779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1076.619160][ T4779] CPU: 0 UID: 0 PID: 4779 Comm: syz.3.7781 Not tainted syzkaller #0 PREEMPT(full) [ 1076.619196][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1076.619211][ T4779] Call Trace: [ 1076.619221][ T4779] [ 1076.619231][ T4779] dump_stack_lvl+0xe8/0x150 [ 1076.619270][ T4779] should_fail_ex+0x410/0x560 [ 1076.619309][ T4779] _copy_from_iter+0x1d3/0x1660 [ 1076.619343][ T4779] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1076.619387][ T4779] ? __pfx__copy_from_iter+0x10/0x10 [ 1076.619424][ T4779] ? dev_get_by_index+0x22/0x2d0 [ 1076.619451][ T4779] ? dev_get_by_index+0x22/0x2d0 [ 1076.619484][ T4779] packet_sendmsg+0x2eb0/0x4f80 [ 1076.619517][ T4779] ? lock_acquire+0x115/0x350 [ 1076.619547][ T4779] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1076.619587][ T4779] ? __lock_acquire+0x6df/0x2e50 [ 1076.619622][ T4779] ? __lock_acquire+0x6df/0x2e50 [ 1076.619650][ T4779] ? kstrtouint+0x6e/0xe0 [ 1076.619689][ T4779] ? __pfx_packet_sendmsg+0x10/0x10 [ 1076.619716][ T4779] ? aa_sk_perm+0x713/0x900 [ 1076.619756][ T4779] ? print_shortest_lock_dependencies_backwards+0x60/0xc0 [ 1076.619794][ T4779] ? __pfx_aa_sk_perm+0x10/0x10 [ 1076.619831][ T4779] ? aa_sock_msg_perm+0x144/0x210 [ 1076.619872][ T4779] ? apparmor_socket_sendmsg+0x98/0x360 [ 1076.619907][ T4779] ? __pfx_packet_sendmsg+0x10/0x10 [ 1076.619935][ T4779] sock_sendmsg_nosec+0x13a/0x180 [ 1076.619966][ T4779] __sys_sendto+0x408/0x5a0 [ 1076.620094][ T4779] ? ksys_write+0x1e6/0x270 [ 1076.620216][ T4779] ? __pfx___sys_sendto+0x10/0x10 [ 1076.620310][ T4779] ? __mutex_unlock_slowpath+0x731/0x900 [ 1076.620458][ T4779] ? __pfx_ksys_write+0x10/0x10 [ 1076.620548][ T4779] __x64_sys_sendto+0xde/0x100 [ 1076.620668][ T4779] do_syscall_64+0x166/0x520 [ 1076.620753][ T4779] ? trace_irq_disable+0x3b/0x140 [ 1076.620808][ T4779] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.620871][ T4779] ? clear_bhb_loop+0x70/0xc0 [ 1076.620945][ T4779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1076.620998][ T4779] RIP: 0033:0x7f5751f9e159 [ 1076.621059][ T4779] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1076.621117][ T4779] RSP: 002b:00007f5752ed1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1076.621181][ T4779] RAX: ffffffffffffffda RBX: 00007f5752225fa0 RCX: 00007f5751f9e159 [ 1076.621234][ T4779] RDX: 000000000000002a RSI: 0000200000000140 RDI: 0000000000000003 [ 1076.621274][ T4779] RBP: 00007f5752ed1090 R08: 0000200000000000 R09: 0000000000000014 [ 1076.621316][ T4779] R10: 000000000400c010 R11: 0000000000000246 R12: 0000000000000001 [ 1076.621357][ T4779] R13: 00007f5752226038 R14: 00007f5752225fa0 R15: 00007fff524e68b8 [ 1076.621444][ T4779] [ 1076.970546][ T4787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7782'. [ 1076.970602][ T4787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7782'. [ 1077.022005][ T4793] netlink: 'syz.1.7782': attribute type 4 has an invalid length. [ 1077.032014][ T4793] netlink: 152 bytes leftover after parsing attributes in process `syz.1.7782'. [ 1077.153516][ T4793] .`: renamed from bond0 [ 1077.200775][ T4801] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7785'. [ 1077.428432][ T4807] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7786'. [ 1077.812326][ T4792] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1078.180020][ T4849] netlink: 'syz.2.7795': attribute type 1 has an invalid length. [ 1078.380480][ T4855] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1078.487305][ T4855] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7798'. [ 1078.541413][ T4866] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input11 [ 1078.714527][ T4877] geneve1: entered promiscuous mode [ 1078.830776][ T4883] syzkaller0: entered promiscuous mode [ 1078.836852][ T4883] syzkaller0: entered allmulticast mode [ 1079.088148][ T4893] syzkaller0: entered promiscuous mode [ 1079.095031][ T4893] syzkaller0: entered allmulticast mode [ 1079.883028][ T4931] ovs-system: left promiscuous mode [ 1080.360447][ T4970] netlink: 'syz.4.7827': attribute type 4 has an invalid length. [ 1080.415843][ T4977] netlink: 'syz.4.7827': attribute type 4 has an invalid length. [ 1080.943864][ T5008] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1081.175778][ T5014] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1081.261056][ T5017] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 1081.520657][ T5033] __nla_validate_parse: 10 callbacks suppressed [ 1081.528590][ T5033] netlink: 244 bytes leftover after parsing attributes in process `syz.1.7834'. [ 1081.613005][ T5025] netlink: 4912 bytes leftover after parsing attributes in process `syz.3.7837'. [ 1081.794355][ T5038] syzkaller1: entered promiscuous mode [ 1081.801008][ T5038] syzkaller1: entered allmulticast mode [ 1082.204680][ T5053] macsec0: entered allmulticast mode [ 1082.204988][ T5057] veth1_macvtap: entered allmulticast mode [ 1082.205522][ T5057] macsec0: left allmulticast mode [ 1082.205739][ T5057] veth1_macvtap: left allmulticast mode [ 1082.867618][ T5092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1082.880074][ T5092] netlink: 40 bytes leftover after parsing attributes in process `syz.2.7849'. [ 1082.977511][ T5094] tipc: Enabled bearer , priority 0 [ 1082.984768][ T5094] syzkaller0: entered promiscuous mode [ 1082.984792][ T5094] syzkaller0: entered allmulticast mode [ 1083.315204][ T5105] ref_ctr_offset mismatch. inode: 0x28 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1083.368466][ T5114] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7851'. [ 1083.378337][ T5118] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7851'. [ 1083.445716][ T5090] tipc: Resetting bearer [ 1083.497667][ T5090] tipc: Disabling bearer [ 1083.522464][ T5124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7853'. [ 1083.977633][ T5148] ip6gretap1: entered allmulticast mode [ 1083.994522][ T5148] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 1083.995242][ T5148] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1083.995275][ T5148] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1552 would solve the problem. [ 1083.995390][ T5148] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1084.077215][ T5155] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7857'. [ 1084.092592][ T5155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7857'. [ 1084.457530][ T5170] ip_tables: iptables: counters copy to user failed while replacing table [ 1085.175783][ T5206] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1085.213069][ T5206] netlink: 'syz.0.7867': attribute type 4 has an invalid length. [ 1085.229511][ T5206] netlink: 'syz.0.7867': attribute type 4 has an invalid length. [ 1085.321940][ T5168] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 1085.425664][ T5213] lo speed is unknown, defaulting to 1000 [ 1085.428576][ T5211] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1085.553964][ T5218] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7868'. [ 1086.427729][ T5262] netlink: 'syz.1.7875': attribute type 1 has an invalid length. [ 1086.784004][ T6845] smbdirect: ib_dev[syz1] removed [ 1086.792069][ T5226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1086.837522][ T5226] bond0 (unregistering): Released all slaves [ 1087.012639][ T6845] bond1: (slave veth0_to_bond): link status definitely down, disabling slave [ 1087.058648][ T6845] bond1: (slave veth3): making interface the new active one [ 1087.069976][ T6845] veth3: entered promiscuous mode [ 1087.091642][ T5287] tipc: Enabled bearer , priority 0 [ 1087.101951][ T5288] syzkaller0: entered promiscuous mode [ 1087.110929][ T5288] syzkaller0: entered allmulticast mode [ 1087.238661][ T5279] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1087.639076][ T5288] tipc: Resetting bearer [ 1087.648823][ T5276] tipc: Resetting bearer [ 1087.787645][ T5276] tipc: Disabling bearer [ 1088.018152][ T5311] __nla_validate_parse: 3 callbacks suppressed [ 1088.018212][ T5311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1088.018237][ T5311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1088.100590][ T5311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1088.105456][ T5311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1088.105531][ T5311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1088.110103][ T5309] netlink: 'syz.0.7883': attribute type 1 has an invalid length. [ 1088.118338][ T5311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1088.118410][ T5311] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7887'. [ 1088.245890][ T5316] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1088.324435][ T5326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7886'. [ 1088.401437][ T5331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7888'. [ 1088.449210][ T5326] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1088.672812][ T5344] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7894'. [ 1088.685774][ T5344] netlink: 'syz.1.7894': attribute type 1 has an invalid length. [ 1088.709682][ T5350] netlink: 'syz.2.7893': attribute type 1 has an invalid length. [ 1088.968916][ T5365] ip6erspan1: entered allmulticast mode [ 1089.297079][ T5393] macvlan0: entered promiscuous mode [ 1089.510251][ T5403] x_tables: duplicate underflow at hook 2 [ 1089.631012][ T5409] netlink: 'syz.2.7905': attribute type 1 has an invalid length. [ 1089.780576][ T5409] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1090.000318][ T987] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.010656][ T987] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.010702][ T987] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.010740][ T987] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1090.502549][ T5446] ref_ctr_offset mismatch. inode: 0xa0 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1090.524450][ T5448] batman_adv: batadv0: Adding interface: ip6gretap1 [ 1090.524488][ T5448] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1090.524516][ T5448] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 1090.799197][ T5446] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1091.479878][ T5487] lo speed is unknown, defaulting to 1000 [ 1091.849940][ T5508] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1092.322501][ T5528] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 1092.882455][ T5569] netlink: 'syz.2.7930': attribute type 1 has an invalid length. [ 1092.891064][ T5569] netlink: 'syz.2.7930': attribute type 1 has an invalid length. [ 1093.196028][ T5546] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1093.318196][ T5580] __nla_validate_parse: 18 callbacks suppressed [ 1093.318249][ T5580] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7931'. [ 1093.378110][ T5563] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1093.459433][ T5551] syzkaller0: entered promiscuous mode [ 1093.459479][ T5551] syzkaller0: entered allmulticast mode [ 1094.363990][ T5630] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7938'. [ 1094.725855][ T5644] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7942'. [ 1094.726134][ T5644] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7942'. [ 1094.726169][ T5644] netlink: 'syz.2.7942': attribute type 6 has an invalid length. [ 1094.726187][ T5644] netlink: 'syz.2.7942': attribute type 5 has an invalid length. [ 1094.726204][ T5644] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7942'. [ 1094.849719][ T5644] netlink: 'syz.2.7942': attribute type 2 has an invalid length. [ 1095.432442][ T5664] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1095.597589][ T5684] Bluetooth: MGMT ver 1.23 [ 1095.602230][ T5684] Bluetooth: hci0: invalid length 0, exp 2 for type 7 [ 1095.704790][ T5693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7952'. [ 1095.788269][ T5693] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7952'. [ 1095.862246][ T5695] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7952'. [ 1096.051226][ T5711] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7954'. [ 1096.062641][ T5711] netlink: 43 bytes leftover after parsing attributes in process `syz.0.7954'. [ 1096.075891][ T5711] netlink: 'syz.0.7954': attribute type 6 has an invalid length. [ 1096.086427][ T5711] netlink: 'syz.0.7954': attribute type 5 has an invalid length. [ 1096.110430][ T5711] netlink: 'syz.0.7954': attribute type 2 has an invalid length. [ 1096.892675][ T5765] netlink: 'syz.1.7966': attribute type 1 has an invalid length. [ 1096.945162][ T5765] bond0: (slave geneve3): making interface the new active one [ 1096.955009][ T5765] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 1096.970714][ T5765] bond0: entered promiscuous mode [ 1096.978755][ T5765] geneve3: entered promiscuous mode [ 1096.989649][ T5765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1097.011525][ T5769] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1097.023474][T10560] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 1097.023521][T10560] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 1097.023559][T10560] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 1097.023595][T10560] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 1097.308563][ T5782] netlink: 'syz.2.7971': attribute type 3 has an invalid length. [ 1097.862836][ T5813] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 1097.928357][ T5820] x_tables: unsorted underflow at hook 4 [ 1098.145236][ T5834] validate_nla: 1 callbacks suppressed [ 1098.145296][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.155886][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.169756][ T6845] veth3: left promiscuous mode [ 1098.182806][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.183354][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.183921][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.210507][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.211107][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.211767][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.220392][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.241898][ T5834] netlink: 'syz.4.7983': attribute type 32 has an invalid length. [ 1098.442727][ T5844] lo speed is unknown, defaulting to 1000 [ 1098.483023][ T5838] syzkaller0: entered promiscuous mode [ 1098.483077][ T5838] syzkaller0: entered allmulticast mode [ 1098.715223][ T5853] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 1099.101702][ T5866] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1099.227638][ T5875] lo speed is unknown, defaulting to 1000 [ 1099.512398][ T5885] bond12 (unregistering): Released all slaves [ 1099.665829][ T5894] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1099.680404][ T5894] netlink: 'syz.4.7997': attribute type 11 has an invalid length. [ 1099.741689][ T5897] __nla_validate_parse: 17 callbacks suppressed [ 1099.749151][ T5897] netlink: 820 bytes leftover after parsing attributes in process `syz.0.7998'. [ 1099.750280][ T5897] netlink: 820 bytes leftover after parsing attributes in process `syz.0.7998'. [ 1100.044929][ T5907] netlink: 646 bytes leftover after parsing attributes in process `syz.2.8001'. [ 1100.199717][ T5911] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1100.199760][ T5911] syzkaller1: Linktype set failed because interface is up [ 1100.206968][T28942] syzkaller1: tun_net_xmit 90 [ 1100.565498][T10560] nci: nci_rsp_packet: unknown rsp opcode 0x33f [ 1100.590459][ T5946] syzkaller0: entered promiscuous mode [ 1100.590498][ T5946] syzkaller0: entered allmulticast mode [ 1100.597405][ T5944] syzkaller1: entered promiscuous mode [ 1100.597427][ T5944] syzkaller1: entered allmulticast mode [ 1100.605118][ T5948] syzkaller0: left promiscuous mode [ 1100.605177][ T5948] syzkaller0: left allmulticast mode [ 1100.843996][ T5906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1100.930838][ T5958] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1101.042901][ T5963] openvswitch: netlink: EtherType 2 is less than min 600 [ 1101.060277][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8015'. [ 1101.095092][ T5963] ip6gretap0 (unregistering): left promiscuous mode [ 1101.146162][T10560] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.146244][T10560] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.150474][T10560] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.150571][T10560] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1101.192860][ T5965] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 1101.192926][ T5965] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 1101.192949][ T5965] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 1101.284819][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1101.288277][ T5969] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8017'. [ 1101.308958][ T5969] geneve2: entered promiscuous mode [ 1101.309008][ T5969] geneve2: entered allmulticast mode [ 1101.724641][ T5977] ip6t_ah: unknown flags 4 [ 1101.877627][ T5981] siw: device registration error -23 [ 1103.453969][ T5938] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1103.631896][ T5983] syz.2.8022: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1103.632025][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: syz.2.8022 Not tainted syzkaller #0 PREEMPT(full) [ 1103.632053][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1103.632068][ T5983] Call Trace: [ 1103.632078][ T5983] [ 1103.632088][ T5983] dump_stack_lvl+0xe8/0x150 [ 1103.632128][ T5983] warn_alloc+0x24d/0x270 [ 1103.632185][ T5983] ? kasan_save_track+0x4f/0x80 [ 1103.632206][ T5983] ? kasan_save_track+0x3e/0x80 [ 1103.632230][ T5983] ? __pfx_warn_alloc+0x10/0x10 [ 1103.632260][ T5983] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1103.632293][ T5983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.632335][ T5983] __vmalloc_node_range_noprof+0x127/0x1540 [ 1103.632388][ T5983] ? rcu_is_watching+0x16/0xb0 [ 1103.632419][ T5983] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1103.632450][ T5983] ? __kmalloc_cache_noprof+0x321/0x600 [ 1103.632483][ T5983] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1103.632515][ T5983] ? xskq_create+0x56/0x220 [ 1103.632546][ T5983] xskq_create+0x148/0x220 [ 1103.632572][ T5983] ? xsk_init_queue+0x8a/0xe0 [ 1103.632599][ T5983] xsk_init_queue+0x8a/0xe0 [ 1103.632627][ T5983] xsk_setsockopt+0x52a/0x960 [ 1103.632654][ T5983] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1103.632679][ T5983] ? __pfx_aa_sk_perm+0x10/0x10 [ 1103.632722][ T5983] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1103.632748][ T5983] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1103.632774][ T5983] do_sock_setsockopt+0x17c/0x1b0 [ 1103.632812][ T5983] __x64_sys_setsockopt+0x13d/0x1b0 [ 1103.632850][ T5983] do_syscall_64+0x166/0x520 [ 1103.632879][ T5983] ? trace_irq_disable+0x3b/0x140 [ 1103.632899][ T5983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.632922][ T5983] ? clear_bhb_loop+0x70/0xc0 [ 1103.632948][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.632971][ T5983] RIP: 0033:0x7fa1cef9e159 [ 1103.632991][ T5983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1103.633010][ T5983] RSP: 002b:00007fa1cfe67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1103.633032][ T5983] RAX: ffffffffffffffda RBX: 00007fa1cf225fa0 RCX: 00007fa1cef9e159 [ 1103.633049][ T5983] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 1103.633063][ T5983] RBP: 00007fa1cf035024 R08: 0000000000000004 R09: 0000000000000000 [ 1103.633077][ T5983] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.633091][ T5983] R13: 00007fa1cf226038 R14: 00007fa1cf225fa0 R15: 00007ffc68f11ce8 [ 1103.633126][ T5983] [ 1103.633139][ T5983] Mem-Info: [ 1103.633152][ T5983] active_anon:7738 inactive_anon:0 isolated_anon:0 [ 1103.633152][ T5983] active_file:0 inactive_file:43975 isolated_file:0 [ 1103.633152][ T5983] unevictable:0 dirty:136 writeback:0 [ 1103.633152][ T5983] slab_reclaimable:13835 slab_unreclaimable:159406 [ 1103.633152][ T5983] mapped:29971 shmem:528 pagetables:3493 [ 1103.633152][ T5983] sec_pagetables:0 bounce:0 [ 1103.633152][ T5983] kernel_misc_reclaimable:0 [ 1103.633152][ T5983] free:1244094 free_pcp:10234 free_cma:0 [ 1103.633233][ T5983] Node 0 active_anon:30952kB inactive_anon:0kB active_file:0kB inactive_file:175700kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119884kB dirty:544kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18628kB pagetables:13860kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1103.633309][ T5983] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1103.633368][ T5983] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1103.754072][ T5983] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1103.754209][ T5983] Node 0 DMA32 free:1016612kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:31252kB inactive_anon:0kB active_file:0kB inactive_file:175700kB unevictable:0kB writepending:544kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:40808kB local_pcp:20056kB free_cma:0kB [ 1103.754393][ T5983] lowmem_reserve[]: 0 0 0 0 0 [ 1103.754494][ T5983] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1103.754681][ T5983] lowmem_reserve[]: 0 0 0 0 0 [ 1103.754783][ T5983] Node 1 Normal free:3944404kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1103.754944][ T5983] lowmem_reserve[]: 0 0 0 0 0 [ 1103.755052][ T5983] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1103.755404][ T5983] Node 0 DMA32: 1158*4kB (UME) 959*8kB (UME) 684*16kB (UME) 1224*32kB (UM) 237*64kB (UME) 118*128kB (UM) 349*256kB (UME) 242*512kB (UME) 128*1024kB (UM) 13*2048kB (UM) 135*4096kB (UM) = 1016592kB [ 1103.796997][ T5983] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1103.797309][ T5983] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 9*16kB (UM) 5*32kB (UM) 6*64kB (UM) 2*128kB (UM) 2*256kB (M) 3*512kB (UM) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3944404kB [ 1103.797719][ T5983] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1103.797739][ T5983] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1103.797758][ T5983] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1103.797777][ T5983] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1103.797796][ T5983] 44499 total pagecache pages [ 1103.800529][ T5983] 0 pages in swap cache [ 1103.800559][ T5983] Free swap = 124996kB [ 1103.800582][ T5983] Total swap = 124996kB [ 1103.800610][ T5983] 2097051 pages RAM [ 1103.800632][ T5983] 0 pages HighMem/MovableOnly [ 1103.800668][ T5983] 428730 pages reserved [ 1103.800689][ T5983] 0 pages cma reserved [ 1103.863894][ T5983] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8022'. [ 1104.398071][ T5988] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 1104.610973][ T6006] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8028'. [ 1104.703195][ T6010] ref_ctr_offset mismatch. inode: 0x46 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1104.843880][ T6022] openvswitch: netlink: IP tunnel TTL not specified. [ 1104.851634][ T6022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1104.875349][ T6018] syzkaller0: entered promiscuous mode [ 1104.875399][ T6018] syzkaller0: entered allmulticast mode [ 1104.923409][ T6028] validate_nla: 63 callbacks suppressed [ 1104.923471][ T6028] netlink: 'syz.4.8033': attribute type 1 has an invalid length. [ 1104.982481][ T6028] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1105.180877][ T6031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1105.180938][ T6031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1105.201921][ T6031] veth0_vlan: left promiscuous mode [ 1105.209252][ T6031] veth0_vlan: entered promiscuous mode [ 1105.221220][ T6031] veth1_vlan: entered promiscuous mode [ 1105.232216][ T6031] geneve0: left promiscuous mode [ 1105.265314][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1105.275516][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1105.288275][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1105.293977][ T6031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1105.303933][ T6031] mac80211_hwsim hwsim86 wlan0: left promiscuous mode [ 1105.325385][ T6031] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1105.347993][ T6031] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1105.360836][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1105.370522][ T6031] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 1105.386717][ T6031] mac80211_hwsim hwsim86 wlan0: entered promiscuous mode [ 1105.441007][ T6031] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1105.451799][ T6031] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1105.460344][ T6031] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1105.471227][ T6031] geneve0: entered promiscuous mode [ 1105.484303][ T6031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1105.496621][ T6031] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1105.514067][ T6031] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1105.519170][ T6031] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 1105.554648][ T6031] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1105.568995][ T6031] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1105.578449][ T6031] A link change request failed with some changes committed already. Interface vxlan1 may have been left with an inconsistent configuration, please check. [ 1105.733378][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1105.733504][T10560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1105.742380][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1105.742488][T10560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1105.889825][T10560] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 1105.889881][T10560] netdevsim netdevsim2 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 1105.889928][T10560] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.036280][T11581] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 1106.036335][T11581] netdevsim netdevsim2 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 1106.036381][T11581] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.037319][T11581] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 1106.037356][T11581] netdevsim netdevsim2 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 1106.037389][T11581] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.037659][T11581] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 1106.037692][T11581] netdevsim netdevsim2 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 1106.080020][T11581] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1106.421978][ T6079] syzkaller0: entered promiscuous mode [ 1106.422027][ T6079] syzkaller0: entered allmulticast mode [ 1106.512460][ T6047] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1106.840205][ T6095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8060'. [ 1107.377013][ T6115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8053'. [ 1107.377067][ T6115] netlink: 'syz.1.8053': attribute type 30 has an invalid length. [ 1107.415575][ T6112] macsec1: entered promiscuous mode [ 1107.415629][ T6112] hsr0: entered promiscuous mode [ 1107.449083][ T6117] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8053'. [ 1107.526535][ T6092] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8049'. [ 1107.655151][ T6122] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8055'. [ 1107.784731][ T6130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8057'. [ 1107.955633][ T6122] netlink: 'syz.4.8055': attribute type 4 has an invalid length. [ 1109.124168][ T6199] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8069'. [ 1109.160424][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8071'. [ 1109.160499][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8071'. [ 1109.240170][ T6209] netlink: 'syz.2.8072': attribute type 10 has an invalid length. [ 1109.536791][ T6224] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8078'. [ 1109.584867][ T6213] lo speed is unknown, defaulting to 1000 [ 1109.901346][ T6232] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1110.015641][ T6238] nbd: must specify a size in bytes for the device [ 1110.214682][ T6246] FAULT_INJECTION: forcing a failure. [ 1110.214682][ T6246] name failslab, interval 1, probability 0, space 0, times 0 [ 1110.228946][ T6246] CPU: 1 UID: 0 PID: 6246 Comm: syz.1.8084 Not tainted syzkaller #0 PREEMPT(full) [ 1110.228979][ T6246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1110.228994][ T6246] Call Trace: [ 1110.229004][ T6246] [ 1110.229014][ T6246] dump_stack_lvl+0xe8/0x150 [ 1110.229061][ T6246] should_fail_ex+0x410/0x560 [ 1110.229100][ T6246] should_failslab+0xa8/0x100 [ 1110.229130][ T6246] __kmalloc_cache_noprof+0xa3/0x600 [ 1110.229168][ T6246] ? netlbl_mgmt_add_common+0x57/0x1260 [ 1110.229201][ T6246] ? netlbl_mgmt_add_common+0x57/0x1260 [ 1110.229248][ T6246] netlbl_mgmt_add_common+0x57/0x1260 [ 1110.229285][ T6246] ? rcu_is_watching+0x16/0xb0 [ 1110.229316][ T6246] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 1110.229356][ T6246] netlbl_mgmt_adddef+0x28b/0x330 [ 1110.229393][ T6246] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 1110.229432][ T6246] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1110.229466][ T6246] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1110.229509][ T6246] genl_family_rcv_msg_doit+0x233/0x340 [ 1110.229550][ T6246] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1110.229597][ T6246] ? bpf_lsm_capable+0x9/0x20 [ 1110.229631][ T6246] ? security_capable+0x7e/0x2c0 [ 1110.229672][ T6246] genl_rcv_msg+0x614/0x7a0 [ 1110.229711][ T6246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1110.229743][ T6246] ? __pfx_netlbl_mgmt_adddef+0x10/0x10 [ 1110.229793][ T6246] netlink_rcv_skb+0x226/0x4a0 [ 1110.229820][ T6246] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1110.229854][ T6246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1110.229898][ T6246] ? down_read+0x2be/0x330 [ 1110.229936][ T6246] genl_rcv+0x28/0x40 [ 1110.229966][ T6246] netlink_unicast+0x7bd/0x940 [ 1110.230003][ T6246] netlink_sendmsg+0x813/0xb40 [ 1110.230047][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.230083][ T6246] ? apparmor_socket_sendmsg+0x98/0x360 [ 1110.230118][ T6246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1110.230144][ T6246] sock_sendmsg_nosec+0x13a/0x180 [ 1110.230177][ T6246] ____sys_sendmsg+0x54e/0x850 [ 1110.230207][ T6246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1110.230241][ T6246] ? import_iovec+0x73/0xa0 [ 1110.230280][ T6246] ___sys_sendmsg+0x2a5/0x360 [ 1110.230302][ T6246] ? __lock_acquire+0x6df/0x2e50 [ 1110.230331][ T6246] ? __pfx____sys_sendmsg+0x10/0x10 [ 1110.230395][ T6246] ? __fget_files+0x2a/0x420 [ 1110.230424][ T6246] ? __fget_files+0x3a2/0x420 [ 1110.230466][ T6246] __x64_sys_sendmsg+0x1b1/0x290 [ 1110.230493][ T6246] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1110.230542][ T6246] do_syscall_64+0x166/0x520 [ 1110.230572][ T6246] ? trace_irq_disable+0x3b/0x140 [ 1110.230594][ T6246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.230618][ T6246] ? clear_bhb_loop+0x70/0xc0 [ 1110.230648][ T6246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1110.230672][ T6246] RIP: 0033:0x7f2fee59e159 [ 1110.230693][ T6246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1110.230714][ T6246] RSP: 002b:00007f2fef3f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1110.230740][ T6246] RAX: ffffffffffffffda RBX: 00007f2fee825fa0 RCX: 00007f2fee59e159 [ 1110.230757][ T6246] RDX: 0000000000004080 RSI: 0000200000002380 RDI: 0000000000000004 [ 1110.230772][ T6246] RBP: 00007f2fef3f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1110.230787][ T6246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1110.230801][ T6246] R13: 00007f2fee826038 R14: 00007f2fee825fa0 R15: 00007ffcd9341ef8 [ 1110.230839][ T6246] [ 1110.967149][ T6261] bridge10: entered promiscuous mode [ 1110.967195][ T6261] bridge10: entered allmulticast mode [ 1111.352145][ T6283] netlink: 'syz.3.8093': attribute type 21 has an invalid length. [ 1111.654901][ T6302] ip6tnl2: entered allmulticast mode [ 1111.764361][ T6303] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.786603][ T6297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.852121][ T6302] netlink: 'syz.4.8097': attribute type 1 has an invalid length. [ 1111.852166][ T6302] __nla_validate_parse: 7 callbacks suppressed [ 1111.852200][ T6302] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8097'. [ 1111.854360][ T6302] xt_hashlimit: size too large, truncated to 1048576 [ 1112.076143][ T6319] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1112.431621][ T6335] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1112.762944][ T6338] syzkaller1: tun_chr_ioctl cmd 1074025681 [ 1113.077027][ T6363] syzkaller0: entered promiscuous mode [ 1113.077078][ T6363] syzkaller0: entered allmulticast mode [ 1113.092445][ T6368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8117'. [ 1113.102437][ T6368] netlink: 'syz.3.8117': attribute type 7 has an invalid length. [ 1113.110862][ T6368] netlink: 'syz.3.8117': attribute type 8 has an invalid length. [ 1113.111955][ T6363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8115'. [ 1113.128668][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8117'. [ 1113.145600][ T6368] ip6gretap0: entered promiscuous mode [ 1113.153295][ T6368] gretap0: entered promiscuous mode [ 1113.162519][ T6368] erspan0: entered promiscuous mode [ 1113.168937][ T6368] debugfs: 'hsr1' already exists in 'hsr' [ 1113.174936][ T6368] Cannot create hsr debugfs directory [ 1113.201892][ T6366] netlink: 236 bytes leftover after parsing attributes in process `syz.0.8116'. [ 1113.353628][ T6380] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 1113.363531][ T6380] netlink: 'syz.3.8119': attribute type 1 has an invalid length. [ 1113.449588][ T6374] IPVS: Scheduler module ip_vs_sip not found [ 1113.565136][ T6380] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1113.632835][ T6394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8122'. [ 1113.632887][ T6394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8122'. [ 1113.774935][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8125'. [ 1113.806800][ T6406] ovs-system: entered promiscuous mode [ 1114.131957][ T6424] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8129'. [ 1114.337239][ T6424] syzkaller0: entered promiscuous mode [ 1114.337293][ T6424] syzkaller0: entered allmulticast mode [ 1114.402814][ T6433] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 1114.519518][ T6436] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8132'. [ 1114.551845][ T6435] bridge0: port 1(veth0) entered blocking state [ 1114.552004][ T6435] bridge0: port 1(veth0) entered disabled state [ 1114.552344][ T6435] veth0: entered allmulticast mode [ 1114.581838][ T6435] veth0: entered promiscuous mode [ 1114.587505][ T6435] bridge0: port 1(veth0) entered blocking state [ 1114.587793][ T6435] bridge0: port 1(veth0) entered forwarding state [ 1114.880928][ T6456] ip_tables: iptables: counters copy to user failed while replacing table [ 1115.021342][ T6460] siw: device registration error -23 [ 1115.603790][ T6483] netlink: 'syz.0.8143': attribute type 10 has an invalid length. [ 1118.603702][ T6483] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1118.612604][ T6483] team0: Port device netdevsim1 added [ 1118.679018][ T6495] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.680106][ T6495] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.685165][ T6495] bridge0: entered allmulticast mode [ 1118.709512][ T6497] bridge_slave_1: left allmulticast mode [ 1118.709564][ T6497] bridge_slave_1: left promiscuous mode [ 1118.710155][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state [ 1118.739868][ T6497] bridge_slave_0: left allmulticast mode [ 1118.739934][ T6497] bridge_slave_0: left promiscuous mode [ 1118.740556][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state [ 1118.808838][ T6505] hsr0: left promiscuous mode [ 1118.815503][ T6503] 0·: renamed from hsr0 (while UP) [ 1118.841696][ T6503] 0·: entered allmulticast mode [ 1118.841745][ T6503] hsr_slave_0: entered allmulticast mode [ 1118.841765][ T6503] hsr_slave_1: entered allmulticast mode [ 1118.847061][ T6503] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1119.139117][ T6529] __nla_validate_parse: 4 callbacks suppressed [ 1119.139171][ T6529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8151'. [ 1119.425347][ T6543] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8151'. [ 1119.900854][ T6570] FAULT_INJECTION: forcing a failure. [ 1119.900854][ T6570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1119.900917][ T6570] CPU: 0 UID: 0 PID: 6570 Comm: syz.0.8159 Not tainted syzkaller #0 PREEMPT(full) [ 1119.900943][ T6570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1119.900999][ T6570] Call Trace: [ 1119.901025][ T6570] [ 1119.901055][ T6570] dump_stack_lvl+0xe8/0x150 [ 1119.901183][ T6570] should_fail_ex+0x410/0x560 [ 1119.901297][ T6570] _copy_from_user+0x2d/0xb0 [ 1119.901361][ T6570] kstrtouint_from_user+0xd6/0x180 [ 1119.901445][ T6570] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1119.901558][ T6570] ? lock_acquire+0x115/0x350 [ 1119.901624][ T6570] proc_fail_nth_write+0x8e/0x210 [ 1119.901710][ T6570] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1119.901816][ T6570] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1119.901900][ T6570] vfs_write+0x296/0xba0 [ 1119.902014][ T6570] ? __pfx_vfs_write+0x10/0x10 [ 1119.902100][ T6570] ? __fget_files+0x2a/0x420 [ 1119.902181][ T6570] ? __fget_files+0x3a2/0x420 [ 1119.902260][ T6570] ? __fget_files+0x2a/0x420 [ 1119.902352][ T6570] ksys_write+0x150/0x270 [ 1119.902440][ T6570] ? __pfx_ksys_write+0x10/0x10 [ 1119.902578][ T6570] do_syscall_64+0x166/0x520 [ 1119.902644][ T6570] ? trace_irq_disable+0x3b/0x140 [ 1119.902708][ T6570] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.902768][ T6570] ? clear_bhb_loop+0x70/0xc0 [ 1119.902838][ T6570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.902891][ T6570] RIP: 0033:0x7f9f89d5e98e [ 1119.902950][ T6570] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1119.903034][ T6570] RSP: 002b:00007f9f8ac38fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1119.903114][ T6570] RAX: ffffffffffffffda RBX: 00007f9f8ac396c0 RCX: 00007f9f89d5e98e [ 1119.903156][ T6570] RDX: 0000000000000001 RSI: 00007f9f8ac390a0 RDI: 000000000000000f [ 1119.903205][ T6570] RBP: 00007f9f8ac39090 R08: 0000000000000000 R09: 0000000000000000 [ 1119.903247][ T6570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1119.903279][ T6570] R13: 00007f9f8a026128 R14: 00007f9f8a026090 R15: 00007ffe979f8ca8 [ 1119.903372][ T6570] [ 1120.130728][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8156'. [ 1120.268173][ T6577] syzkaller0: entered promiscuous mode [ 1120.274403][ T6577] syzkaller0: entered allmulticast mode [ 1120.414315][ T6581] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8161'. [ 1120.846520][ T6614] hsr0: entered promiscuous mode [ 1120.910264][ T6614] netlink: 140 bytes leftover after parsing attributes in process `syz.2.8167'. [ 1120.920313][ T6614] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8167'. [ 1121.571620][ T6660] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8176'. [ 1121.707838][ T6612] hsr0: left promiscuous mode [ 1121.800639][ T6667] netlink: 'syz.0.8177': attribute type 3 has an invalid length. [ 1121.801282][ T6667] netlink: 'syz.0.8177': attribute type 3 has an invalid length. [ 1122.032149][ T6679] netlink: 'syz.1.8179': attribute type 39 has an invalid length. [ 1122.055509][ T6677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8178'. [ 1122.293474][ T6684] netlink: 'syz.2.8181': attribute type 21 has an invalid length. [ 1122.891457][ T6716] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8188'. [ 1123.010846][ T6719] netlink: 'syz.3.8189': attribute type 5 has an invalid length. [ 1123.079351][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8188'. [ 1123.104778][ T6727] ip_tables: iptables: counters copy to user failed while replacing table [ 1123.141869][ T6716] veth11: entered allmulticast mode [ 1123.187685][ T6727] lo speed is unknown, defaulting to 1000 [ 1123.379309][ T6734] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1123.379370][ T6734] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1123.564464][ T6743] bond12: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1123.583062][ T6743] bond12 (unregistering): Released all slaves [ 1124.066773][ T6763] bridge0: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1124.636736][ T6795] lo speed is unknown, defaulting to 1000 [ 1124.759616][ T6800] __nla_validate_parse: 3 callbacks suppressed [ 1124.759666][ T6800] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8208'. [ 1125.546273][ T6834] Bluetooth: hci0: unsupported parameter 1280 [ 1125.546317][ T6834] Bluetooth: hci0: invalid length 0, exp 2 for type 22 [ 1125.561952][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8218'. [ 1125.653137][ T6840] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8218'. [ 1125.785617][ T6848] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8221'. [ 1125.799397][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8221'. [ 1125.963700][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8226'. [ 1125.963752][ T6854] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8226'. [ 1125.984747][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8226'. [ 1125.984796][ T6855] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8226'. [ 1126.068034][ T6859] netlink: 'syz.0.8225': attribute type 32 has an invalid length. [ 1126.068074][ T6859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8225'. [ 1126.162843][ T6859] bond4: option coupled_control: invalid value (20) [ 1126.181549][ T6859] bond4 (unregistering): Released all slaves [ 1126.452508][ T6880] ip6t_rpfilter: unknown options [ 1127.360814][ T6935] syzkaller0: entered promiscuous mode [ 1127.360864][ T6935] syzkaller0: entered allmulticast mode [ 1127.401388][ T6941] tunl0: entered promiscuous mode [ 1127.919470][ T6981] sctp: [Deprecated]: syz.2.8261 (pid 6981) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1127.919470][ T6981] Use struct sctp_sack_info instead [ 1127.939682][ T6988] sctp: [Deprecated]: syz.2.8261 (pid 6988) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1127.939682][ T6988] Use struct sctp_sack_info instead [ 1127.973902][ T6996] ip_tables: iptables: counters copy to user failed while replacing table [ 1128.227858][ T7005] bridge0: port 2(veth1) entered blocking state [ 1128.228080][ T7005] bridge0: port 2(veth1) entered disabled state [ 1128.229177][ T7005] veth1: entered allmulticast mode [ 1128.234817][ T7005] veth1: entered promiscuous mode [ 1128.241663][ T7005] bridge0: port 2(veth1) entered blocking state [ 1128.242001][ T7005] bridge0: port 2(veth1) entered forwarding state [ 1128.291721][ T7010] netlink: 'syz.3.8265': attribute type 1 has an invalid length. [ 1128.344758][ T7010] bond3: (slave gretap1): making interface the new active one [ 1128.354270][ T7010] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1128.858802][ T7037] syzkaller1: tun_chr_ioctl cmd 1074812117 [ 1128.989092][ T7046] ip6gre0: Caught tx_queue_len zero misconfig [ 1128.999359][ T7046] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1129.637549][ T7074] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1129.811110][ T7090] __nla_validate_parse: 12 callbacks suppressed [ 1129.811157][ T7090] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8284'. [ 1130.326859][ T7124] ipt_rpfilter: unknown options [ 1131.491166][ T7142] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8297'. [ 1132.447013][ T7155] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8300'. [ 1132.460045][ T7155] ip6gre1: entered promiscuous mode [ 1132.460106][ T7155] ip6gre1: entered allmulticast mode [ 1132.686896][ T7078] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1132.687359][ T7096] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1132.691232][ T7101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8285'. [ 1133.003828][ T7178] ip_tunnel: non-ECT from 10.1.1.0 with TOS=0x3 [ 1133.052772][ T7189] netlink: 'syz.0.8306': attribute type 1 has an invalid length. [ 1133.231776][ T7189] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1133.424748][ T7209] lo speed is unknown, defaulting to 1000 [ 1133.663046][ T7166] workqueue: Failed to create a rescuer kthread for wq "nfc29_nci_rx_wq": -EINTR [ 1133.685648][ T7165] workqueue: Failed to create a rescuer kthread for wq "nfc29_nci_cmd_wq": -EINTR [ 1134.543540][ T7288] syzkaller0: entered promiscuous mode [ 1134.543594][ T7288] syzkaller0: entered allmulticast mode [ 1135.110291][ T7302] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8319'. [ 1136.407971][ T7330] netlink: 96 bytes leftover after parsing attributes in process `syz.4.8323'. [ 1138.482456][ T7330] veth0_virt_wifi: entered promiscuous mode [ 1138.638376][ T7333] batman_adv: batadv0: Interface deactivated: ip6gretap1 [ 1138.719528][ T972] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.719590][ T972] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1138.719720][ T972] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.719853][ T972] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1138.719966][ T972] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.720050][ T972] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1138.748258][T10562] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.748360][T10562] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 1138.874536][ T7349] bridge0: port 2(bridge_slave_1) entered disabled state [ 1138.875139][ T7349] bridge0: port 1(bridge_slave_0) entered disabled state [ 1138.903701][ T7349] bridge0: entered allmulticast mode [ 1138.972032][ T7349] vxcan1: entered promiscuous mode [ 1138.972080][ T7349] vxcan1: entered allmulticast mode [ 1139.120415][ T7363] netlink: 'syz.2.8329': attribute type 32 has an invalid length. [ 1139.523167][ T7387] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8333'. [ 1139.716549][ T7394] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8336'. [ 1139.808882][ T7400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8336'. [ 1139.810550][ T7400] bridge_slave_1: left allmulticast mode [ 1139.810635][ T7400] bridge_slave_1: left promiscuous mode [ 1139.811287][ T7400] bridge0: port 2(bridge_slave_1) entered disabled state [ 1139.878197][ T7400] bridge_slave_0: left allmulticast mode [ 1139.878250][ T7400] bridge_slave_0: left promiscuous mode [ 1139.904770][ T7400] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.045600][ T7402] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8338'. [ 1140.693593][ T7431] mac80211_hwsim hwsim95 wlan0: entered allmulticast mode [ 1140.693807][ T7431] netlink: 120 bytes leftover after parsing attributes in process `syz.0.8343'. [ 1140.693857][ T7431] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1140.863707][ T7441] netlink: 136 bytes leftover after parsing attributes in process `syz.1.8348'. [ 1140.873363][ T7441] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 1140.892451][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8348'. [ 1140.939801][ T7442] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8346'. [ 1140.964441][ T7439] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8346'. [ 1140.964495][ T7439] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8346'. [ 1141.304283][ T7461] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8355'. [ 1141.329347][ T7462] xt_hashlimit: size too large, truncated to 1048576 [ 1141.359848][ T7461] bridge0: port 1(erspan0) entered blocking state [ 1141.360026][ T7461] bridge0: port 1(erspan0) entered disabled state [ 1141.360214][ T7461] erspan0: entered allmulticast mode [ 1141.387757][ T7461] erspan0: entered promiscuous mode [ 1141.388805][ T7461] bridge0: port 1(erspan0) entered blocking state [ 1141.388932][ T7461] bridge0: port 1(erspan0) entered forwarding state [ 1141.490168][ T7466] FAULT_INJECTION: forcing a failure. [ 1141.490168][ T7466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1141.490236][ T7466] CPU: 0 UID: 0 PID: 7466 Comm: syz.3.8356 Not tainted syzkaller #0 PREEMPT(full) [ 1141.490263][ T7466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1141.490277][ T7466] Call Trace: [ 1141.490287][ T7466] [ 1141.490297][ T7466] dump_stack_lvl+0xe8/0x150 [ 1141.490335][ T7466] should_fail_ex+0x410/0x560 [ 1141.490372][ T7466] _copy_from_user+0x2d/0xb0 [ 1141.490396][ T7466] sctp_getsockopt_interleaving_supported+0xbb/0x510 [ 1141.490432][ T7466] ? __pfx_sctp_getsockopt_interleaving_supported+0x10/0x10 [ 1141.490462][ T7466] ? sctp_getsockopt+0x12f/0xb90 [ 1141.490494][ T7466] ? __local_bh_enable_ip+0xd6/0x140 [ 1141.490530][ T7466] sctp_getsockopt+0x967/0xb90 [ 1141.490561][ T7466] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1141.490591][ T7466] do_sock_getsockopt+0x51d/0x7e0 [ 1141.490631][ T7466] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1141.490683][ T7466] ? __fget_files+0x3a2/0x420 [ 1141.490712][ T7466] ? __fget_files+0x2a/0x420 [ 1141.490796][ T7466] __x64_sys_getsockopt+0x1a4/0x240 [ 1141.490932][ T7466] do_syscall_64+0x166/0x520 [ 1141.491059][ T7466] ? trace_irq_disable+0x3b/0x140 [ 1141.491136][ T7466] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.491198][ T7466] ? clear_bhb_loop+0x70/0xc0 [ 1141.491265][ T7466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1141.491334][ T7466] RIP: 0033:0x7f5751f9e159 [ 1141.491412][ T7466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1141.491466][ T7466] RSP: 002b:00007f5752ed1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1141.491529][ T7466] RAX: ffffffffffffffda RBX: 00007f5752225fa0 RCX: 00007f5751f9e159 [ 1141.491571][ T7466] RDX: 000000000000007d RSI: 0000000000000084 RDI: 0000000000000003 [ 1141.491604][ T7466] RBP: 00007f5752ed1090 R08: 00002000000001c0 R09: 0000000000000000 [ 1141.491645][ T7466] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 1141.491680][ T7466] R13: 00007f5752226038 R14: 00007f5752225fa0 R15: 00007fff524e68b8 [ 1141.491774][ T7466] [ 1141.535476][ T7464] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8355'. [ 1142.252840][ T7483] netlink: 'syz.4.8360': attribute type 10 has an invalid length. [ 1142.262104][ T7483] netlink: 2 bytes leftover after parsing attributes in process `syz.4.8360'. [ 1142.309808][ T7483] team0: Port device wg2 added [ 1142.423558][ T7489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8363'. [ 1142.892759][ T7509] netlink: 'syz.2.8368': attribute type 1 has an invalid length. [ 1142.903661][ T7508] FAULT_INJECTION: forcing a failure. [ 1142.903661][ T7508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.903698][ T7508] CPU: 1 UID: 0 PID: 7508 Comm: syz.0.8369 Not tainted syzkaller #0 PREEMPT(full) [ 1142.903724][ T7508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1142.903738][ T7508] Call Trace: [ 1142.903747][ T7508] [ 1142.903757][ T7508] dump_stack_lvl+0xe8/0x150 [ 1142.903796][ T7508] should_fail_ex+0x410/0x560 [ 1142.903834][ T7508] _copy_to_user+0x31/0xb0 [ 1142.903860][ T7508] simple_read_from_buffer+0xe1/0x170 [ 1142.903897][ T7508] proc_fail_nth_read+0x1bb/0x230 [ 1142.903929][ T7508] ? common_file_perm+0x20e/0x2b0 [ 1142.903968][ T7508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.904007][ T7508] ? rw_verify_area+0x24a/0x4c0 [ 1142.904042][ T7508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.904077][ T7508] vfs_read+0x213/0xa80 [ 1142.904116][ T7508] ? __pfx___mutex_lock+0x10/0x10 [ 1142.904148][ T7508] ? __pfx_vfs_read+0x10/0x10 [ 1142.904182][ T7508] ? __fget_files+0x2a/0x420 [ 1142.904221][ T7508] ? __fget_files+0x3a2/0x420 [ 1142.904249][ T7508] ? __fget_files+0x2a/0x420 [ 1142.904290][ T7508] ksys_read+0x150/0x270 [ 1142.904325][ T7508] ? __pfx_ksys_read+0x10/0x10 [ 1142.904353][ T7508] ? fput+0xa0/0xd0 [ 1142.904390][ T7508] do_syscall_64+0x166/0x520 [ 1142.904427][ T7508] ? trace_irq_disable+0x3b/0x140 [ 1142.904448][ T7508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.904473][ T7508] ? clear_bhb_loop+0x70/0xc0 [ 1142.904502][ T7508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.904525][ T7508] RIP: 0033:0x7f9f89d5e98e [ 1142.904547][ T7508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1142.904567][ T7508] RSP: 002b:00007f9f8ac59fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1142.904592][ T7508] RAX: ffffffffffffffda RBX: 00007f9f8ac5a6c0 RCX: 00007f9f89d5e98e [ 1142.904609][ T7508] RDX: 000000000000000f RSI: 00007f9f8ac5a0a0 RDI: 0000000000000004 [ 1142.904624][ T7508] RBP: 00007f9f8ac5a090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.904638][ T7508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.904652][ T7508] R13: 00007f9f8a026038 R14: 00007f9f8a025fa0 R15: 00007ffe979f8ca8 [ 1142.904689][ T7508] [ 1143.362771][ T7518] netlink: 'syz.4.8372': attribute type 1 has an invalid length. [ 1143.371622][ T7519] netlink: 'syz.4.8372': attribute type 1 has an invalid length. [ 1143.417865][ T7524] netlink: 'syz.4.8372': attribute type 1 has an invalid length. [ 1143.429445][ T7518] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1143.434749][ T7511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1143.447462][ T7525] netlink: 'syz.4.8372': attribute type 1 has an invalid length. [ 1143.517133][ T7528] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 1144.093533][ T7532] tipc: Enabled bearer , priority 0 [ 1144.101171][ T7532] syzkaller0: entered promiscuous mode [ 1144.109740][ T7532] syzkaller0: entered allmulticast mode [ 1144.129456][ T7532] tipc: Resetting bearer [ 1144.158994][ T7531] tipc: Resetting bearer [ 1144.232287][ T7531] tipc: Disabling bearer [ 1144.370390][ T7552] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1144.370451][ T7552] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1144.370527][ T7552] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1144.449885][ T7552] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1144.614649][ T7557] bond0: Caught tx_queue_len zero misconfig [ 1144.782813][ T7567] ip6tnl1: entered allmulticast mode [ 1144.943480][ T7569] x_tables: unsorted entry at hook 1 [ 1145.266843][ T7595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1145.424352][ T7601] netlink: zone id is out of range [ 1145.432418][ T7601] netlink: zone id is out of range [ 1145.438077][ T7601] netlink: zone id is out of range [ 1145.443421][ T7601] netlink: zone id is out of range [ 1145.443461][ T7601] netlink: zone id is out of range [ 1145.443474][ T7601] netlink: zone id is out of range [ 1145.850442][ T7616] __nla_validate_parse: 77 callbacks suppressed [ 1145.859368][ T7616] netlink: 132 bytes leftover after parsing attributes in process `syz.4.8401'. [ 1146.042669][ T7622] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8404'. [ 1146.069213][ T7628] net_ratelimit: 6 callbacks suppressed [ 1146.074988][ T7628] openvswitch: netlink: nsh attr 1 has unexpected len 335 expected 8 [ 1146.101637][ T7631] netlink: 260 bytes leftover after parsing attributes in process `syz.2.8406'. [ 1146.121545][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8406'. [ 1146.140103][T27659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1146.404859][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8411'. [ 1146.486942][ T7645] netlink: 88 bytes leftover after parsing attributes in process `syz.4.8409'. [ 1146.501261][ T7656] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8414'. [ 1146.767927][ T7667] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8418'. [ 1146.870453][ T7677] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8421'. [ 1146.975067][ T7685] netlink: 'syz.1.8422': attribute type 1 has an invalid length. [ 1147.014112][ T7690] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1147.033198][ T7693] netlink: 'syz.1.8422': attribute type 1 has an invalid length. [ 1147.056942][ T7685] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1147.097406][ T7678] netlink: 52 bytes leftover after parsing attributes in process `syz.0.8421'. [ 1147.166227][T27659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.320322][ T7705] 0·: renamed from hsr0 (while UP) [ 1147.341358][ T7705] 0·: entered allmulticast mode [ 1147.347061][ T7705] hsr_slave_0: entered allmulticast mode [ 1147.352867][ T7705] hsr_slave_1: entered allmulticast mode [ 1147.353351][ T7705] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 1147.353391][ T7705] 0·: left promiscuous mode [ 1147.536685][ T7726] netlink: 'syz.4.8432': attribute type 9 has an invalid length. [ 1147.728691][T28934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.758965][ T7735] ip_tables: iptables: counters copy to user failed while replacing table [ 1147.894560][ T3374] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.896938][T10570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1147.898864][T27659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1148.110222][ T7746] lo: entered promiscuous mode [ 1148.490550][ T7770] blkio.reset_stats is deprecated [ 1148.778530][ T7762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1148.801347][ T7762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1149.105185][ T7771] bond11: option lp_interval: invalid value (0) [ 1149.105241][ T7771] bond11: option lp_interval: allowed values 1 - 2147483647 [ 1149.125240][ T7771] bond11 (unregistering): Released all slaves [ 1149.232397][T10570] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.232483][T10570] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.232647][T10570] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.232803][T10570] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.475564][ T7811] ref_ctr_offset mismatch. inode: 0x64 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 1149.484835][ T7803] ì: renamed from bond_slave_0 [ 1149.639543][ T7812] xt_cluster: node mask cannot exceed total number of nodes [ 1149.651649][ T7812] netlink: 'syz.2.8452': attribute type 16 has an invalid length. [ 1149.651700][ T7812] netlink: 'syz.2.8452': attribute type 17 has an invalid length. [ 1150.302582][ T7845] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 1150.302730][ T7845] syzkaller1: linktype set to 773 [ 1151.329680][ T6397] net_ratelimit: 11 callbacks suppressed [ 1151.329732][ T6397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1151.351468][ T32] audit: type=1800 audit(1788000431.312:24): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8464" name="memory.events" dev="tmpfs" ino=2531 res=0 errno=0 [ 1151.453462][ T7897] syzkaller1: entered promiscuous mode [ 1151.453505][ T7897] syzkaller1: entered allmulticast mode [ 1151.976326][ T7924] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 1152.377871][T27672] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1152.428954][ T7922] bridge0: left allmulticast mode [ 1152.454351][ T7922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1152.466879][ T7922] 8021q: adding VLAN 0 to HW filter on device team0 [ 1152.479054][ T7955] __nla_validate_parse: 8 callbacks suppressed [ 1152.485657][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8485'. [ 1152.505815][ T7922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1152.512590][ T7922] vxcan1: left promiscuous mode [ 1152.512648][ T7922] vxcan1: left allmulticast mode [ 1152.592988][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1152.604350][ T7922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1152.622338][ T7922] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1152.622386][ T7922] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1152.622787][ T7922] 0·: left allmulticast mode [ 1152.622998][ T7922] hsr_slave_0: left allmulticast mode [ 1152.623210][ T7922] hsr_slave_1: left allmulticast mode [ 1152.645662][ T7922] veth1_vlan: left promiscuous mode [ 1152.655370][ T7922] veth0_vlan: left promiscuous mode [ 1152.667624][ T7922] veth0_vlan: entered promiscuous mode [ 1152.679065][ T7922] veth1_vlan: entered promiscuous mode [ 1152.679594][ T7922] macvlan0: left promiscuous mode [ 1152.705767][ T7922] veth1_macvtap: left promiscuous mode [ 1152.712510][ T7922] veth0_macvtap: left promiscuous mode [ 1152.718344][ T7922] veth0_macvtap: entered promiscuous mode [ 1152.724185][ T7922] veth1_macvtap: entered promiscuous mode [ 1152.748453][ T7922] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1152.759907][ T7922] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1152.775147][ T7922] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1152.789298][ T7922] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1152.799249][ T7922] ip6erspan0: left allmulticast mode [ 1152.818805][ T7922] batman_adv: batadv0: Interface activated: ip6gretap1 [ 1152.827090][ T7922] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1152.828228][ T7922] mac80211_hwsim hwsim106 wlan0: entered promiscuous mode [ 1152.831919][ T7922] geneve2: left promiscuous mode [ 1152.831972][ T7922] geneve2: left allmulticast mode [ 1152.872759][ T7922] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1152.974786][ T7922] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1153.057423][T10560] bridge0: port 1(bridge_slave_0) entered blocking state [ 1153.057590][T10560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1153.084977][T10560] bridge0: port 2(bridge_slave_1) entered blocking state [ 1153.085142][T10560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1153.319788][T10560] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.322667][ T3374] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.322717][ T3374] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.322782][ T3374] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1153.410113][ T6397] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.423399][T27672] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1153.620685][ T7985] syzkaller0: entered promiscuous mode [ 1153.628980][ T7985] syzkaller0: entered allmulticast mode [ 1153.661037][T10560] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.671160][T28926] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.687465][T27689] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1153.710292][ T972] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1153.780500][ T7985] tipc: Enabled bearer , priority 0 [ 1153.866301][ T6397] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1153.961937][ T7983] tipc: Resetting bearer [ 1153.983964][ T8000] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8491'. [ 1154.079349][ T7983] tipc: Disabling bearer [ 1154.398003][ T8025] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8500'. [ 1154.411296][ T8025] netlink: 19 bytes leftover after parsing attributes in process `syz.4.8500'. [ 1154.447270][T27659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1154.569312][ T8029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8501'. [ 1154.632741][ T8029] bond5: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1154.649186][ T8029] bond5 (unregistering): Released all slaves [ 1154.898759][ T8051] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8505'. [ 1155.060131][ T8060] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.062307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.069528][ T8060] sctp: [Deprecated]: syz.4.8508 (pid 8060) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1155.069528][ T8060] Use struct sctp_sack_info instead [ 1155.265711][ T8071] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8510'. [ 1155.310674][ T8055] macsec1: entered promiscuous mode [ 1155.471780][T10570] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1155.472442][T10570] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1155.493533][T27659] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1155.585615][ T8079] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8511'. [ 1155.595173][ T8079] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8511'. [ 1156.018575][T28940] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1156.335958][ C0] net_ratelimit: 3107 callbacks suppressed [ 1156.336013][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.336024][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1156.336337][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.336373][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1156.336631][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1156.336709][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1156.336918][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.337046][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1156.337234][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1156.337376][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1159.327863][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1161.346011][ C1] net_ratelimit: 35440 callbacks suppressed [ 1161.346066][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1161.346095][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1161.346388][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.346392][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1161.346694][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1161.346694][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.347001][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1161.347002][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1161.347294][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1161.347388][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1161.665554][ C0] sched: DL replenish lagged too much [ 1166.356095][ C1] net_ratelimit: 35836 callbacks suppressed [ 1166.356106][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1166.356145][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.356435][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.356456][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.356695][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.356763][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.356957][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1166.357062][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.357239][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1166.357359][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1167.094758][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1167.103586][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1171.366050][ C0] net_ratelimit: 36112 callbacks suppressed [ 1171.366118][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1171.366193][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.366411][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.366496][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.366679][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.366785][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.367061][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.367080][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1171.367342][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1171.367368][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.376020][ C1] net_ratelimit: 35784 callbacks suppressed [ 1176.376070][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.376377][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.376672][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.376957][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.376988][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.377258][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.377298][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1176.377569][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.377595][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1176.377869][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1177.335748][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1181.386084][ C0] net_ratelimit: 35997 callbacks suppressed [ 1181.386138][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.386154][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.386460][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1181.386500][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.386758][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.386796][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.387041][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.387100][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1181.387329][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1181.387433][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1183.099948][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1186.395919][ C0] net_ratelimit: 36565 callbacks suppressed [ 1186.395962][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.395972][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.396249][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.396276][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1186.396533][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.396575][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.396809][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.396878][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1186.397083][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1186.397184][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.405990][ C1] net_ratelimit: 36102 callbacks suppressed [ 1191.405994][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.406041][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.406266][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1191.406345][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.406540][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.406674][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.406822][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1191.406973][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.407105][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1191.407271][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1196.415928][ C1] net_ratelimit: 37437 callbacks suppressed [ 1196.415955][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1196.416093][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1196.416253][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1196.416399][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1196.416547][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1196.416678][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1196.416848][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1196.416961][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1196.417140][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1196.417369][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.426173][ C1] net_ratelimit: 35922 callbacks suppressed [ 1201.426230][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.427040][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.427732][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.428457][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.429187][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.429955][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.430684][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.431399][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.432104][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1201.432785][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1206.435986][ C0] net_ratelimit: 35678 callbacks suppressed [ 1206.436047][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1206.436048][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1206.436347][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1206.436345][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1206.436639][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1206.436651][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1206.436912][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1206.436972][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1206.437186][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1206.437248][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1211.445974][ C0] net_ratelimit: 36654 callbacks suppressed [ 1211.446003][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1211.446020][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1211.446307][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1211.446323][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1211.446604][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1211.446620][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1211.446919][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1211.446952][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1211.447212][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1211.447239][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1213.809735][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1216.455904][ C0] net_ratelimit: 36575 callbacks suppressed [ 1216.455960][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.455996][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.456254][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1216.456279][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.456515][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1216.456553][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.456782][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.456842][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1216.457038][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1216.457116][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.465899][ C1] net_ratelimit: 36891 callbacks suppressed [ 1221.465903][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1221.465948][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.466169][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.466264][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.466430][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1221.466565][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.466701][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.466905][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1221.466965][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1221.467211][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.475911][ C0] net_ratelimit: 36659 callbacks suppressed [ 1226.475937][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.476069][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.476198][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1226.476384][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.476499][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.476677][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.476783][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1226.476966][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1226.477083][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1226.477257][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1229.405069][ T1526] Bluetooth: hci3: command 0x0405 tx timeout [ 1231.485971][ C0] net_ratelimit: 35795 callbacks suppressed [ 1231.485996][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1231.486013][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1231.486256][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1231.486308][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1231.486523][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1231.486583][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1231.486777][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1231.486856][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1231.487044][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1231.487294][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1236.495916][ C0] net_ratelimit: 36418 callbacks suppressed [ 1236.495941][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1236.495992][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1236.496213][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1236.496324][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1236.496493][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1236.496619][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1236.496791][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1236.496904][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1236.497112][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1236.497195][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1241.505949][ C1] net_ratelimit: 37548 callbacks suppressed [ 1241.505974][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1241.506006][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1241.506267][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1241.506278][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1241.506572][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1241.506578][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1241.506865][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1241.506866][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1241.507161][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1241.507167][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1246.515918][ C1] net_ratelimit: 37254 callbacks suppressed [ 1246.515927][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1246.515971][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1246.516258][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1246.516266][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1246.516544][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1246.516550][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1246.516821][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1246.516835][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1246.517110][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1246.517123][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1251.525942][ C1] net_ratelimit: 36656 callbacks suppressed [ 1251.525966][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1251.525967][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1251.526261][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1251.526266][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1251.526532][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1251.526601][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1251.526824][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1251.526912][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1251.527093][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1251.527197][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1256.535907][ C0] net_ratelimit: 35836 callbacks suppressed [ 1256.535943][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1256.535966][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1256.536254][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1256.536252][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1256.536554][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1256.536554][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1256.536845][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1256.536864][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1256.537148][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1256.537186][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1261.545951][ C1] net_ratelimit: 36424 callbacks suppressed [ 1261.545951][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1261.545975][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1261.546243][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1261.546308][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1261.546556][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1261.546603][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1261.546857][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1261.546899][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1261.547144][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1261.547201][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1266.556076][ C0] net_ratelimit: 36559 callbacks suppressed [ 1266.556102][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1266.556118][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1266.556393][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1266.556419][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1266.556699][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1266.556721][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1266.556981][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1266.557010][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1266.557242][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1266.557371][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1271.565891][ C0] net_ratelimit: 36493 callbacks suppressed [ 1271.565944][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1271.565958][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1271.566242][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1271.566265][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1271.566520][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1271.566559][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1271.566815][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1271.566852][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1271.567091][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1271.567155][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1274.627771][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1276.575897][ C0] net_ratelimit: 37260 callbacks suppressed [ 1276.575921][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1276.576088][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1276.576235][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1276.576390][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1276.576553][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1276.576677][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1276.576831][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1276.576972][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1276.577151][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1276.577257][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1281.585946][ C1] net_ratelimit: 37136 callbacks suppressed [ 1281.585971][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1281.586095][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1281.586297][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1281.586416][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1281.586610][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1281.586700][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1281.586913][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1281.586988][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1281.587245][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1281.587314][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1286.595965][ C1] net_ratelimit: 36984 callbacks suppressed [ 1286.596006][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1286.596038][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1286.596321][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1286.596343][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1286.596614][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1286.596634][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1286.596915][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1286.596915][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1286.597207][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1286.597221][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1291.605919][ C0] net_ratelimit: 37710 callbacks suppressed [ 1291.605962][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1291.605969][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1291.606251][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1291.606271][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1291.606528][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1291.606567][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1291.606812][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1291.606860][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1291.607095][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1291.607143][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1296.615881][ C1] net_ratelimit: 37413 callbacks suppressed [ 1296.615905][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1296.615924][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1296.616182][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1296.616238][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1296.616452][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1296.616516][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1296.616730][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1296.616794][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1296.616999][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1296.617063][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1297.815855][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1297.878488][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8080/1:b..l P8093/3:b..l [ 1297.887596][ C0] rcu: (detected by 0, t=10509 jiffies, g=231673, q=3862 ncpus=2) [ 1297.895543][ C0] task:syz.1.8516 state:R running task stack:26088 pid:8093 tgid:8093 ppid:30721 task_flags:0x400040 flags:0x00080000 [ 1297.909108][ C0] Call Trace: [ 1297.912414][ C0] [ 1297.915381][ C0] __schedule+0x17d4/0x5820 [ 1297.919958][ C0] ? lock_acquire+0x115/0x350 [ 1297.924679][ C0] ? __pfx___schedule+0x10/0x10 [ 1297.929581][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1297.934654][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1297.940075][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1297.945497][ C0] preempt_schedule_common+0x7f/0xd0 [ 1297.950836][ C0] preempt_schedule_thunk+0x16/0x40 [ 1297.956079][ C0] _raw_spin_unlock+0x41/0x50 [ 1297.960799][ C0] filemap_map_pages+0x1aba/0x2170 [ 1297.965973][ C0] ? lock_acquire+0x115/0x350 [ 1297.970691][ C0] ? filemap_map_pages+0x1d1/0x2170 [ 1297.975932][ C0] ? lruvec_stat_mod_folio+0x6e/0x3e0 [ 1297.981352][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1297.986881][ C0] ? lock_acquire+0x115/0x350 [ 1297.991611][ C0] ? lruvec_stat_mod_folio+0x28b/0x3e0 [ 1297.997118][ C0] ? do_pte_missing+0x140c/0x34b0 [ 1298.002193][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 1298.007696][ C0] ? do_pte_missing+0x140c/0x34b0 [ 1298.012766][ C0] do_pte_missing+0x20ae/0x34b0 [ 1298.017670][ C0] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 1298.023961][ C0] handle_mm_fault+0x1a53/0x3750 [ 1298.028956][ C0] ? handle_mm_fault+0xf1/0x3750 [ 1298.033952][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 1298.039455][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 1298.044770][ C0] do_user_addr_fault+0xa4f/0x1340 [ 1298.049933][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 1298.055348][ C0] exc_page_fault+0x6a/0xc0 [ 1298.059902][ C0] asm_exc_page_fault+0x26/0x30 [ 1298.064802][ C0] RIP: 0033:0x7f2fee456695 [ 1298.069258][ C0] RSP: 002b:00007ffcd9342050 EFLAGS: 00010287 [ 1298.075366][ C0] RAX: 0000001b32d20000 RBX: 0000001b32d20000 RCX: 0000000000000000 [ 1298.083370][ C0] RDX: 0000001b32d20000 RSI: 00007ffcd9342040 RDI: 00007ffcd9342140 [ 1298.091380][ C0] RBP: 000000000011f356 R08: 0000001b33120000 R09: 3fffffffffffffff [ 1298.099381][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 1298.107380][ C0] R13: 0000000000000000 R14: 000000000011f356 R15: 00007ffcd93422f0 [ 1298.115406][ C0] [ 1298.118459][ C0] task:syz.3.8513 state:R running task stack:25352 pid:8080 tgid:8080 ppid:3937 task_flags:0x400040 flags:0x00080002 [ 1298.132006][ C0] Call Trace: [ 1298.135309][ C0] [ 1298.138285][ C0] __schedule+0x17d4/0x5820 [ 1298.142844][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1298.147853][ C0] ? __pfx___schedule+0x10/0x10 [ 1298.152743][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1298.157813][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1298.163232][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 1298.168648][ C0] preempt_schedule_common+0x7f/0xd0 [ 1298.173974][ C0] ? nl80211_netlink_notify+0x49c/0x860 [ 1298.179599][ C0] preempt_schedule_thunk+0x16/0x40 [ 1298.184843][ C0] __local_bh_enable_ip+0xe9/0x140 [ 1298.189998][ C0] nl80211_netlink_notify+0x49c/0x860 [ 1298.195406][ C0] ? nl80211_netlink_notify+0x75/0x860 [ 1298.200903][ C0] notifier_call_chain+0x1a5/0x3d0 [ 1298.206076][ C0] blocking_notifier_call_chain+0x6a/0x90 [ 1298.211850][ C0] netlink_release+0x11fb/0x1a80 [ 1298.216834][ C0] ? netlink_release+0x106/0x1a80 [ 1298.221898][ C0] ? __pfx_netlink_release+0x10/0x10 [ 1298.227218][ C0] ? down_write+0x16b/0x200 [ 1298.231782][ C0] ? __pfx_down_write+0x10/0x10 [ 1298.236693][ C0] __sock_release+0xa0/0x1f0 [ 1298.241322][ C0] ? __pfx_sock_close+0x10/0x10 [ 1298.246208][ C0] sock_close+0x1c/0x30 [ 1298.250403][ C0] __fput+0x418/0xa50 [ 1298.254448][ C0] task_work_run+0x1d9/0x270 [ 1298.259089][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1298.264266][ C0] exit_to_user_mode_loop+0x204/0x770 [ 1298.269695][ C0] ? rcu_is_watching+0x16/0xb0 [ 1298.274598][ C0] do_syscall_64+0x328/0x520 [ 1298.279358][ C0] ? trace_irq_disable+0x3b/0x140 [ 1298.284441][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.290551][ C0] ? clear_bhb_loop+0x70/0xc0 [ 1298.295272][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.301202][ C0] RIP: 0033:0x7f5751f9e159 [ 1298.305660][ C0] RSP: 002b:00007fff524e6a18 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1298.314112][ C0] RAX: 0000000000000000 RBX: 00007f5752227da0 RCX: 00007f5751f9e159 [ 1298.322128][ C0] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1298.330128][ C0] RBP: 00007f5752227da0 R08: 0000000000000006 R09: 0000000000000000 [ 1298.338131][ C0] R10: 00007f5752227cb0 R11: 0000000000000246 R12: 000000000011a4f2 [ 1298.346136][ C0] R13: 00007f575222618c R14: 000000000011a341 R15: 00007fff524e6b20 [ 1298.354164][ C0] [ 1298.357210][ C0] rcu: rcu_preempt kthread starved for 925 jiffies! g231673 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 1298.368167][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1298.378160][ C0] rcu: RCU grace-period kthread stack dump: [ 1298.384068][ C0] task:rcu_preempt state:R running task stack:27360 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1298.397630][ C0] Call Trace: [ 1298.400931][ C0] [ 1298.403906][ C0] __schedule+0x17d4/0x5820 [ 1298.408457][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1298.413442][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1298.418613][ C0] ? __pfx___schedule+0x10/0x10 [ 1298.423497][ C0] ? lock_acquire+0x115/0x350 [ 1298.428226][ C0] ? schedule+0x90/0x2b0 [ 1298.432508][ C0] schedule+0x164/0x2b0 [ 1298.436712][ C0] schedule_timeout+0x152/0x2c0 [ 1298.441603][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1298.447010][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1298.452345][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1298.458188][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1298.463786][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1298.468695][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1298.474890][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1298.480224][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1298.485474][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1298.491335][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1298.495967][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1298.501207][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1298.506193][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1298.511274][ C0] kthread+0x38b/0x480 [ 1298.515378][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1298.520612][ C0] ? __pfx_kthread+0x10/0x10 [ 1298.525246][ C0] ret_from_fork+0x514/0xb70 [ 1298.529891][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1298.535064][ C0] ? __switch_to+0xc89/0x1420 [ 1298.539792][ C0] ? __pfx_kthread+0x10/0x10 [ 1298.544425][ C0] ret_from_fork_asm+0x1a/0x30 [ 1298.549260][ C0] [ 1298.552309][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1298.558672][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1298.563920][ C1] NMI backtrace for cpu 1 [ 1298.563939][ C1] CPU: 1 UID: 0 PID: 8095 Comm: syz.2.8515 Not tainted syzkaller #0 PREEMPT(full) [ 1298.563960][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1298.563972][ C1] RIP: 0010:__lock_acquire+0xb35/0x2e50 [ 1298.563996][ C1] Code: e8 20 9c 36 03 85 c0 74 1c 83 3d 09 0e d7 0e 00 75 13 48 8d 3d dc 16 da 0e 48 c7 c6 a6 af 59 8e 67 48 0f b9 3a 90 48 8b 3c 24 <48> bb eb 83 b5 80 46 86 c8 61 48 0f af dd 48 c1 eb 2d 48 8b 04 dd [ 1298.564013][ C1] RSP: 0018:ffffc90000a18710 EFLAGS: 00000003 [ 1298.564031][ C1] RAX: 00000000000000c2 RBX: 000000000bfb20f4 RCX: 0000000000040000 [ 1298.564044][ C1] RDX: 0000000062728c2a RSI: 00000000df5b65d4 RDI: ffff888029458000 [ 1298.564059][ C1] RBP: 0647940f0bfb20f4 R08: fd00000000000000 R09: 0000000000080000 [ 1298.564073][ C1] R10: 0000000000000000 R11: ffff8880b8724408 R12: 0000000000000000 [ 1298.564086][ C1] R13: ffff888029458bb0 R14: ffff888029458c28 R15: 0000000000000003 [ 1298.564099][ C1] FS: 0000000000000000(0000) GS:ffff888124de0000(0000) knlGS:0000000000000000 [ 1298.564115][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1298.564129][ C1] CR2: 00007f5755613b06 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 1298.564147][ C1] Call Trace: [ 1298.564154][ C1] [ 1298.564167][ C1] ? rcu_read_lock_sched_held+0x33/0x70 [ 1298.564193][ C1] ? attach_entity_load_avg+0x55f/0x830 [ 1298.564222][ C1] ? __asan_memset+0x22/0x50 [ 1298.564252][ C1] lock_acquire+0x115/0x350 [ 1298.564270][ C1] ? psi_task_change+0xc9/0x320 [ 1298.564294][ C1] ? enqueue_task_fair+0x16d8/0x1cb0 [ 1298.564317][ C1] psi_write_begin+0xa9/0x160 [ 1298.564337][ C1] ? psi_task_change+0xc9/0x320 [ 1298.564357][ C1] psi_task_change+0xc9/0x320 [ 1298.564380][ C1] enqueue_task+0x33f/0x410 [ 1298.564411][ C1] activate_task+0x44/0xa0 [ 1298.564448][ C1] sched_balance_rq+0x5a64/0x7cb0 [ 1298.564497][ C1] ? __pfx_sched_balance_rq+0x10/0x10 [ 1298.564542][ C1] ? update_cfs_rq_load_avg+0x426/0x4e0 [ 1298.564582][ C1] sched_balance_domains+0x3e2/0x880 [ 1298.564611][ C1] ? sched_balance_domains+0xe8/0x880 [ 1298.564640][ C1] handle_softirqs+0x226/0x860 [ 1298.564666][ C1] ? __irq_exit_rcu+0xcb/0x220 [ 1298.564694][ C1] __irq_exit_rcu+0xcb/0x220 [ 1298.564719][ C1] irq_exit_rcu+0x9/0x30 [ 1298.564742][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1298.564767][ C1] [ 1298.564774][ C1] [ 1298.564782][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1298.564802][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x75/0x80 [ 1298.564832][ C1] Code: 10 17 00 00 83 fa 02 75 21 48 8b 91 18 17 00 00 48 8b 32 48 8d 7e 01 8b 89 14 17 00 00 48 39 cf 73 08 48 89 3a 48 89 44 f2 08 c6 43 1e 0a cc 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 [ 1298.564849][ C1] RSP: 0018:ffffc900057f7318 EFLAGS: 00000293 [ 1298.564865][ C1] RAX: ffffffff81bb7288 RBX: ffff8880b8643708 RCX: ffff888029458000 [ 1298.564880][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 1298.564891][ C1] RBP: ffffc900057f7470 R08: ffffffff907a027f R09: 1ffffffff20f404f [ 1298.564905][ C1] R10: dffffc0000000000 R11: fffffbfff20f4050 R12: 1ffff110170c86e1 [ 1298.564920][ C1] R13: dffffc0000000000 R14: 1ffff1100528b2b3 R15: 0000000000000000 [ 1298.564939][ C1] ? smp_call_function_many_cond+0x1148/0x1500 [ 1298.564965][ C1] smp_call_function_many_cond+0x1148/0x1500 [ 1298.564989][ C1] ? __pfx_flush_tlb_func+0x10/0x10 [ 1298.565019][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1298.565041][ C1] ? rcu_is_watching+0x16/0xb0 [ 1298.565062][ C1] ? trace_tlb_flush+0x3c/0x160 [ 1298.565091][ C1] flush_tlb_mm_range+0x8ff/0x1090 [ 1298.565125][ C1] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1298.565157][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1298.565173][ C1] ? free_pgd_range+0x1356/0x13c0 [ 1298.565207][ C1] ? __lock_acquire+0x6df/0x2e50 [ 1298.565227][ C1] tlb_flush_mmu+0x1af/0xa30 [ 1298.565260][ C1] tlb_finish_mmu+0xf4/0x220 [ 1298.565290][ C1] free_ldt_pgtables+0x192/0x360 [ 1298.565315][ C1] ? __pfx_free_ldt_pgtables+0x10/0x10 [ 1298.565346][ C1] ? down_read+0x2be/0x330 [ 1298.565375][ C1] exit_mmap+0x1bf/0x9f0 [ 1298.565402][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1298.565445][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1298.565479][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 1298.565506][ C1] __mmput+0x118/0x420 [ 1298.565531][ C1] exit_mm+0x221/0x2d0 [ 1298.565550][ C1] do_exit+0x6cd/0x2360 [ 1298.565570][ C1] ? put_pid+0xef/0x130 [ 1298.565597][ C1] ? __pfx_do_exit+0x10/0x10 [ 1298.565616][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1298.565647][ C1] do_group_exit+0x22d/0x2f0 [ 1298.565665][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1298.565690][ C1] get_signal+0x121b/0x12c0 [ 1298.565724][ C1] arch_do_signal_or_restart+0xbb/0x860 [ 1298.565766][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1298.565802][ C1] exit_to_user_mode_loop+0x10e/0x770 [ 1298.565821][ C1] ? rcu_is_watching+0x16/0xb0 [ 1298.565846][ C1] do_syscall_64+0x328/0x520 [ 1298.565870][ C1] ? trace_irq_disable+0x3b/0x140 [ 1298.565888][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.565907][ C1] ? clear_bhb_loop+0x70/0xc0 [ 1298.565929][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.565947][ C1] RIP: 0033:0x7fa1cef9ef49 [ 1298.565964][ C1] Code: Unable to access opcode bytes at 0x7fa1cef9ef1f. [ 1298.565973][ C1] RSP: 002b:00007ffc68f11ba8 EFLAGS: 00000202 ORIG_RAX: 00000000000001b3 [ 1298.565992][ C1] RAX: 0000000000000740 RBX: 00007fa1cef5a4e0 RCX: 00007fa1cef9ef49 [ 1298.566005][ C1] RDX: 00007fa1cef5a4e0 RSI: 0000000000000058 RDI: 00007ffc68f11c00 [ 1298.566018][ C1] RBP: 00007fa1cfe676c0 R08: 00007fa1cfe676c0 R09: 00007ffc68f11ce7 [ 1298.566032][ C1] R10: 0000000000000008 R11: 0000000000000202 R12: ffffffffffffffe8 [ 1298.566044][ C1] R13: 000000000000000b R14: 00007ffc68f11c00 R15: 00007ffc68f11ce8 [ 1298.566066][ C1]