last executing test programs: 1m59.998604805s ago: executing program 2 (id=3564): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x3, @loopback, 0x5}, 0x1c) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001800)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r1, @ANYBLOB="00000000000000000700000001000000180000000000010000000000000000009500000000000000970301000007000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x300, 0x0, 0x54, 0x6}, 0x9c) 1m59.714687737s ago: executing program 2 (id=3568): r0 = socket(0x2b, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000228bd7000ffdbdf25070000000c00"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x804) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x3, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff1, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xa}, {0x7}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e5b, 0x80000000, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x5}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r9, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x25) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', 0x0, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000802110000010802110000005050505050500063c8b5e1410c98403bfda2112a0b000000000000000000640001000012bcb2fc61dca02864d19884114976094ba46f010076065c0504000600"], 0x42) setsockopt$inet_IP_XFRM_POLICY(r9, 0x0, 0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 1m58.520238559s ago: executing program 3 (id=3579): socket$netlink(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0, @ANYRESOCT=r1, @ANYRESOCT=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4048021}, 0x44455) 1m57.840035354s ago: executing program 3 (id=3584): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x19, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, {{}, {}, {}, {0x85, 0x0, 0x0, 0xd3}}, {}, [@cb_func={0x18, 0x4, 0x4, 0x0, 0x3}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffd}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0xf, 0x0, 0x0, 0x40f00, 0x4d}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x20, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) (async) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r1, &(0x7f0000000d80), 0x4000000000001e9, 0x10162, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000000)={0x1}, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x14, 0x4, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000240), &(0x7f00000002c0)=r5}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000002c0)=r5}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010001000000fcffffff100000001800018014000200776c616e3000000800000000000000000800090000000000080008"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x240008c0) 1m57.011983037s ago: executing program 1 (id=3585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x2, 0x66e03de5, 0x50, @dev={0xfe, 0x80, '\x00', 0x42}, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x40, 0x8, 0x2, 0x77f87503}}) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000007060108000000000000000000000000050001000600"], 0x1c}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f00000000c0), &(0x7f0000000180)=0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80801, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0x13f}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c02eff858a8af9e7085973d4cf69a58dc020500822dc25e141235969f4b2be4ed4100070500080000000000000000000000000000732c1ca7fca7331ba1403e863453a89374ca81ab82b51a0e02fa03fa6d2a6d88a98e4b768f7cb4b80699d0d285efda5398ef2675"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0xffffffff, 0xe, 0x0, &(0x7f00000000c0)="05004013ffffffffa000c4353512", 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0xda) 1m55.158248256s ago: executing program 2 (id=3587): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x3c, 0x2c, 0xca7, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x4, 0x5}, {}, {0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0x6}}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x1, @val=@tracing={0xffffffffffffffff, 0x6}}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0xc}, 0x40004) sendmsg$NFT_BATCH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a3200000000140000001100", @ANYRES8], 0x54}, 0x1, 0x0, 0x0, 0x2402c055}, 0x8010) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) (async) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000080a01010000000000000000020000000900010073797a300000000038000000060a17d50000000000000000020000000900020073797a32000000000900010073797a30000000000c0003400000000000000002"], 0xcdc}, 0x1, 0x0, 0x0, 0x8000}, 0x20040010) close(r5) (async) close(r5) r6 = socket(0x29, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x800, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x44, 0x24, 0x800, 0x0, 0x25dfdbfe, {0x60, 0x0, 0x0, r7, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_RAW={0x8}]}}]}, 0x44}}, 0x0) 1m54.987310159s ago: executing program 3 (id=3589): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000080)=0x8, 0x4) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0xe22}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f0000000280)='cgsoup@\xc8`>\x82E\b-\xc81\xbcO\x93YT\xb4\x87\xfd\xec\xf6\xf8m\x03\x14\x1d\xfb\xb6\x9f\xc5\xb2um\xf5\xd6r\x85\x8eB\xb6\xd4\xe1k\x92\x03x\xf8\xc2\x14\xee\x9c\xbc\xa1i\x87\x93\"\x1bF\'VkH\xf2N@\xff\x12\r\xedr\xaf\x92,!\x9c\x98\xf5\xdc-\xc3\t>\xbb\xfa\xb6\xbe\xc0\xbc\xadv\x8e0\xae\xa3\xd2\xa6\xd3\x12\x97\xe9\xe7\xe8\xa8\xecB}\x1a\xd7\xb5&\xa7\xe2Y\xc5\xee\xf0I\x8e\xc4\xb9\x92s\xec6\x92\x9e\x9c\x8cp6\xbc\x88RIF\xfcW\xaa\xd1I\xff\xdf\xb5\r\x0e\x1e\f]\xb8y\xf2\x92CO;4<\xc2\xdd%s\xb7>\xeb}SG\x17\x85QT#\xfa\xc1\xf1\x85\xdd\x82[\x86\xc6\x95\tT\xe4\xffN\rg\xc0E\xfax\xc9\x06j\x98\xc3}\xe7\x1f\xeaGY\xe0\x98\x9b\xe7E\x93\x0eE\x96\x8c\xc6\xf0\xb2\x82\xfdB*\x85\xa2\xe0V}\xfc\xbb\xf6\x89?\x9c\xaa\t\xf7a\x9c\xebk\xb8\xd8\xdaq\xc9\xf7q\xda', 0x101, 0x0, 0xf, 0x0, 0x0}) socket$inet6(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r3) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000006c0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r4, @ANYBLOB="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"], 0xd0}, 0x1, 0x0, 0x0, 0x24000090}, 0x8000) vmsplice(r3, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001940)=ANY=[@ANYBLOB="40010000", @ANYRES16=r6, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a80)=ANY=[@ANYBLOB="400000001000070d27bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4503040001c1060020001280080001006772650014000280060002000f00000008000100", @ANYRES32=0x0, @ANYBLOB="343c952008b8ae4d56dfc20d04d3625fcb48f79fb2d84d0e8adf32c641a0570da6"], 0x40}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000019c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYRESOCT], 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001a00)="72f2da777c06bdadcb7252254ad26c7cc3ba0bc44257cc2dd198b59e184adbc046f6bcf44cfe630d8b62a867ee150bbfb45456131f8ad6930465965cfac476f2098859c33f9810e6676775365020675621ebc510ab5456985a6c36b17685a099648a68468636908afde33a2e26ce9c9c516bcfc1659260b02d7161fb4307b4", 0x7f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xfffffffffffffef4}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x5}], 0x1, 0x40800) connect$inet6(r9, &(0x7f0000000740)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1d}, 0x1c) recvmsg$can_j1939(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/247, 0xf7}, {&(0x7f00000018c0)=""/81, 0x51}], 0x3}, 0x1003) 1m54.985122758s ago: executing program 0 (id=3590): r0 = socket$inet6(0xa, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) socket$inet6(0xa, 0x0, 0x0) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a0, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2d0, 0x20a, 0x278, 0x2d0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0xffffffff, 0xffffff00], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xe}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x31}, @mcast2, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400) (async) 1m54.984710523s ago: executing program 1 (id=3591): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000000900), 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m54.879043709s ago: executing program 2 (id=3593): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 1m54.70176804s ago: executing program 1 (id=3594): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)='L', 0xfe}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='B', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="a1"], 0x10}}], 0x2, 0x4000045) 1m54.55176387s ago: executing program 1 (id=3595): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) r5 = socket(0x1e, 0x1, 0x0) sendmmsg$sock(r5, &(0x7f0000003440)=[{{&(0x7f0000000180)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x80, 0x0, 0x0, 0x0, 0x0, 0x1000000}}, {{&(0x7f0000000000)=@x25, 0x80, 0x0}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000002900)={r4, 0x7, 0x3, "24ab38"}, 0xb) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000001c0)={r4, @in={{0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x84) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08021a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x60044084) 1m54.502694225s ago: executing program 0 (id=3596): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 1m54.354364s ago: executing program 1 (id=3597): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000080)={@local}, &(0x7f00000000c0)=0x14) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001b14010029bd7000ffdbe825080045006d46e539"], 0x18}, 0x1, 0x0, 0x0, 0x4040800}, 0xc0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}], 0x1c) socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x89f6, &(0x7f0000000080)={'bridge0\x00', &(0x7f00000000c0)=@ethtool_regs={0x4, 0x0, 0x1d, "2a161d2d71db37f20a8f1597f02515fcead4e1f5cad54790db5c4e09db"}}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) write$tun(r3, &(0x7f0000001840)=ANY=[@ANYBLOB="030000000601f8ffffffffffff004532001d0065002f0d11907864010102ac1414383297e3ba0fa8a2e71b"], 0x2b) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r7, 0x0, 0x3, &(0x7f0000000280), 0x4) socket(0x5, 0x800, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1e000000000000000b00020009"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2e, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r8, 0x0, &(0x7f0000001700)=""/53}, 0x20) 1m54.258378694s ago: executing program 2 (id=3598): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890424000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000900000000000000000a20000000000a01010000000000000000050000000900010073797a30000000004c000000030a01080000000000000000050000000900010073797a30000000000900030073797a320000000014000480080002400000001408000140000000020b000700e6696c746572"], 0x94}, 0x1, 0x0, 0x0, 0x40090}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000004c00)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002540)=""/4096, 0x2328}], 0x1}, 0x2ca998c3}], 0x1, 0x40000021, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000001000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}, 0x1, 0x0, 0x0, 0x2810}, 0x4000814) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000140)={r0, &(0x7f0000000000)='\x00', 0x82000, &(0x7f0000000080)={@align=0x7fffffffffffffff, {0x7, 0x3, 0xffff, 0x6}}, 0x9, &(0x7f00000000c0), &(0x7f0000000100)=0x9}) bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r6}, 0x8) 1m54.239578651s ago: executing program 4 (id=3599): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0xfffffffc, 0x0, {0xa}}, 0x14}}, 0xc804) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000370401000000ffdbdf2100000000", @ANYRES32=0x0, @ANYBLOB="890c0400000000002c0012800b00010067726574617000001c0002800800040003000000060003008000000006000e0002000000fda6da5c"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x4040) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x10, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4000000000000007911480000000000711133000000000095000300"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x11, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff96}, 0x3e) 1m54.048278819s ago: executing program 0 (id=3600): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000202000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000e8ff13000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a30020000060a010400000000000000000200000118000480140001800e000100627974656f726465720000000900010073797a30000000000900020073797a32000000000800074082593c65240104803c0001800a0001007265646972"], 0x258}}, 0x0) 1m53.947113916s ago: executing program 4 (id=3601): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x10, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc3ff}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) 1m53.882959725s ago: executing program 3 (id=3602): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200000c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2c0000001a00010029bd70000000000002202000000006"], 0x2c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r1) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r4}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x1f, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x5, 0x8a, &(0x7f0000000440)=""/138, 0x40f00, 0x18, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000500)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0xffff2150, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffaf4b}, 0x94) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030300400000fbdbdf250c0000000c0003"], 0x2c}, 0x1, 0x0, 0x0, 0x4c0c0}, 0x4000) 1m53.759368222s ago: executing program 0 (id=3603): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e21, @remote}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000680)=@newtaction={0x8c, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ctinfo={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x60}, {0x46, 0x6, "f5f8021f6e6f1c221b71392c9860dfc0d1f1194fea5a12c8061a01b6a1daca3f7ecf029e9e51ac560eca1b94a9206e3535ddf99659bc1c8e3e063d4b04d38d577933"}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) 1m53.57027149s ago: executing program 4 (id=3604): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) readv(r1, &(0x7f0000000900), 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 1m53.510247712s ago: executing program 4 (id=3605): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x4, [@enum={0x3, 0x1, 0x0, 0xf, 0x4000000, [{0xb, 0x6}]}]}, {0x0, [0x30, 0x0]}}, 0x0, 0x30, 0x0, 0x1, 0x1002}, 0x28) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a0302000200000000000002000000090002"], 0x80}}, 0x20040080) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_ENCAP(r1, 0x113, 0x1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESDEC=r0], 0x110}, 0x1, 0x0, 0x0, 0x40881}, 0x4000081) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="0c0002800500230000000000080007a1383ff1548a36a0154d705ea13b578fbdcd67e333015b4435d022d53cc9166af1dd70e1cf9c871cc57fcb490db134dee9e990785c87326c203517b7c505cbc5435c6006ba4e3915ba58714ce265c8f79959daa51a558b7e81e677ce302f188bc1075d0da04587c7ed0c9998fb225efd931d"], 0x38}, 0x1, 0x0, 0x0, 0x8041}, 0x4841) 1m53.224532072s ago: executing program 4 (id=3606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000002740)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)='L', 0x218}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000008c0)='B', 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="a1"], 0x10}}], 0x2, 0x4000045) 1m53.066119774s ago: executing program 4 (id=3607): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) pipe(0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xa52, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x8, 0x12, r1, 0x80000000) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000240)='*', 0xfdef}], 0x1) epoll_wait(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x5) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x40) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={0x44, 0xb, 0x6, 0x801, 0x0, 0x0, {0x6, 0x0, 0x6}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xef4}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008041}, 0x24008084) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r3], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @rand_addr=0x64010100}, @IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e24}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m50.327734383s ago: executing program 2 (id=3608): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x48, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}}, 0x48}}, 0xb0b6961456b96b1f) r1 = socket(0xa, 0x8001f, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x2, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) unshare(0x6e000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5800000002060102000034e40000000004000008050005000a000000050001000600000005000400000000000900020073797a310000000011000300686173683a69702c706f72740000"], 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x20000253) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e000000040000000400000009"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc800) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r1, 0x4018f50b, &(0x7f0000000300)={0x0, 0x5920, 0xb3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x5c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) socket$nl_route(0x10, 0x3, 0x0) 1m50.325631555s ago: executing program 3 (id=3609): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r0}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 1m48.796755776s ago: executing program 1 (id=3610): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0000000200000006500000ff00000042000000", @ANYRES32, @ANYBLOB="0000839100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000400"], 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000001000008000500", @ANYRES32], 0x50}}, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'hsr0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) 1m48.783011194s ago: executing program 0 (id=3620): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a090000000000000000000200000009000200737900640000000008000440000000000900010073797a30000000000800034000000001"], 0x64}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x440, 0x0, 0x0, 0xfeffffff, 0xf0, 0x2d0, 0x3a8, 0x3a8, 0xffffffff, 0x3a8, 0x3a8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_team\x00', {}, {}, 0x6}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [0x4e23], 0x0, 0x4, 0x2, 0xf}}, @common=@inet=@socket2={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd8, 0x110, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x4000000, 0x4000000, 0x1000000, 0x4000000], 0x0, 0x4}}}, @common=@unspec=@connlabel={{0x28}, {0x6, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x13, @multicast1, @multicast1, @icmp_id=0x67, @icmp_id=0x67}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @broadcast, @multicast1, @gre_key=0x6, @gre_key=0x7}}}}, {{@ip={@private=0xa010101, @broadcast, 0x0, 0x0, 'veth0_virt_wifi\x00', 'wlan0\x00', {}, {}, 0x0, 0x0, 0x48}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@private=0xa010101, @ipv4=@dev, @port, @icmp_id=0x65}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) sendmmsg$inet6(r5, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r7, 0xfffff000, 0xe, 0x0, &(0x7f0000001700)="61df7100c80400d5721ff59fe864", 0x0, 0x8, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028000000240fffffff80800014000000016080003400000000008000440ffffffff0900010073797a30000000000900020073797a3200000000140000001100010000000000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) (async) write$tun(r4, 0x0, 0x33) (async) sendfile(r4, r3, 0x0, 0x10000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000001200)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000011c0)={&(0x7f0000000ec0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0xa8, 0xc, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x50, 0x3, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x14}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x7c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_SET_EXPRESSIONS={0x44, 0x12, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x11}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x9}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xc}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0xfffffffffffffffa}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x8}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}}, @NFT_MSG_DELCHAIN={0x11c, 0x5, 0xa, 0xf01, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0xec, 0xc, "440b491ec4dfa29fa2e2e3c4d8a2a76e7ffda4ec53aa1d8d0412c2f5d9936a00d82ec442a2ecf9554da0143da0a25bc1c92b4106387564ce0be8f3e815948e7cd1cf0841cada6c511c1fc29f69b906226378b593358934aff6bb288e396bc79bd60c3a7c5deaee4508c294d44b846f5623d5b94911db5b8736e6219b5ac4f5137d05acfb8703c5898d1f24f3ecf12e7f5cf98104994b922639721a74c31a6a5d01c976b62d0d8224f9655803b47dc8ec9ff048ac46a47b4d816d14d441d255d6e14348b9ecda91f67d2406e63e2a2734f18f8134a1b0e1b12a7d1761b3fa57a4a4d657becdbcfe48"}]}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x2e4}, 0x1, 0x0, 0x0, 0x10028040}, 0x4000080) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r9, &(0x7f00000002c0), 0x10000000000002ad, 0x4008005, 0x80) close(r9) (async) socket$kcm(0x29, 0x2, 0x0) (async) sendfile(r9, r8, 0x0, 0xf03a0005) sendmmsg(0xffffffffffffffff, &(0x7f0000000e40)=[{{&(0x7f0000000400)=@caif=@dgm={0x25, 0x8, 0x2}, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000980)="e70020697d3aecda4f9bf8ead59b8ca87fe1aaafe02ef7bf1925282139fbf701d797371a3343af2dc896ac83f1507a3df1d2a257cba5c8e8b1f41cf1130a488372e712582aaeb30cc99595c81d35418cc81efe00454d41961b5f571856af52a3c410cd26df26d866aa6a7af3812839a4fd220f8bc076ae6dfa2db89316c460", 0x7f}, {&(0x7f0000000a40)="5d0365bc0cffddcd22e6a2d0da46ccca1bbe05392a8ec7670960721838516816532abe2349aa6884c4fd26dd664a7ddf6b4ec7d76d040cda08a80da9f83aadb3ec9c8c121b341e43d5a993156892f4aff83b45b0e6ee792b23d8aa7ea0fde3cf2cfe0199edb46ef6b785c8ac5c36c416f3387b5480d0b5da840dfec3496925b2f1f478cdfa539434eeab6aaaa929d510dc798dab7af5b3f79d1255a0ba803bdf9eddcd013769d9b1730c13ebf75d6f7c400b063bbc51d73e2030e3cbb4f138d336877362e0a1e736eb6f1e454db36d04b4b969dbba4b23421ad81e081b1fa0b5fb34aa8fe21963e672", 0xe9}], 0x2, &(0x7f0000000c00)=ANY=[@ANYBLOB="68000000000000008800000006000000a370f8f3eed9c3183ba1cb3f8fe77b8cff6a83858dffa9544338ebddf15dec46000d1af7322340694551b6f47152b765ba64f00a099f489aa8d57b324b55c6fb07d467fab6160c1f42a5aea69b31acb52300000000000000d00000000000000014010000040000006b47bae697f576440c07687a7ecd77914b6da80a34149cb8fdcbb955cf68b0ff365f45e3c91671eb66d7f363b5b6ab77578834149cf94d27fdd8745733aaa1d38567d51c184e5e4eeebe123515e6b276d18679f7d53800e43c47253c0435fe5e87b40158d356ec60e76287ef474518cdb3851d6701b86c18f0fdf0dc1371ce2e884bf917bb1b7a9b9de6dbfa375e552ef65bae5da2efe7e3c1d0fd3810b3c043b81c76f5718d952658e3c52e02a30c584bbf091951e9be390000000000000068000000000000000101000007000000f848b3de905ceb37692348c4602582ee80fcd1c184c9652c51f9fd5c1517bd9f236947899aaa649d22b63df65fa90ce1714d0e3915a49ed4559afd74c3e6384c17c32c9c05ee4880c503ffbe881e2853bac4641700000000a000000000000000eac76fd2080000007dca76fb6f723e750fd1361c226b23936f237f0aad678d1398c8cc2270422104734ec58d40eea5a25ad1f512220a1f472ee5a09bf460edf7f163575106e40e22f826b874f222f910aa63dc45090c3034fff774696f4f8bdcb50d43994b053b7d94213456d24285c66bdb3a67168f046646fb839e8d4caac6e5464610b00b13d8e2da7050625440013d837b5100000000"], 0x240}}], 0x1, 0x4008041) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xffffffc1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r2, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="6bbb5ea80cba3c", @ANYRES16=0x0, @ANYBLOB="000327bd7000fbdbdf256200000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990001000000280000000600b400e40c00000600b400770700000600b300000000000600b30000000000"], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 1m48.517333747s ago: executing program 3 (id=3611): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@can_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_FILTER={0xc, 0xb, {{0x1, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}}]}, 0x30}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x1}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2, 0x2, 0x5, 0x4, 0x854b, 0xd8}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4004810) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000022c0)=@newqdisc={0x64, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xe}, {0xfff4, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x38, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xb, 0x0, 0x6, 0x0, 0x7, 0x10001}, {0x9, 0x1, 0x3, 0x4, 0x90, 0x7ff}, 0x800, 0x7fffffff, 0x4ef}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xd6dffbde74885196}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x240040a4}, 0x200040d0) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r10, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r10, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r11, 0x1, 0x0, 0x6, @multicast}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r12, 0x8918, &(0x7f0000000040)={@mcast1, 0x66, r13}) 1m48.187342455s ago: executing program 0 (id=3612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000100001080000000000000005000000005007272ba07ed3192e526e70fc2779bd12ff82761f58842c51ceb861abeb120ec09fcb7db66ffc7caf79981bae44b659e46bf5aa5ef2f611bac2eaa42820a5f33df4fb3c6624519a81813e3772319a38e5a43e241cbbbf37c85c1807b15992d4b0d3f186e6389d5fafa541eb3e77f77c0a84fbfd6de454c72f6c439dcb1df32e1fa0cbb9848ebe4e0961e65fa19e7527348035d9ae02ad7c6ea34208d590d1ac320000000000", @ANYRES8=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000000)={0x9, {{0xa, 0x4e22, 0xfffffff7, @mcast1, 0x1ff}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x108) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x8, 0x7fff, {{0xc, 0x4, 0x0, 0x2e, 0x30, 0x66, 0x0, 0xf, 0x2f, 0x0, @multicast1, @broadcast, {[@noop, @end, @lsrr={0x83, 0x17, 0xc4, [@dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @local]}]}}}}}) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x38}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r9, &(0x7f0000000240)="4f36df57ca3845f4603b3bfd85c67f30f7a89a6f8dd5c0daa686f7608d52b1dea4d376b9b118cc0ecfef1bf64a629fe2741a89325871d204ebc2e8cdf5d0c404c8289f05f35df45d9ca62dc519d86d6e0a61bf9d24580f276c27e4ed71e4ea107292ae148dc46b900cb34c783c488928ceeb25a5277ffa98465b988019176cba5eb12990777f198374dc4e98bce13dd129fc95333cef07e9c284e11affa1a1cc8c3ae28fe5880513c103d4066b3438d54e38f090c0aad5d39eadccde1be43c2e82aad227e5339f", 0xc7, 0x20000000, &(0x7f0000000340)={0x2, 0x0, @empty, 0x4}, 0x10) 0s ago: executing program 32 (id=3612): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x18) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000100001080000000000000005000000005007272ba07ed3192e526e70fc2779bd12ff82761f58842c51ceb861abeb120ec09fcb7db66ffc7caf79981bae44b659e46bf5aa5ef2f611bac2eaa42820a5f33df4fb3c6624519a81813e3772319a38e5a43e241cbbbf37c85c1807b15992d4b0d3f186e6389d5fafa541eb3e77f77c0a84fbfd6de454c72f6c439dcb1df32e1fa0cbb9848ebe4e0961e65fa19e7527348035d9ae02ad7c6ea34208d590d1ac320000000000", @ANYRES8=r1, @ANYRESHEX=r0, @ANYRES32=r0, @ANYBLOB="08001b0000000000"], 0x34}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r4, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000000)={0x9, {{0xa, 0x4e22, 0xfffffff7, @mcast1, 0x1ff}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x108) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x3c}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000380)={'gretap0\x00', 0x0, 0x8000, 0x700, 0x8, 0x7fff, {{0xc, 0x4, 0x0, 0x2e, 0x30, 0x66, 0x0, 0xf, 0x2f, 0x0, @multicast1, @broadcast, {[@noop, @end, @lsrr={0x83, 0x17, 0xc4, [@dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, @empty, @local]}]}}}}}) sendmsg$FOU_CMD_GET(r6, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x58, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x38}}, @FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4004004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000d80)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0xc, &(0x7f00000000c0)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r9 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r9, &(0x7f0000000240)="4f36df57ca3845f4603b3bfd85c67f30f7a89a6f8dd5c0daa686f7608d52b1dea4d376b9b118cc0ecfef1bf64a629fe2741a89325871d204ebc2e8cdf5d0c404c8289f05f35df45d9ca62dc519d86d6e0a61bf9d24580f276c27e4ed71e4ea107292ae148dc46b900cb34c783c488928ceeb25a5277ffa98465b988019176cba5eb12990777f198374dc4e98bce13dd129fc95333cef07e9c284e11affa1a1cc8c3ae28fe5880513c103d4066b3438d54e38f090c0aad5d39eadccde1be43c2e82aad227e5339f", 0xc7, 0x20000000, &(0x7f0000000340)={0x2, 0x0, @empty, 0x4}, 0x10) kernel console output (not intermixed with test programs): 008] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3041'. [ 449.073814][T17869] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.108613][T18012] xt_CT: No such helper "syz1" [ 449.228787][T17869] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.373116][T18030] FAULT_INJECTION: forcing a failure. [ 449.373116][T18030] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.392573][T18030] CPU: 0 UID: 0 PID: 18030 Comm: syz.0.3045 Not tainted syzkaller #0 PREEMPT(full) [ 449.392604][T18030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.392625][T18030] Call Trace: [ 449.392633][T18030] [ 449.392642][T18030] dump_stack_lvl+0xe8/0x150 [ 449.392824][T18030] should_fail_ex+0x40c/0x560 [ 449.392973][T18030] _copy_from_user+0x2d/0xb0 [ 449.393055][T18030] sctp_getsockopt_reconfig_supported+0xbb/0x510 [ 449.393187][T18030] ? __pfx_sctp_getsockopt_reconfig_supported+0x10/0x10 [ 449.393247][T18030] ? sctp_getsockopt+0x12f/0xb90 [ 449.393306][T18030] ? __local_bh_enable_ip+0xd0/0x130 [ 449.393363][T18030] sctp_getsockopt+0x585/0xb90 [ 449.393397][T18030] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 449.393486][T18030] do_sock_getsockopt+0x51d/0x7e0 [ 449.393566][T18030] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 449.393607][T18030] ? __fget_files+0x3a2/0x420 [ 449.393660][T18030] ? __fget_files+0x2a/0x420 [ 449.393688][T18030] __x64_sys_getsockopt+0x1a4/0x240 [ 449.393722][T18030] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.393757][T18030] do_syscall_64+0x174/0x580 [ 449.393871][T18030] ? trace_irq_disable+0x3b/0x140 [ 449.393910][T18030] ? clear_bhb_loop+0x40/0x90 [ 449.393935][T18030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.393956][T18030] RIP: 0033:0x7f815919de59 [ 449.393977][T18030] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.393997][T18030] RSP: 002b:00007f815a030028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 449.394057][T18030] RAX: ffffffffffffffda RBX: 00007f8159426090 RCX: 00007f815919de59 [ 449.394073][T18030] RDX: 0000000000000075 RSI: 0000000000000084 RDI: 0000000000000004 [ 449.394086][T18030] RBP: 00007f815a030090 R08: 0000200000000040 R09: 0000000000000000 [ 449.394099][T18030] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.394113][T18030] R13: 00007f8159426128 R14: 00007f8159426090 R15: 00007ffeedcb0d18 [ 449.394150][T18030] [ 449.396446][T17869] netdevsim netdevsim1 €Â (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.639383][ T5625] Bluetooth: hci0: command tx timeout [ 452.080303][T18018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.241557][T17869] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 452.260358][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 452.282461][T17869] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 452.291328][T18064] netlink: 'syz.2.3057': attribute type 2 has an invalid length. [ 452.314127][T18064] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3057'. [ 452.328443][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 452.337259][T17869] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 452.363798][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 452.384220][T18061] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3056'. [ 452.417233][T17869] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 452.471504][T17869] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 452.517986][T18068] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3058'. [ 452.562831][T18075] Bluetooth: MGMT ver 1.23 [ 452.593022][ T30] audit: type=1800 audit(1783945901.974:16): pid=18075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3059" name="blkio.bfq.time_recursive" dev="tmpfs" ino=3005 res=0 errno=0 [ 452.620306][T18080] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3060'. [ 452.702235][T17869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.774498][T17869] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.851146][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.858377][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.894181][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.901442][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.960129][T18092] netlink: 'syz.3.3064': attribute type 2 has an invalid length. [ 452.968056][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3064'. [ 453.189157][T18101] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3065'. [ 453.452186][T18115] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3069'. [ 453.466499][ T6279] net_ratelimit: 151 callbacks suppressed [ 453.466521][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.509643][ T6306] bond2: (slave bridge1): failed to get link speed/duplex [ 453.551549][ T6287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.587936][ T6287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 453.641329][ T6283] bond2: (slave bridge1): failed to get link speed/duplex [ 453.729557][ T6287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.779681][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.799309][ T6287] bond2: (slave bridge1): failed to get link speed/duplex [ 453.833326][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 453.851670][ T6279] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 454.639852][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 454.646430][ T5625] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 454.681272][T18157] netlink: 'syz.4.3077': attribute type 4 has an invalid length. [ 454.695695][T17869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 454.712383][T18153] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3076'. [ 454.771388][T17869] veth0_vlan: entered promiscuous mode [ 454.844605][T18153] tc action pedit 'at' offset 6 out of bounds [ 454.853274][T17869] veth1_vlan: entered promiscuous mode [ 454.916096][T18164] xfrm1: entered allmulticast mode [ 454.987460][T17869] veth0_macvtap: entered promiscuous mode [ 455.022817][T17869] veth1_macvtap: entered promiscuous mode [ 455.127577][T17869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.266056][T18177] sctp: [Deprecated]: syz.0.3085 (pid 18177) Use of int in maxseg socket option. [ 455.266056][T18177] Use struct sctp_assoc_value instead [ 455.350988][T17869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.494939][ T6287] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.526974][ T6287] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.573856][ T6287] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.600909][T18186] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3088'. [ 455.612067][ T6287] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.712703][T18188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3089'. [ 455.741992][T18188] tipc: Invalid UDP bearer configuration [ 455.742055][T18188] tipc: Enabling of bearer rejected, failed to enable media [ 456.123269][ T6282] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.156951][ T6282] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.204987][T18200] veth1_vlan: left promiscuous mode [ 456.244266][T18200] netlink: 'syz.4.3094': attribute type 1 has an invalid length. [ 456.261624][T18200] netlink: 'syz.4.3094': attribute type 2 has an invalid length. [ 456.428937][ T6282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.449521][ T6282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.282033][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 457.302626][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 457.311335][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 457.324034][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 457.347122][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 457.616944][T18243] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 457.818895][T18253] __nla_validate_parse: 3 callbacks suppressed [ 457.818915][T18253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3105'. [ 458.094109][T18254] syzkaller0: entered promiscuous mode [ 458.115358][T18254] syzkaller0: entered allmulticast mode [ 458.408128][T18275] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3110'. [ 458.550896][ T6288] net_ratelimit: 166 callbacks suppressed [ 458.550919][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.589901][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.629433][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.649452][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.657346][ T6287] bond2: (slave bridge1): failed to get link speed/duplex [ 458.673593][ T6279] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 458.799744][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.829321][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.859437][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.892082][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 458.912697][T18232] bridge0: port 1(bridge_slave_0) entered blocking state [ 458.928850][T18232] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.937136][T18232] bridge_slave_0: entered allmulticast mode [ 458.944873][T18232] bridge_slave_0: entered promiscuous mode [ 458.958623][T18232] bridge0: port 2(bridge_slave_1) entered blocking state [ 458.966497][T18232] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.974985][T18232] bridge_slave_1: entered allmulticast mode [ 458.983358][T18232] bridge_slave_1: entered promiscuous mode [ 459.035106][T18232] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.058499][T18232] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.107921][T18232] team0: Port device team_slave_0 added [ 459.162642][T18232] team0: Port device team_slave_1 added [ 459.255369][T18232] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.269590][T18232] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.304148][T18232] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.321666][T18232] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.328668][T18232] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.355036][T18232] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.439608][ T5625] Bluetooth: hci2: command tx timeout [ 459.541601][T18232] hsr_slave_0: entered promiscuous mode [ 459.560439][T18232] hsr_slave_1: entered promiscuous mode [ 459.577318][T18232] debugfs: 'hsr0' already exists in 'hsr' [ 459.612335][T18232] Cannot create hsr debugfs directory [ 460.327493][T18232] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.341175][T18232] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.352757][T18232] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 57195 - 0 [ 460.573481][T18232] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.602578][T18232] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.624476][T18232] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 57195 - 0 [ 460.843491][T18232] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.875387][T18232] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.903215][T18232] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 57195 - 0 [ 461.124915][T18232] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.149945][T18232] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.167404][T18232] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 57195 - 0 [ 461.520083][ T5625] Bluetooth: hci2: command tx timeout [ 461.556754][T18232] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 461.581618][T18232] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 461.590565][T18232] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 461.607715][T18232] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.628140][T18232] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 461.648831][T18232] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.659030][T18232] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 461.673029][T18232] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.906796][T18232] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.936095][T18360] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 461.978539][T18232] 8021q: adding VLAN 0 to HW filter on device team0 [ 462.019162][ T6295] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.026433][ T6295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.073971][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.081434][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.176087][T18404] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3156'. [ 462.488912][T18407] syzkaller0: entered promiscuous mode [ 462.510204][T18407] syzkaller0: entered allmulticast mode [ 463.121496][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 463.576627][ T6283] net_ratelimit: 191 callbacks suppressed [ 463.576648][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.609606][ T5625] Bluetooth: hci2: command tx timeout [ 463.613057][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.659783][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.695766][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.729503][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.752615][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.791112][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.819442][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.830366][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 463.862758][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 465.449764][T18448] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3170'. [ 465.682289][ T5625] Bluetooth: hci2: command tx timeout [ 465.721085][T18461] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3174'. [ 465.986218][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3178'. [ 466.046752][T18232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.855898][T18512] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3186'. [ 467.068995][T18510] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3186'. [ 467.085013][T18515] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3187'. [ 467.213713][T18232] veth0_vlan: entered promiscuous mode [ 467.305921][T18232] veth1_vlan: entered promiscuous mode [ 467.413085][T18232] veth0_macvtap: entered promiscuous mode [ 467.455312][T18232] veth1_macvtap: entered promiscuous mode [ 467.503895][T18232] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.537566][T18232] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.550093][T18535] netlink: 'syz.0.3192': attribute type 63 has an invalid length. [ 467.574524][ T6282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.599175][ T6282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.640942][ T6279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.674651][ T6279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.775437][T18537] netlink: 'syz.2.3193': attribute type 2 has an invalid length. [ 467.875451][T18542] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3195'. [ 467.893565][ T6288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.922781][ T6288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.974767][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3193'. [ 468.195308][ T6295] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.204506][ T6295] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.204596][T18555] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3198'. [ 468.474014][T18563] netlink: 'syz.4.3098': attribute type 13 has an invalid length. [ 468.531706][T18563] netlink: 'syz.4.3098': attribute type 17 has an invalid length. [ 468.579426][ T6295] net_ratelimit: 178 callbacks suppressed [ 468.579448][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.621239][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.649717][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.661478][T18559] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.669346][T18559] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.680722][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.739899][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.777344][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.819495][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.863150][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.919626][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 468.960660][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 469.098182][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 469.111464][ T50] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 469.125612][ T50] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 469.134042][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 469.142195][ T50] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 469.186976][T18559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.263185][T18559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.633253][T18563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.643342][T18563] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.659809][T18563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.702407][T18563] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.709738][T18563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.726177][T18563] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.733466][T18563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.757218][T18584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3204'. [ 469.767643][T18584] netlink: 'syz.3.3204': attribute type 15 has an invalid length. [ 469.782862][T18563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.793174][T18563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.824106][T18563] veth1_vlan: left promiscuous mode [ 469.831907][T18563] veth0_vlan: left promiscuous mode [ 469.840689][T18563] veth0_vlan: entered promiscuous mode [ 469.850532][T18563] veth1_vlan: entered promiscuous mode [ 469.864322][T18563] veth1_macvtap: left promiscuous mode [ 469.871558][T18563] veth0_macvtap: left promiscuous mode [ 469.878964][T18563] veth0_macvtap: entered promiscuous mode [ 469.895883][T18563] veth1_macvtap: entered promiscuous mode [ 469.908221][T18563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.922819][T18563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.935780][T18563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.949550][T18563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 470.076217][ T5621] bond0: (slave syz_tun): Releasing backup interface [ 470.226814][T18589] veth1_to_bond: entered promiscuous mode [ 470.236299][T18589] veth1_to_bond: left promiscuous mode [ 470.483182][T18602] FAULT_INJECTION: forcing a failure. [ 470.483182][T18602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.513693][T18602] CPU: 0 UID: 0 PID: 18602 Comm: syz.4.3210 Not tainted syzkaller #0 PREEMPT(full) [ 470.513724][T18602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 470.513737][T18602] Call Trace: [ 470.513745][T18602] [ 470.513754][T18602] dump_stack_lvl+0xe8/0x150 [ 470.513793][T18602] should_fail_ex+0x40c/0x560 [ 470.513825][T18602] _copy_from_user+0x2d/0xb0 [ 470.513857][T18602] ___sys_sendmsg+0x1c6/0x360 [ 470.513890][T18602] ? __lock_acquire+0x683/0x2cf0 [ 470.513961][T18602] ? __pfx____sys_sendmsg+0x10/0x10 [ 470.514035][T18602] ? __fget_files+0x2a/0x420 [ 470.514064][T18602] ? __fget_files+0x3a2/0x420 [ 470.514104][T18602] __x64_sys_sendmsg+0x1b1/0x290 [ 470.514142][T18602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 470.514198][T18602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.514223][T18602] do_syscall_64+0x174/0x580 [ 470.514263][T18602] ? trace_irq_disable+0x3b/0x140 [ 470.514291][T18602] ? clear_bhb_loop+0x40/0x90 [ 470.514318][T18602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.514340][T18602] RIP: 0033:0x7f99e079de59 [ 470.514361][T18602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 470.514384][T18602] RSP: 002b:00007f99e1616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 470.514407][T18602] RAX: ffffffffffffffda RBX: 00007f99e0a25fa0 RCX: 00007f99e079de59 [ 470.514422][T18602] RDX: 0000000020040010 RSI: 0000200000001300 RDI: 0000000000000008 [ 470.514435][T18602] RBP: 00007f99e1616090 R08: 0000000000000000 R09: 0000000000000000 [ 470.514449][T18602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.514462][T18602] R13: 00007f99e0a26038 R14: 00007f99e0a25fa0 R15: 00007ffe7de9f648 [ 470.514492][T18602] [ 470.698746][T18611] __nla_validate_parse: 2 callbacks suppressed [ 470.698776][T18611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3208'. [ 471.199496][ T5625] Bluetooth: hci3: command tx timeout [ 471.287211][T18624] syzkaller0: entered promiscuous mode [ 471.315308][T18624] syzkaller0: entered allmulticast mode [ 471.398912][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3212'. [ 471.470767][T18647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3216'. [ 471.493916][T18624] veth11: entered allmulticast mode [ 471.616201][T18574] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.623667][T18574] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.631249][T18574] bridge_slave_0: entered allmulticast mode [ 471.639525][T18574] bridge_slave_0: entered promiscuous mode [ 471.648591][T18574] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.652750][T18657] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3217'. [ 471.656796][T18574] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.672227][T18574] bridge_slave_1: entered allmulticast mode [ 471.680407][T18574] bridge_slave_1: entered promiscuous mode [ 471.722470][T18574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.736549][T18574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.816581][T18574] team0: Port device team_slave_0 added [ 471.840587][T18574] team0: Port device team_slave_1 added [ 471.847244][T18661] xt_l2tp: invalid flags combination: 8 [ 471.892645][T18574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.899967][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.928849][T18574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.943066][T18574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.950285][T18574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.977195][T18574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.035031][T18574] hsr_slave_0: entered promiscuous mode [ 472.042134][T18574] hsr_slave_1: entered promiscuous mode [ 472.048532][T18574] debugfs: 'hsr0' already exists in 'hsr' [ 472.054674][T18574] Cannot create hsr debugfs directory [ 472.215493][T18574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.227279][T18574] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.373244][T18574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.386973][T18574] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.477589][T18574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.488804][T18574] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.574547][T18574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.585727][T18574] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.019167][T18678] netlink: 'syz.4.3221': attribute type 1 has an invalid length. [ 473.035419][T18678] vlan2: entered allmulticast mode [ 473.279506][ T5625] Bluetooth: hci3: command tx timeout [ 473.501070][T18606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 473.540960][T18574] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 473.591767][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 473.620329][ T6290] net_ratelimit: 165 callbacks suppressed [ 473.620352][ T6290] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.635314][T18574] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 473.663122][ T6290] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.697432][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 473.700512][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.733453][T18574] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 473.740207][ T6306] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.766364][ T6306] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.785237][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 473.793666][T18574] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 473.808159][T18574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.809950][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.852909][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.879569][ T6283] bond2: (slave bridge1): failed to get link speed/duplex [ 473.890270][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.921196][ T6306] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 473.934939][T18683] netlink: 'syz.0.3222': attribute type 2 has an invalid length. [ 474.212441][T18574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.370065][T18574] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.429939][ T6288] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.437342][ T6288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.494785][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.502131][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.788450][T18716] FAULT_INJECTION: forcing a failure. [ 474.788450][T18716] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 474.803457][T18716] CPU: 0 UID: 0 PID: 18716 Comm: syz.1.3231 Not tainted syzkaller #0 PREEMPT(full) [ 474.803488][T18716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 474.803502][T18716] Call Trace: [ 474.803510][T18716] [ 474.803519][T18716] dump_stack_lvl+0xe8/0x150 [ 474.803558][T18716] should_fail_ex+0x40c/0x560 [ 474.803589][T18716] _copy_from_iter+0x1d3/0x1660 [ 474.803684][T18716] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 474.803729][T18716] ? rcu_is_watching+0x15/0xb0 [ 474.803776][T18716] ? trace_kmem_cache_alloc+0x29/0xe0 [ 474.803805][T18716] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 474.803832][T18716] ? __pfx__copy_from_iter+0x10/0x10 [ 474.803859][T18716] ? __alloc_skb+0x276/0x7a0 [ 474.803921][T18716] ? __alloc_skb+0x276/0x7a0 [ 474.803957][T18716] ? netlink_sendmsg+0x650/0xb40 [ 474.804029][T18716] ? skb_put+0x112/0x210 [ 474.804072][T18716] netlink_sendmsg+0x6c0/0xb40 [ 474.804106][T18716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.804133][T18716] ? aa_sock_msg_perm+0xf1/0x1b0 [ 474.804207][T18716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 474.804228][T18716] sock_sendmsg_nosec+0x13a/0x180 [ 474.804258][T18716] ____sys_sendmsg+0x54e/0x850 [ 474.804298][T18716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 474.804342][T18716] ? import_iovec+0x73/0xa0 [ 474.804377][T18716] ___sys_sendmsg+0x2a5/0x360 [ 474.804409][T18716] ? __lock_acquire+0x683/0x2cf0 [ 474.804444][T18716] ? __pfx____sys_sendmsg+0x10/0x10 [ 474.804517][T18716] ? __fget_files+0x2a/0x420 [ 474.804545][T18716] ? __fget_files+0x3a2/0x420 [ 474.804584][T18716] __x64_sys_sendmsg+0x1b1/0x290 [ 474.804621][T18716] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 474.804675][T18716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.804699][T18716] do_syscall_64+0x174/0x580 [ 474.804730][T18716] ? trace_irq_disable+0x3b/0x140 [ 474.804757][T18716] ? clear_bhb_loop+0x40/0x90 [ 474.804784][T18716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.804806][T18716] RIP: 0033:0x7f3def99de59 [ 474.804827][T18716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 474.804845][T18716] RSP: 002b:00007f3df0927028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 474.804868][T18716] RAX: ffffffffffffffda RBX: 00007f3defc25fa0 RCX: 00007f3def99de59 [ 474.804884][T18716] RDX: 0000000020040010 RSI: 0000200000001300 RDI: 0000000000000008 [ 474.804897][T18716] RBP: 00007f3df0927090 R08: 0000000000000000 R09: 0000000000000000 [ 474.804910][T18716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 474.804923][T18716] R13: 00007f3defc26038 R14: 00007f3defc25fa0 R15: 00007ffd8218c008 [ 474.804958][T18716] [ 475.095280][T18574] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 475.105806][T18574] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 475.226829][T18721] netlink: 'syz.0.3233': attribute type 1 has an invalid length. [ 475.255451][T18721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3233'. [ 475.359957][ T5625] Bluetooth: hci3: command tx timeout [ 475.372228][T18721] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3233'. [ 475.412690][T18732] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3235'. [ 475.425082][T18734] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3236'. [ 475.737499][T18742] netlink: 'syz.4.3240': attribute type 10 has an invalid length. [ 475.772705][T18749] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3238'. [ 475.797253][T18742] syz_tun: entered promiscuous mode [ 475.905875][T18753] bond0: (slave bond_slave_1): Releasing backup interface [ 475.992446][T18759] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3242'. [ 476.144614][ T4938] block nbd2: Receive control failed (result -32) [ 476.154076][ T50] block nbd2: Receive control failed (result -32) [ 476.162901][ T5625] block nbd2: Receive control failed (result -32) [ 476.198050][T18763] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3243'. [ 476.287430][T18574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.393933][T18574] veth0_vlan: entered promiscuous mode [ 476.411147][T18767] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3244'. [ 476.427434][T18574] veth1_vlan: entered promiscuous mode [ 476.532581][T18574] veth0_macvtap: entered promiscuous mode [ 476.558255][T18574] veth1_macvtap: entered promiscuous mode [ 476.610046][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'. [ 476.646768][T18776] x_tables: duplicate underflow at hook 1 [ 476.652859][T18574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.680746][T18574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.714189][ T6285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.769743][ T6285] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.798911][ T6285] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.844337][ T6285] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.206785][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.245671][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 477.513438][T18785] bridge0: port 3(team0) entered disabled state [ 477.520083][T18785] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.528033][T18785] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.697583][T18785] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 477.740578][T18785] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 477.907904][ T6290] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.924856][ T6290] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.981556][ T6290] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.009549][ T6290] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.041066][ T6279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.063765][ T6279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.435164][T18805] syzkaller0: entered promiscuous mode [ 478.466460][T18805] syzkaller0: entered allmulticast mode [ 478.529766][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.556467][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.565364][T18807] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 478.569474][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.582977][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.595954][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.621034][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.638422][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.647209][T18807] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3202'. [ 478.660446][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.679064][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.699650][T18812] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 478.709638][T18807] vlan2: entered promiscuous mode [ 478.718850][T18807] bridge0: entered promiscuous mode [ 478.729589][ T6295] net_ratelimit: 169 callbacks suppressed [ 478.729610][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.784530][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.792820][ T6288] bond2: (slave bridge1): failed to get link speed/duplex [ 478.800159][ T4938] Bluetooth: hci3: command tx timeout [ 478.829736][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.869755][ T6282] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.909925][ T6282] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.927007][T18818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3255'. [ 478.950388][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 478.967463][T18818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3255'. [ 478.998010][T18818] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3255'. [ 479.000778][ T6285] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.036427][T18818] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3255'. [ 479.059435][ T6290] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.089738][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 479.116727][T18824] netlink: 'syz.2.3256': attribute type 1 has an invalid length. [ 480.044892][T18853] netlink: 'syz.3.3265': attribute type 10 has an invalid length. [ 480.313521][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 480.330196][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 480.341252][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 480.355147][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 480.365541][ T5625] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 480.495001][T18860] syz_tun: left promiscuous mode [ 480.518730][T18860] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.526226][T18860] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.813912][T18860] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.830439][T18860] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.947298][T18860] vlan2: left allmulticast mode [ 481.035788][ T5635] bond0: (slave syz_tun): Releasing backup interface [ 481.139328][ T6279] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.156814][ T6279] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.197365][ T6279] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.228116][ T6279] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.616956][T18914] __nla_validate_parse: 1 callbacks suppressed [ 481.616979][T18914] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3274'. [ 481.814833][T18914] nbd3: detected capacity change from 0 to 2 [ 481.875639][T18928] netlink: 'syz.2.3281': attribute type 10 has an invalid length. [ 481.911948][T18928] syz_tun: entered promiscuous mode [ 481.948364][T18928] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 482.092189][ T4938] block nbd3: Receive control failed (result -104) [ 482.403035][ T4938] Bluetooth: hci1: command tx timeout [ 483.123624][T18866] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.132272][T18866] bridge0: port 1(bridge_slave_0) entered disabled state [ 483.139824][T18866] bridge_slave_0: entered allmulticast mode [ 483.147957][T18866] bridge_slave_0: entered promiscuous mode [ 483.157983][T18866] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.168857][T18866] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.190933][T18866] bridge_slave_1: entered allmulticast mode [ 483.208677][T18866] bridge_slave_1: entered promiscuous mode [ 483.321961][T18866] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 483.340623][T18866] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 483.401164][T18866] team0: Port device team_slave_0 added [ 483.410591][T18866] team0: Port device team_slave_1 added [ 483.479096][T18866] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.491602][T18866] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.528011][T18866] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 483.548271][T18866] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 483.557214][T18866] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 483.585221][T18866] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 483.658683][T18866] hsr_slave_0: entered promiscuous mode [ 483.666715][T18866] hsr_slave_1: entered promiscuous mode [ 483.674577][T18866] debugfs: 'hsr0' already exists in 'hsr' [ 483.680886][T18866] Cannot create hsr debugfs directory [ 483.741560][ T6283] net_ratelimit: 184 callbacks suppressed [ 483.741576][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.789517][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.810150][ T6285] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.840301][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.860250][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.879591][ T6285] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.922345][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.949462][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.969401][ T6285] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 483.989783][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 484.028431][T18866] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.116921][T18866] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.192001][T18866] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.276778][T18866] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.479611][ T4938] Bluetooth: hci1: command tx timeout [ 484.708340][T18993] netlink: 84 bytes leftover after parsing attributes in process `syz.4.3295'. [ 484.763584][T18994] nftables ruleset with unbound set [ 485.289114][T19004] netlink: 'syz.4.3299': attribute type 2 has an invalid length. [ 485.905421][T18962] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 485.975450][T18866] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 486.030974][T18866] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 486.063633][T18866] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 486.114351][T18866] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 486.133755][T18866] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 486.164533][T18866] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 486.184535][T18866] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 486.224428][T18866] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 486.282062][T19015] No such timeout policy "syz0" [ 486.384011][T19019] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 486.411093][T19019] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 486.420585][T19019] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 486.536991][T18866] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.559563][ T4938] Bluetooth: hci1: command tx timeout [ 486.580379][T18866] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.595988][ T6279] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.603251][ T6279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.662146][ T6288] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.669400][ T6288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.262116][T19082] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3318'. [ 488.643868][ T4938] Bluetooth: hci1: command tx timeout [ 488.765236][ T6288] net_ratelimit: 165 callbacks suppressed [ 488.765260][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 488.815451][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 488.839818][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 488.859518][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 488.880745][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 488.908239][ T6288] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 488.939417][ T6290] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 488.960363][ T6282] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 488.989511][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 489.017995][ T6290] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 490.302357][T18866] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.375949][T19102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3323'. [ 490.404106][T19109] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3322'. [ 490.692129][T19124] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3325'. [ 490.711208][T19103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.761775][T19103] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.823669][T19103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.997554][T19103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.015893][T19103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.055604][T19103] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 491.083561][T19103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 491.143422][T19103] veth1_vlan: left promiscuous mode [ 491.150883][T19103] veth0_vlan: left promiscuous mode [ 491.158700][T19103] veth0_vlan: entered promiscuous mode [ 491.170457][T19103] veth1_vlan: entered promiscuous mode [ 491.184105][T19103] veth1_macvtap: left promiscuous mode [ 491.193434][T19103] veth0_macvtap: left promiscuous mode [ 491.201772][T19103] veth0_macvtap: entered promiscuous mode [ 491.281808][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 491.343817][T19103] veth1_macvtap: entered promiscuous mode [ 491.414116][T19103] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 491.426963][T19103] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 491.450024][T19103] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 491.462902][T19103] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 491.496146][T19114] tipc: Enabling of bearer rejected, failed to enable media [ 491.537282][ T6285] bridge0: port 1(bridge_slave_0) entered blocking state [ 491.544560][ T6285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 491.571714][ T6285] bridge0: port 2(bridge_slave_1) entered blocking state [ 491.578924][ T6285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.622825][ T441] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.631792][ T441] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.708379][ T441] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.724252][ T441] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.903824][T18866] veth0_vlan: entered promiscuous mode [ 491.966359][T18866] veth1_vlan: entered promiscuous mode [ 492.124692][T18866] veth0_macvtap: entered promiscuous mode [ 492.154624][T18866] veth1_macvtap: entered promiscuous mode [ 492.194422][T19169] FAULT_INJECTION: forcing a failure. [ 492.194422][T19169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 492.228266][T18866] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 492.234125][T19169] CPU: 0 UID: 0 PID: 19169 Comm: syz.3.3333 Not tainted syzkaller #0 PREEMPT(full) [ 492.234210][T19169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 492.234252][T19169] Call Trace: [ 492.234274][T19169] [ 492.234295][T19169] dump_stack_lvl+0xe8/0x150 [ 492.234390][T19169] should_fail_ex+0x40c/0x560 [ 492.234474][T19169] _copy_to_user+0x31/0xb0 [ 492.234567][T19169] simple_read_from_buffer+0xe1/0x170 [ 492.234663][T19169] proc_fail_nth_read+0x1bb/0x230 [ 492.234805][T19169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.234946][T19169] ? rw_verify_area+0x24a/0x4c0 [ 492.235048][T19169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 492.235123][T19169] vfs_read+0x213/0xa80 [ 492.235226][T19169] ? __pfx___mutex_lock+0x10/0x10 [ 492.235396][T19169] ? __pfx_vfs_read+0x10/0x10 [ 492.235482][T19169] ? __fget_files+0x2a/0x420 [ 492.235558][T19169] ? __fget_files+0x3a2/0x420 [ 492.235585][T19169] ? __fget_files+0x2a/0x420 [ 492.235622][T19169] ksys_read+0x150/0x270 [ 492.235657][T19169] ? __pfx_ksys_read+0x10/0x10 [ 492.235699][T19169] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.235723][T19169] do_syscall_64+0x174/0x580 [ 492.235797][T19169] ? trace_irq_disable+0x3b/0x140 [ 492.235894][T19169] ? clear_bhb_loop+0x40/0x90 [ 492.235976][T19169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.236031][T19169] RIP: 0033:0x7f629c75e68e [ 492.236093][T19169] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 492.236138][T19169] RSP: 002b:00007f629d70cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 492.236201][T19169] RAX: ffffffffffffffda RBX: 00007f629d70d6c0 RCX: 00007f629c75e68e [ 492.236244][T19169] RDX: 000000000000000f RSI: 00007f629d70d0a0 RDI: 0000000000000009 [ 492.236277][T19169] RBP: 00007f629d70d090 R08: 0000000000000000 R09: 0000000000000000 [ 492.236316][T19169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 492.236349][T19169] R13: 00007f629ca26038 R14: 00007f629ca25fa0 R15: 00007ffeba570858 [ 492.236431][T19169] [ 492.524020][T18866] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.604442][ T6288] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.633005][ T6288] tipc: Subscription rejected, illegal request [ 492.633427][ T6285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.683261][ T6285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.704211][ T6285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 493.087004][T19186] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3339'. [ 493.101323][ T6285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.124587][ T6285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.166610][T19186] macvlan0: entered promiscuous mode [ 493.172398][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3338'. [ 493.188062][T19176] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3336'. [ 493.264922][ T6279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 493.280895][ T6279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 493.365249][T19171] netlink: 744 bytes leftover after parsing attributes in process `syz.3.3334'. [ 493.486383][T19193] FAULT_INJECTION: forcing a failure. [ 493.486383][T19193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 493.547415][T19193] CPU: 1 UID: 0 PID: 19193 Comm: syz.0.3264 Not tainted syzkaller #0 PREEMPT(full) [ 493.547448][T19193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 493.547461][T19193] Call Trace: [ 493.547469][T19193] [ 493.547478][T19193] dump_stack_lvl+0xe8/0x150 [ 493.547516][T19193] should_fail_ex+0x40c/0x560 [ 493.547546][T19193] _copy_from_iter+0x1d3/0x1660 [ 493.547568][T19193] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 493.547592][T19193] ? rcu_is_watching+0x15/0xb0 [ 493.547620][T19193] ? trace_kmem_cache_alloc+0x29/0xe0 [ 493.547643][T19193] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 493.547666][T19193] ? __pfx__copy_from_iter+0x10/0x10 [ 493.547688][T19193] ? __alloc_skb+0x276/0x7a0 [ 493.547711][T19193] ? __alloc_skb+0x276/0x7a0 [ 493.547740][T19193] ? netlink_sendmsg+0x650/0xb40 [ 493.547757][T19193] ? skb_put+0x112/0x210 [ 493.547785][T19193] netlink_sendmsg+0x6c0/0xb40 [ 493.547813][T19193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.547835][T19193] ? aa_sock_msg_perm+0xf1/0x1b0 [ 493.547858][T19193] ? __pfx_netlink_sendmsg+0x10/0x10 [ 493.547875][T19193] sock_sendmsg_nosec+0x13a/0x180 [ 493.547899][T19193] ____sys_sendmsg+0x54e/0x850 [ 493.547931][T19193] ? __pfx_____sys_sendmsg+0x10/0x10 [ 493.547967][T19193] ? import_iovec+0x73/0xa0 [ 493.547995][T19193] ___sys_sendmsg+0x2a5/0x360 [ 493.548025][T19193] ? __lock_acquire+0x683/0x2cf0 [ 493.548053][T19193] ? __pfx____sys_sendmsg+0x10/0x10 [ 493.548112][T19193] ? __fget_files+0x2a/0x420 [ 493.548134][T19193] ? __fget_files+0x3a2/0x420 [ 493.548173][T19193] __x64_sys_sendmsg+0x1b1/0x290 [ 493.548204][T19193] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 493.548248][T19193] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.548267][T19193] do_syscall_64+0x174/0x580 [ 493.548293][T19193] ? trace_irq_disable+0x3b/0x140 [ 493.548315][T19193] ? clear_bhb_loop+0x40/0x90 [ 493.548338][T19193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.548355][T19193] RIP: 0033:0x7f9f2c39de59 [ 493.548371][T19193] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.548387][T19193] RSP: 002b:00007f9f2d2c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 493.548405][T19193] RAX: ffffffffffffffda RBX: 00007f9f2c625fa0 RCX: 00007f9f2c39de59 [ 493.548419][T19193] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000008 [ 493.548430][T19193] RBP: 00007f9f2d2c3090 R08: 0000000000000000 R09: 0000000000000000 [ 493.548441][T19193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 493.548451][T19193] R13: 00007f9f2c626038 R14: 00007f9f2c625fa0 R15: 00007ffdb0a22c18 [ 493.548479][T19193] [ 493.819397][ T6279] net_ratelimit: 192 callbacks suppressed [ 493.819420][ T6279] bond2: (slave bridge1): failed to get link speed/duplex [ 493.819435][ T6287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 493.842239][ T6287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 493.950116][ T6285] bond2: (slave bridge1): failed to get link speed/duplex [ 493.961406][ T6287] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 493.994712][ T6287] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.130043][ T6296] bond2: (slave bridge1): failed to get link speed/duplex [ 494.149768][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.169875][ T6285] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 494.201366][ T6285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 494.270449][T19210] batadv_slave_1: entered promiscuous mode [ 494.285641][T19210] team0: entered promiscuous mode [ 494.294529][T19210] team_slave_0: entered promiscuous mode [ 494.310755][T19210] team_slave_1: entered promiscuous mode [ 494.326980][T19210] batadv_slave_1: left promiscuous mode [ 494.338082][T19210] batadv_slave_1: entered promiscuous mode [ 494.385374][T19213] batadv_slave_1: left promiscuous mode [ 494.400830][T19213] team0: left promiscuous mode [ 494.408699][T19213] team_slave_0: left promiscuous mode [ 494.431942][T19213] team_slave_1: left promiscuous mode [ 494.457420][T19214] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 494.885640][T19219] Unsupported ieee802154 address type: 0 [ 494.923456][T19228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 495.126566][T19228] netlink: 'syz.3.3350': attribute type 1 has an invalid length. [ 495.155939][T19228] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3350'. [ 495.341730][T19249] FAULT_INJECTION: forcing a failure. [ 495.341730][T19249] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 495.374263][T19249] CPU: 1 UID: 0 PID: 19249 Comm: syz.3.3355 Not tainted syzkaller #0 PREEMPT(full) [ 495.374308][T19249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 495.374329][T19249] Call Trace: [ 495.374338][T19249] [ 495.374348][T19249] dump_stack_lvl+0xe8/0x150 [ 495.374394][T19249] should_fail_ex+0x40c/0x560 [ 495.374430][T19249] _copy_from_iter+0x1d3/0x1660 [ 495.374470][T19249] ? kmem_cache_alloc_node_noprof+0x1a1/0x610 [ 495.374504][T19249] ? rcu_is_watching+0x15/0xb0 [ 495.374542][T19249] ? trace_kmem_cache_alloc+0x29/0xe0 [ 495.374574][T19249] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 495.374604][T19249] ? __pfx__copy_from_iter+0x10/0x10 [ 495.374635][T19249] ? __alloc_skb+0x276/0x7a0 [ 495.374667][T19249] ? __alloc_skb+0x276/0x7a0 [ 495.374707][T19249] ? netlink_sendmsg+0x650/0xb40 [ 495.374731][T19249] ? skb_put+0x112/0x210 [ 495.374770][T19249] netlink_sendmsg+0x6c0/0xb40 [ 495.374808][T19249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.374839][T19249] ? aa_sock_msg_perm+0xf1/0x1b0 [ 495.374872][T19249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 495.374895][T19249] sock_sendmsg_nosec+0x13a/0x180 [ 495.374929][T19249] ____sys_sendmsg+0x54e/0x850 [ 495.374974][T19249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 495.375025][T19249] ? import_iovec+0x73/0xa0 [ 495.375064][T19249] ___sys_sendmsg+0x2a5/0x360 [ 495.375100][T19249] ? __lock_acquire+0x683/0x2cf0 [ 495.375139][T19249] ? __pfx____sys_sendmsg+0x10/0x10 [ 495.375224][T19249] ? __fget_files+0x2a/0x420 [ 495.375254][T19249] ? __fget_files+0x3a2/0x420 [ 495.375301][T19249] __x64_sys_sendmsg+0x1b1/0x290 [ 495.375342][T19249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 495.375405][T19249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.375433][T19249] do_syscall_64+0x174/0x580 [ 495.375476][T19249] ? trace_irq_disable+0x3b/0x140 [ 495.375508][T19249] ? clear_bhb_loop+0x40/0x90 [ 495.375539][T19249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.375564][T19249] RIP: 0033:0x7f629c79de59 [ 495.375588][T19249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.375609][T19249] RSP: 002b:00007f629d70d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 495.375635][T19249] RAX: ffffffffffffffda RBX: 00007f629ca25fa0 RCX: 00007f629c79de59 [ 495.375653][T19249] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000008 [ 495.375669][T19249] RBP: 00007f629d70d090 R08: 0000000000000000 R09: 0000000000000000 [ 495.375684][T19249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 495.375699][T19249] R13: 00007f629ca26038 R14: 00007f629ca25fa0 R15: 00007ffeba570858 [ 495.375740][T19249] [ 496.400017][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 496.427465][T19288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3365'. [ 496.467620][T19288] netlink: 'syz.3.3365': attribute type 2 has an invalid length. [ 496.719064][T19303] FAULT_INJECTION: forcing a failure. [ 496.719064][T19303] name failslab, interval 1, probability 0, space 0, times 0 [ 496.762827][T19303] CPU: 0 UID: 0 PID: 19303 Comm: syz.0.3368 Not tainted syzkaller #0 PREEMPT(full) [ 496.762859][T19303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 496.762872][T19303] Call Trace: [ 496.762881][T19303] [ 496.762890][T19303] dump_stack_lvl+0xe8/0x150 [ 496.762930][T19303] should_fail_ex+0x40c/0x560 [ 496.762962][T19303] should_failslab+0xa8/0x100 [ 496.763031][T19303] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 496.763061][T19303] ? skb_clone+0x212/0x3a0 [ 496.763081][T19303] ? skb_clone+0x212/0x3a0 [ 496.763110][T19303] skb_clone+0x212/0x3a0 [ 496.763135][T19303] __netlink_deliver_tap+0x413/0x860 [ 496.763172][T19303] ? netlink_deliver_tap+0x2e/0x1b0 [ 496.763197][T19303] netlink_deliver_tap+0x19c/0x1b0 [ 496.763220][T19303] netlink_unicast+0x77f/0x940 [ 496.763265][T19303] netlink_sendmsg+0x813/0xb40 [ 496.763299][T19303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.763327][T19303] ? aa_sock_msg_perm+0xf1/0x1b0 [ 496.763357][T19303] ? __pfx_netlink_sendmsg+0x10/0x10 [ 496.763377][T19303] sock_sendmsg_nosec+0x13a/0x180 [ 496.763407][T19303] ____sys_sendmsg+0x54e/0x850 [ 496.763448][T19303] ? __pfx_____sys_sendmsg+0x10/0x10 [ 496.763496][T19303] ? import_iovec+0x73/0xa0 [ 496.763532][T19303] ___sys_sendmsg+0x2a5/0x360 [ 496.763565][T19303] ? __lock_acquire+0x683/0x2cf0 [ 496.763600][T19303] ? __pfx____sys_sendmsg+0x10/0x10 [ 496.763676][T19303] ? __fget_files+0x2a/0x420 [ 496.763703][T19303] ? __fget_files+0x3a2/0x420 [ 496.763745][T19303] __x64_sys_sendmsg+0x1b1/0x290 [ 496.763783][T19303] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 496.763839][T19303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.763864][T19303] do_syscall_64+0x174/0x580 [ 496.763899][T19303] ? clear_bhb_loop+0x40/0x90 [ 496.763926][T19303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.763948][T19303] RIP: 0033:0x7f9f2c39de59 [ 496.763969][T19303] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 496.763995][T19303] RSP: 002b:00007f9f2d2c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 496.764019][T19303] RAX: ffffffffffffffda RBX: 00007f9f2c625fa0 RCX: 00007f9f2c39de59 [ 496.764034][T19303] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000008 [ 496.764048][T19303] RBP: 00007f9f2d2c3090 R08: 0000000000000000 R09: 0000000000000000 [ 496.764061][T19303] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 496.764074][T19303] R13: 00007f9f2c626038 R14: 00007f9f2c625fa0 R15: 00007ffdb0a22c18 [ 496.764111][T19303] [ 497.200196][T19303] netlink: 'syz.0.3368': attribute type 10 has an invalid length. [ 497.251262][T19303] syz_tun: entered promiscuous mode [ 497.357856][T19303] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 497.388090][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 497.414397][T19313] netlink: 'syz.1.3372': attribute type 11 has an invalid length. [ 497.522823][ T6279] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.546839][T19313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3372'. [ 497.566093][ T6279] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.589557][T19313] netlink: 'syz.1.3372': attribute type 11 has an invalid length. [ 497.603642][ T6279] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 497.638263][ T6279] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 498.068907][T19338] netlink: 'syz.0.3380': attribute type 1 has an invalid length. [ 498.363841][T19352] FAULT_INJECTION: forcing a failure. [ 498.363841][T19352] name failslab, interval 1, probability 0, space 0, times 0 [ 498.384281][T19352] CPU: 0 UID: 0 PID: 19352 Comm: syz.0.3384 Not tainted syzkaller #0 PREEMPT(full) [ 498.384311][T19352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 498.384325][T19352] Call Trace: [ 498.384333][T19352] [ 498.384342][T19352] dump_stack_lvl+0xe8/0x150 [ 498.384381][T19352] should_fail_ex+0x40c/0x560 [ 498.384414][T19352] should_failslab+0xa8/0x100 [ 498.384449][T19352] __kmalloc_cache_noprof+0xa8/0x660 [ 498.384479][T19352] ? rtnl_newlink+0x143/0x1c30 [ 498.384612][T19352] ? rtnl_newlink+0x143/0x1c30 [ 498.384651][T19352] rtnl_newlink+0x143/0x1c30 [ 498.384683][T19352] ? kasan_save_track+0x4f/0x80 [ 498.384709][T19352] ? kasan_save_track+0x3e/0x80 [ 498.384735][T19352] ? __kasan_slab_free+0x5c/0x80 [ 498.384762][T19352] ? kmem_cache_free+0x182/0x650 [ 498.384788][T19352] ? nlmon_xmit+0xb0/0x100 [ 498.384881][T19352] ? dev_hard_start_xmit+0x2cd/0x830 [ 498.384926][T19352] ? __dev_queue_xmit+0x1435/0x37f0 [ 498.384948][T19352] ? __netlink_deliver_tap+0x5b4/0x860 [ 498.384988][T19352] ? netlink_deliver_tap+0x19c/0x1b0 [ 498.385007][T19352] ? netlink_unicast+0x77f/0x940 [ 498.385037][T19352] ? netlink_sendmsg+0x813/0xb40 [ 498.385060][T19352] ? __pfx_rtnl_newlink+0x10/0x10 [ 498.385088][T19352] ? do_syscall_64+0x174/0x580 [ 498.385118][T19352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.385180][T19352] ? kasan_quarantine_put+0xbb/0x1f0 [ 498.385208][T19352] ? lockdep_hardirqs_on+0x7a/0x110 [ 498.385243][T19352] ? nlmon_xmit+0xb0/0x100 [ 498.385278][T19352] ? kmem_cache_free+0x182/0x650 [ 498.385318][T19352] ? __lock_acquire+0x683/0x2cf0 [ 498.385353][T19352] ? __dev_queue_xmit+0x29b/0x37f0 [ 498.385380][T19352] ? __local_bh_enable_ip+0xd0/0x130 [ 498.385406][T19352] ? lockdep_hardirqs_on+0x7a/0x110 [ 498.385436][T19352] ? __dev_queue_xmit+0x29b/0x37f0 [ 498.385457][T19352] ? __local_bh_enable_ip+0xd0/0x130 [ 498.385480][T19352] ? __dev_queue_xmit+0x29b/0x37f0 [ 498.385511][T19352] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 498.385543][T19352] ? __pfx_rtnl_newlink+0x10/0x10 [ 498.385588][T19352] ? __pfx_rtnl_newlink+0x10/0x10 [ 498.385617][T19352] rtnetlink_rcv_msg+0x802/0xc00 [ 498.385653][T19352] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 498.385683][T19352] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 498.385712][T19352] ? ref_tracker_free+0x689/0x830 [ 498.385787][T19352] ? __pfx_ref_tracker_free+0x10/0x10 [ 498.385826][T19352] netlink_rcv_skb+0x226/0x4a0 [ 498.385862][T19352] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 498.385896][T19352] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 498.385946][T19352] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.385966][T19352] ? netlink_deliver_tap+0x2e/0x1b0 [ 498.385994][T19352] netlink_unicast+0x7bb/0x940 [ 498.386037][T19352] netlink_sendmsg+0x813/0xb40 [ 498.386071][T19352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.386097][T19352] ? aa_sock_msg_perm+0xf1/0x1b0 [ 498.386126][T19352] ? __pfx_netlink_sendmsg+0x10/0x10 [ 498.386147][T19352] sock_sendmsg_nosec+0x13a/0x180 [ 498.386177][T19352] ____sys_sendmsg+0x54e/0x850 [ 498.386218][T19352] ? __pfx_____sys_sendmsg+0x10/0x10 [ 498.386262][T19352] ? import_iovec+0x73/0xa0 [ 498.386306][T19352] ___sys_sendmsg+0x2a5/0x360 [ 498.386338][T19352] ? __lock_acquire+0x683/0x2cf0 [ 498.386372][T19352] ? __pfx____sys_sendmsg+0x10/0x10 [ 498.386448][T19352] ? __fget_files+0x2a/0x420 [ 498.386477][T19352] ? __fget_files+0x3a2/0x420 [ 498.386518][T19352] __x64_sys_sendmsg+0x1b1/0x290 [ 498.386556][T19352] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 498.386611][T19352] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.386637][T19352] do_syscall_64+0x174/0x580 [ 498.386668][T19352] ? trace_irq_disable+0x3b/0x140 [ 498.386696][T19352] ? clear_bhb_loop+0x40/0x90 [ 498.386724][T19352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.386747][T19352] RIP: 0033:0x7f9f2c39de59 [ 498.386768][T19352] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.386787][T19352] RSP: 002b:00007f9f2d2c3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 498.386809][T19352] RAX: ffffffffffffffda RBX: 00007f9f2c625fa0 RCX: 00007f9f2c39de59 [ 498.386825][T19352] RDX: 0000000000000080 RSI: 0000200000000600 RDI: 0000000000000008 [ 498.386839][T19352] RBP: 00007f9f2d2c3090 R08: 0000000000000000 R09: 0000000000000000 [ 498.386852][T19352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.386865][T19352] R13: 00007f9f2c626038 R14: 00007f9f2c625fa0 R15: 00007ffdb0a22c18 [ 498.386926][T19352] [ 498.837013][ T6285] net_ratelimit: 123 callbacks suppressed [ 498.837036][ T6285] bond2: (slave bridge1): failed to get link speed/duplex [ 498.850992][ T6285] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 498.858879][ T6285] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 498.960592][ T6288] bond2: (slave bridge1): failed to get link speed/duplex [ 498.971258][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 498.979146][ T6279] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 499.089509][ T6285] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.101284][T19372] tipc: Started in network mode [ 499.116246][T19361] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_tx_wq": -EINTR [ 499.119798][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.170029][T19372] tipc: Node identity 4246, cluster identity 4711 [ 499.191582][T19372] tipc: Node number set to 16966 [ 499.193482][ T6285] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 499.198174][T19372] tipc: Cannot configure node identity twice [ 499.212995][ T6279] bond2: (slave bridge1): failed to get link speed/duplex [ 499.235277][T19390] x_tables: ip_tables: TEE.1 target: invalid size 40 (kernel) != (user) 0 [ 499.458688][T19392] bond0: (slave syz_tun): Releasing backup interface [ 499.482183][T19397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3393'. [ 499.637594][T19404] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3394'. [ 499.660882][T19392] bridge_slave_0: left allmulticast mode [ 499.700579][T19392] bridge_slave_0: left promiscuous mode [ 499.713145][T19392] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.743708][T19392] bridge_slave_1: left allmulticast mode [ 499.760454][T19392] bridge_slave_1: left promiscuous mode [ 499.778304][T19392] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.846001][T19392] bond0: (slave bond_slave_0): Releasing backup interface [ 499.895443][T19414] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3394'. [ 499.909377][T19392] bond0: (slave bond_slave_1): Releasing backup interface [ 499.974156][T19392] team0: Port device team_slave_0 removed [ 500.009386][T19392] team0: Port device team_slave_1 removed [ 500.024533][T19392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 500.040544][T19392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 500.053101][T19392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 500.071893][T19392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 500.095142][T19397] netlink: 'syz.3.3393': attribute type 1 has an invalid length. [ 500.107256][T19397] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3393'. [ 500.122042][T19413] netlink: 'syz.1.3395': attribute type 10 has an invalid length. [ 500.275499][T19411] pim6reg1: entered promiscuous mode [ 500.297875][T19411] pim6reg1: entered allmulticast mode [ 500.349028][T19426] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3398'. [ 500.353439][T19413] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.486543][T19424] ip6erspan0: entered allmulticast mode [ 500.528848][ T5728] IPVS: starting estimator thread 0... [ 500.620542][T19435] IPVS: using max 26 ests per chain, 62400 per kthread [ 500.633964][T19426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 500.709727][T19446] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3403'. [ 500.851049][T19446] netlink: 252 bytes leftover after parsing attributes in process `syz.3.3403'. [ 500.898141][T19446] netlink: 'syz.3.3403': attribute type 2 has an invalid length. [ 500.997328][T19446] ¿: entered promiscuous mode [ 501.015280][T19453] syzkaller0: entered promiscuous mode [ 501.026501][T19453] syzkaller0: entered allmulticast mode [ 501.122191][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.131371][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.138890][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.147423][T19465] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 501.168330][T19465] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 501.192549][T19465] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 501.225212][T19465] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 501.357982][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.369953][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.380347][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.388608][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.396842][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.405984][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.414497][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.422721][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.432844][T19465] hsr0 speed is unknown, defaulting to 1000 [ 501.621614][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3410'. [ 501.784564][T19478] netlink: 'syz.4.3414': attribute type 1 has an invalid length. [ 501.826495][T19481] netlink: 'syz.3.3413': attribute type 1 has an invalid length. [ 501.841839][T19481] netlink: 'syz.3.3413': attribute type 2 has an invalid length. [ 501.865216][T19478] 8021q: adding VLAN 0 to HW filter on device bond2 [ 501.932745][T19479] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 502.095214][T19497] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3418'. [ 502.610280][T19519] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3423'. [ 502.649255][ T5625] block nbd4: Receive control failed (result -32) [ 502.649359][ T4938] block nbd4: Receive control failed (result -32) [ 502.667962][ T50] block nbd4: Receive control failed (result -32) [ 503.287392][T19547] netlink: 'syz.3.3430': attribute type 10 has an invalid length. [ 503.431556][T19553] netlink: 'syz.2.3433': attribute type 1 has an invalid length. [ 503.620091][T19553] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.635727][T19564] tipc: Started in network mode [ 503.649421][T19564] tipc: Node identity aaaaaaaaaa35, cluster identity 4711 [ 503.677418][T19564] tipc: Enabled bearer , priority 10 [ 503.925094][ T6296] net_ratelimit: 163 callbacks suppressed [ 503.925113][ T6296] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.961067][ T6279] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 503.985863][ T6279] bond2: (slave bridge1): failed to get link speed/duplex [ 503.993193][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.039361][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.082236][T19593] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 504.100507][ T6285] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.117627][T19595] ipip0: entered promiscuous mode [ 504.150762][ T6296] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.158678][ T6285] bond2: (slave bridge1): failed to get link speed/duplex [ 504.191119][ T6296] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 504.674510][T19614] syzkaller1: entered promiscuous mode [ 504.681971][T19614] syzkaller1: entered allmulticast mode [ 504.722777][ T50] Bluetooth: hci3: command tx timeout [ 504.789366][ T29] tipc: Node number set to 10463914 [ 504.908712][T19622] vlan3: entered allmulticast mode [ 504.920881][T19622] bond0: entered allmulticast mode [ 504.933173][T19622] bond_slave_0: entered allmulticast mode [ 504.946062][T19622] bond_slave_1: entered allmulticast mode [ 504.961374][T19630] __nla_validate_parse: 2 callbacks suppressed [ 504.961395][T19630] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3453'. [ 504.977100][T19627] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3456'. [ 505.057634][T19630] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 505.087769][T19630] bond_slave_0: left allmulticast mode [ 505.101167][T19630] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 505.127841][T19630] bond_slave_1: left allmulticast mode [ 505.148199][T19630] bond0 (unregistering): Released all slaves [ 505.393113][T19641] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3460'. [ 505.424129][T19641] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3460'. [ 505.663942][T19665] netlink: 'syz.0.3466': attribute type 1 has an invalid length. [ 505.806811][T19681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3466'. [ 506.061931][T19665] 8021q: adding VLAN 0 to HW filter on device bond1 [ 506.089130][T19681] bond1: entered allmulticast mode [ 506.118705][T19683] bond1: (slave dummy0): making interface the new active one [ 506.126443][T19683] dummy0: entered allmulticast mode [ 506.140349][T19683] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 506.151927][T19686] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3467'. [ 506.341551][T19692] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 506.463744][T19701] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3474'. [ 506.579921][T19704] netlink: 'syz.0.3476': attribute type 41 has an invalid length. [ 506.639489][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 506.834844][T19714] Cannot find add_set index 0 as target [ 507.145736][T19731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3484'. [ 507.205644][T19732] tipc: Started in network mode [ 507.213415][T19732] tipc: Node identity 4246, cluster identity 213 [ 507.224442][T19732] tipc: Node number set to 16966 [ 507.347923][T19735] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 508.361824][T19767] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 508.401721][T19767] bridge2: entered allmulticast mode [ 508.550015][T19781] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3496'. [ 508.687332][ T5818] hsr0 speed is unknown, defaulting to 1000 [ 508.904455][T19786] hsr0 speed is unknown, defaulting to 1000 [ 508.912709][T19803] netlink: 'syz.1.3503': attribute type 1 has an invalid length. [ 508.930634][ T6295] net_ratelimit: 162 callbacks suppressed [ 508.930652][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 508.958973][T19803] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 509.000176][ T6280] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.029551][ T6280] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.059489][ T6280] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.068345][T19806] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 509.110571][T19809] batadv0: entered promiscuous mode [ 509.118090][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.129002][T19809] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 509.137782][T19809] bridge0: port 1(macvlan3) entered blocking state [ 509.145132][ T6281] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.155922][T19809] bridge0: port 1(macvlan3) entered disabled state [ 509.165073][T19809] macvlan3: entered allmulticast mode [ 509.171464][ T6281] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.186528][T19809] batadv0: entered allmulticast mode [ 509.208006][T19809] macvlan3: entered promiscuous mode [ 509.219356][ T6281] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 509.245404][T19809] bridge0: port 1(macvlan3) entered blocking state [ 509.247834][T19812] can: request_module (can-proto-0) failed. [ 509.252980][T19809] bridge0: port 1(macvlan3) entered forwarding state [ 509.435213][T19812] batman_adv: batadv0: Adding interface: dummy0 [ 509.445293][T19812] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.474084][T19812] batman_adv: batadv0: Interface activated: dummy0 [ 509.582027][T19827] tipc: Enabled bearer , priority 0 [ 509.686929][T19820] syzkaller0: entered promiscuous mode [ 509.692909][T19820] syzkaller0: entered allmulticast mode [ 509.700534][T19820] tipc: Resetting bearer [ 509.708461][T19828] macvlan3: left allmulticast mode [ 509.715133][T19828] batadv0: left allmulticast mode [ 509.722535][T19828] macvlan3: left promiscuous mode [ 509.730511][T19828] bridge0: port 1(macvlan3) entered disabled state [ 509.783922][T19818] tipc: Resetting bearer [ 510.501765][T19849] __nla_validate_parse: 5 callbacks suppressed [ 510.501786][T19849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3516'. [ 510.655915][T19861] xt_l2tp: invalid flags combination: 8 [ 511.713944][T19872] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3521'. [ 512.433542][ T1653] block nbd3: Possible stuck request ffff888027b0e000: control (read@0,1024B). Runtime 30 seconds [ 512.603511][T19818] tipc: Disabling bearer [ 512.639956][T19871] vlan2: entered allmulticast mode [ 512.645182][T19871] bond0: entered allmulticast mode [ 512.652431][T19871] bond_slave_0: entered allmulticast mode [ 512.658384][T19871] bond_slave_1: entered allmulticast mode [ 512.686274][T19872] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 512.695395][T19872] bond_slave_0: left allmulticast mode [ 512.705819][T19872] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 512.730494][T19872] bond_slave_1: left allmulticast mode [ 512.743092][T19872] bond0 (unregistering): Released all slaves [ 512.793719][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3522'. [ 512.815004][T19875] batadv0: entered promiscuous mode [ 512.821946][T19875] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 512.984112][T19879] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3525'. [ 513.088268][T19879] can: request_module (can-proto-0) failed. [ 513.247912][T19892] batman_adv: batadv0: Adding interface: dummy0 [ 513.273265][T19892] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.327448][T19892] batman_adv: batadv0: Interface activated: dummy0 [ 513.538359][T19907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3533'. [ 513.964422][T19931] netlink: 'syz.4.3539': attribute type 8 has an invalid length. [ 514.012709][T19936] net_ratelimit: 242 callbacks suppressed [ 514.012729][T19936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.039539][ T441] bond2: (slave bridge1): failed to get link speed/duplex [ 514.047718][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.058230][ T6295] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 514.159536][ T6295] bond2: (slave bridge1): failed to get link speed/duplex [ 514.187221][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.229409][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.261413][ T6283] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.289409][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 514.305136][T19946] block nbd5: Unsupported socket: should be TCP or UNIX. [ 514.318178][T19943] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 514.444981][T19946] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 515.016523][T19962] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3547'. [ 515.105393][T19972] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 515.108479][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3546'. [ 515.169428][T19969] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3546'. [ 515.194507][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3546'. [ 515.253770][T19969] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3546'. [ 515.622059][ T6280] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x2 [ 515.751904][T19996] erspan0: entered promiscuous mode [ 515.804266][T19996] erspan0: entered allmulticast mode [ 516.125250][T20017] block nbd5: Unsupported socket: should be TCP or UNIX. [ 516.164280][T20018] netlink: 'syz.1.3560': attribute type 10 has an invalid length. [ 516.200710][T20018] syz_tun: entered promiscuous mode [ 516.404188][T20026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3562'. [ 516.565536][T20034] netlink: 'syz.4.3565': attribute type 1 has an invalid length. [ 516.604244][T20034] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3565'. [ 516.696828][T20034] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3565'. [ 516.706441][ T30] audit: type=1800 audit(1783945966.074:17): pid=20002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.3557" name="memory.events" dev="tmpfs" ino=823 res=0 errno=0 [ 516.983447][T20046] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3569'. [ 517.321466][T20063] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 517.578463][T20063] bond0: entered promiscuous mode [ 517.601529][T20063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.635571][T20066] bond0: entered promiscuous mode [ 517.647598][T20066] bond_slave_0: entered promiscuous mode [ 517.661348][T20066] bond_slave_1: entered promiscuous mode [ 517.673774][T20066] bond0: entered allmulticast mode [ 517.696603][T20066] bond_slave_0: entered allmulticast mode [ 517.722151][T20066] bond_slave_1: entered allmulticast mode [ 517.740997][T20066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.954706][T20073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.970764][T20073] bond0: (slave gre1): The slave device specified does not support setting the MAC address [ 517.997265][T20073] bond0: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 518.048783][T20073] bond0: (slave gre1): making interface the new active one [ 518.076705][T20073] gre1: entered promiscuous mode [ 518.095556][T20073] bond0: (slave gre1): Enslaving as an active interface with an up link [ 518.324567][T20096] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3581'. [ 519.029378][ T441] net_ratelimit: 182 callbacks suppressed [ 519.029401][ T441] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.069338][ T441] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.092300][T20111] openvswitch: netlink: IPv4 tunnel dst address is zero [ 519.111340][ T30] audit: type=1800 audit(1783945968.494:18): pid=20112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3583" name="memory.events" dev="tmpfs" ino=677 res=0 errno=0 [ 519.140795][ T6280] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.181207][ T6280] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.221491][ T6280] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.272658][ T6281] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.314281][ T6281] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.352774][ T441] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 519.383470][ T6281] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 521.976340][T20159] netlink: 'syz.1.3595': attribute type 4 has an invalid length. [ 521.989104][T20159] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3595'. [ 522.325178][T20166] syzkaller1: entered promiscuous mode [ 522.337846][T20166] syzkaller1: entered allmulticast mode [ 522.356073][T20170] bridge0: port 3(veth1_to_bridge) entered blocking state [ 522.378093][T20170] bridge0: port 3(veth1_to_bridge) entered disabled state [ 522.462198][T20170] veth1_to_bridge: entered allmulticast mode [ 522.491562][T20175] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3600'. [ 522.505843][T20170] veth1_to_bridge: entered promiscuous mode [ 522.520335][T20170] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 522.545097][T20175] netlink: 192 bytes leftover after parsing attributes in process `syz.0.3600'. [ 522.574032][T20170] bridge0: port 3(veth1_to_bridge) entered blocking state [ 522.581511][T20170] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 523.356385][T20193] netlink: 'syz.4.3607': attribute type 1 has an invalid length. [ 523.412561][T20193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.039384][ T6295] net_ratelimit: 4323 callbacks suppressed [ 524.039409][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.039557][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.060346][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.066026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.085036][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.089750][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.098094][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.117152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 524.121067][ T6295] bond4: (slave ip6gretap1): link status up, enabling it in 0 ms [ 524.130112][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 525.963798][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'. [ 525.996784][T20184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3603'. [ 526.031258][T20184] netlink: 'syz.0.3603': attribute type 6 has an invalid length. [ 526.290936][T20202] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3608'. [ 527.561994][T20195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 527.590037][T20195] bond0: (slave ipip0): The slave device specified does not support setting the MAC address [ 527.603426][T20195] bond0: (slave ipip0): Error -95 calling set_mac_address [ 527.668083][T20210] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3620'. [ 527.713072][T20209] xt_TCPMSS: Only works on TCP SYN packets [ 529.049211][ C0] net_ratelimit: 16935 callbacks suppressed [ 529.049234][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 529.049345][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.056131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 529.068210][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.080118][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 529.092109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.104070][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 529.116036][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.128103][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 529.140434][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.219210][ C0] sched: DL replenish lagged too much [ 534.059441][ C1] net_ratelimit: 24511 callbacks suppressed [ 534.059463][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.074519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 534.078803][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.090689][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 534.102388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.114298][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 534.126282][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.138391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 534.150158][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.162136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.069609][ C1] net_ratelimit: 24210 callbacks suppressed [ 539.069636][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.069645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.070826][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.076794][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.088738][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.100872][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.112719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.124859][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.136691][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 539.148932][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.079205][ C1] net_ratelimit: 25625 callbacks suppressed [ 544.079228][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.079935][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 544.086172][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.098206][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 544.110428][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.122313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 544.134257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.146562][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 544.158610][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.170387][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 549.089241][ C1] net_ratelimit: 24795 callbacks suppressed [ 549.089265][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.089485][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 549.096384][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.108373][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 549.120615][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.132435][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 549.144733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.170539][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 549.180581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 549.192561][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 554.099403][ C1] net_ratelimit: 25321 callbacks suppressed [ 554.099426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.110511][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 554.118616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.130447][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 554.142327][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.154111][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 554.166182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.178016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 554.190213][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 554.202101][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 559.109203][ C0] net_ratelimit: 24771 callbacks suppressed [ 559.109226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 559.109226][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.110189][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.116057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 559.128125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.140031][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 559.152261][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.164092][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 559.175992][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 559.187802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 564.119351][ C1] net_ratelimit: 24552 callbacks suppressed [ 564.119373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.119660][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 564.126520][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.138419][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 564.150389][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.162414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 564.174369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.198330][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 564.210300][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 564.222230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 569.129445][ C1] net_ratelimit: 25217 callbacks suppressed [ 569.129468][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.129967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.136517][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.148512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.160453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.172250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 569.184472][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.196262][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.208310][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 569.220212][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 571.184548][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 574.139317][ C0] net_ratelimit: 24395 callbacks suppressed [ 574.139328][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.139339][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.140266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.146350][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.158422][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.170361][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.182205][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.194280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 574.206135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 574.218159][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.149315][ C1] net_ratelimit: 24397 callbacks suppressed [ 579.149338][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.165865][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.168521][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.180396][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 579.192464][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.204307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 579.216211][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.228156][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.240545][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 579.252190][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.159338][ C0] net_ratelimit: 23620 callbacks suppressed [ 584.159362][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 584.159392][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.166357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 584.178384][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.190154][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.202450][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.216463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.226505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 584.238233][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 584.250608][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.169492][ C1] net_ratelimit: 20348 callbacks suppressed [ 589.169516][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.178666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.188624][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.200499][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 589.212705][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.224440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 589.236690][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.248534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.260709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 589.274608][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.179445][ C1] net_ratelimit: 20164 callbacks suppressed [ 594.179469][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.179469][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.198236][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.210595][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.222556][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 594.234596][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.246398][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 594.259374][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.270392][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 594.282520][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.189440][ C1] net_ratelimit: 19306 callbacks suppressed [ 599.189465][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.191450][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.196540][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.208542][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 599.220649][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.232584][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 599.244523][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.256570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 599.268603][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 599.280666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.199270][ C1] net_ratelimit: 20183 callbacks suppressed [ 604.199293][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.201920][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.206273][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.218409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.230443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.242373][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 604.254515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.266227][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 604.278339][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 604.290176][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.209452][ C1] net_ratelimit: 20427 callbacks suppressed [ 609.209474][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.218217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.228515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.242540][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.252405][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.264327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 609.276314][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.288194][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 609.300271][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.312243][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.219458][ C0] net_ratelimit: 21036 callbacks suppressed [ 614.219481][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 614.219494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.220508][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.226321][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 614.238594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.250353][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.262493][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.276524][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.286422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 614.298277][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 619.229232][ C1] net_ratelimit: 20508 callbacks suppressed [ 619.229255][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.231906][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 619.236199][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.248310][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 619.260249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.272131][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 619.284247][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.296076][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.308204][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.322315][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 619.380036][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 619.388052][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 624.239434][ C1] net_ratelimit: 20569 callbacks suppressed [ 624.239456][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.242229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 624.246612][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.258653][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.270492][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.284764][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.294454][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.306547][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 624.318983][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.330473][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 626.771143][ T1653] block nbd3: Possible stuck request ffff888027b0e000: control (read@0,1024B). Runtime 60 seconds [ 629.249189][ C1] net_ratelimit: 20965 callbacks suppressed [ 629.249212][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.266500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.268173][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.280139][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 629.292264][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.304054][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 629.316193][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.328082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 629.340194][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.351971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.259169][ C0] net_ratelimit: 20819 callbacks suppressed [ 634.259191][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.259842][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.266182][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 634.278072][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.290082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 634.302103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.314011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.326008][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.340207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 634.350037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.269825][ C1] net_ratelimit: 20644 callbacks suppressed [ 639.269849][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.283969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.288898][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.300955][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.313225][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.325219][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 639.337732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.349620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 639.361605][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.373482][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 639.767013][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 644.279223][ C1] net_ratelimit: 20552 callbacks suppressed [ 644.279247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.281257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.286299][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.298230][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.310578][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.322425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 644.334557][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.346285][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 644.358280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.370370][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.379147][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 648.386330][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P20212/1:b..l [ 648.394919][ C0] rcu: (detected by 0, t=10503 jiffies, g=110489, q=1790 ncpus=2) [ 648.402963][ C0] task:syz.1.3610 state:R running task stack:27088 pid:20212 tgid:20206 ppid:17869 task_flags:0x400140 flags:0x00080000 [ 648.417819][ C0] Call Trace: [ 648.421163][ C0] [ 648.424185][ C0] __schedule+0x17d9/0x56c0 [ 648.428836][ C0] ? __pfx___schedule+0x10/0x10 [ 648.433831][ C0] ? __lock_acquire+0x683/0x2cf0 [ 648.438877][ C0] preempt_schedule_irq+0x4d/0xa0 [ 648.444013][ C0] irqentry_exit+0x14f/0x8f0 [ 648.448664][ C0] ? trace_irq_disable+0x3b/0x140 [ 648.453847][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 648.459884][ C0] RIP: 0010:lock_release+0x44/0x3c0 [ 648.465127][ C0] Code: 8b 05 60 cb c9 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 63 cb c9 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 0c 21 b5 0e <73> 0d e8 25 f9 08 00 84 c0 0f 84 94 02 00 00 83 3d 06 54 b5 0e 00 [ 648.484796][ C0] RSP: 0000:ffffc900056cf0b8 EFLAGS: 00000297 [ 648.491027][ C0] RAX: 0000000000000001 RBX: ffffc900056cf1d8 RCX: 0000000080000001 [ 648.499039][ C0] RDX: ffffc900056cf201 RSI: ffffffff8176f27f RDI: ffffffff8eb59c60 [ 648.507047][ C0] RBP: 1ffffffff21ecb01 R08: ffffc900056cfea0 R09: 0000000000000000 [ 648.515061][ C0] R10: ffffc900056cf218 R11: fffff52000ad9e45 R12: ffffc900056c8000 [ 648.523074][ C0] R13: ffffffff8176f27f R14: ffffffff8eb59c60 R15: ffffc900056cfeb0 [ 648.531182][ C0] ? unwind_next_frame+0x8f/0x2550 [ 648.536399][ C0] ? unwind_next_frame+0x8f/0x2550 [ 648.541561][ C0] ? deref_stack_reg+0x18e/0x220 [ 648.546540][ C0] ? unwind_next_frame+0x8f/0x2550 [ 648.551688][ C0] unwind_next_frame+0x1baa/0x2550 [ 648.556847][ C0] ? __sys_bpf+0xaea/0xd90 [ 648.561336][ C0] ? unwind_next_frame+0x8f/0x2550 [ 648.566489][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 648.572702][ C0] arch_stack_walk+0x11b/0x150 [ 648.577544][ C0] ? __x64_sys_bpf+0xba/0xd0 [ 648.582188][ C0] stack_trace_save+0xa9/0x100 [ 648.587011][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 648.592440][ C0] save_stack+0x122/0x230 [ 648.596852][ C0] ? __pfx_save_stack+0x10/0x10 [ 648.601746][ C0] ? post_alloc_hook+0x1f9/0x250 [ 648.606758][ C0] ? get_page_from_freelist+0x21fa/0x2270 [ 648.612529][ C0] ? __alloc_frozen_pages_noprof+0x18d/0x380 [ 648.618599][ C0] ? __alloc_pages_noprof+0x10/0x100 [ 648.623927][ C0] ? pcpu_populate_chunk+0x181/0xb30 [ 648.629298][ C0] ? pcpu_alloc_noprof+0xbca/0x1900 [ 648.634542][ C0] ? bpf_map_alloc_percpu+0x65/0x180 [ 648.639874][ C0] ? prealloc_init+0x214/0x650 [ 648.644712][ C0] ? htab_map_alloc+0x6a0/0xc90 [ 648.649603][ C0] ? map_create+0xf2a/0x1b90 [ 648.654414][ C0] ? __sys_bpf+0xaea/0xd90 [ 648.658894][ C0] __set_page_owner+0x8d/0x4c0 [ 648.663719][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 648.669139][ C0] ? seqcount_lockdep_reader_access+0x89/0xc0 [ 648.675249][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 648.680497][ C0] ? bad_range+0x8e/0x2a0 [ 648.684878][ C0] post_alloc_hook+0x1f9/0x250 [ 648.689688][ C0] get_page_from_freelist+0x21fa/0x2270 [ 648.695287][ C0] ? __lock_acquire+0x683/0x2cf0 [ 648.700343][ C0] ? prepare_alloc_pages+0x230/0x650 [ 648.705687][ C0] __alloc_frozen_pages_noprof+0x18d/0x380 [ 648.711543][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 648.717932][ C0] ? pcpu_chunk_refresh_hint+0x80a/0x950 [ 648.723981][ C0] __alloc_pages_noprof+0x10/0x100 [ 648.729155][ C0] pcpu_populate_chunk+0x181/0xb30 [ 648.734322][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 648.740263][ C0] pcpu_alloc_noprof+0xbca/0x1900 [ 648.745357][ C0] bpf_map_alloc_percpu+0x65/0x180 [ 648.750527][ C0] prealloc_init+0x214/0x650 [ 648.755202][ C0] htab_map_alloc+0x6a0/0xc90 [ 648.759935][ C0] map_create+0xf2a/0x1b90 [ 648.764415][ C0] ? __pfx_map_create+0x10/0x10 [ 648.769318][ C0] ? bpf_lsm_bpf+0x9/0x20 [ 648.773714][ C0] ? security_bpf+0x7e/0x2d0 [ 648.778462][ C0] __sys_bpf+0xaea/0xd90 [ 648.782757][ C0] ? __pfx___sys_bpf+0x10/0x10 [ 648.787569][ C0] ? do_futex+0x3e7/0x4e0 [ 648.792020][ C0] ? rcu_is_watching+0x15/0xb0 [ 648.796849][ C0] __x64_sys_bpf+0xba/0xd0 [ 648.801311][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.807413][ C0] do_syscall_64+0x174/0x580 [ 648.812058][ C0] ? trace_irq_disable+0x3b/0x140 [ 648.817131][ C0] ? clear_bhb_loop+0x40/0x90 [ 648.821941][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.827877][ C0] RIP: 0033:0x7f3def99de59 [ 648.832326][ C0] RSP: 002b:00007f3df0906028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 648.840786][ C0] RAX: ffffffffffffffda RBX: 00007f3defc26090 RCX: 00007f3def99de59 [ 648.848799][ C0] RDX: 0000000000000050 RSI: 0000200000000180 RDI: 0000000000000000 [ 648.856813][ C0] RBP: 00007f3defa33e6f R08: 0000000000000000 R09: 0000000000000000 [ 648.864823][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 648.872831][ C0] R13: 00007f3defc26128 R14: 00007f3defc26090 R15: 00007ffd8218c008 [ 648.880920][ C0] [ 648.883978][ C0] rcu: rcu_preempt kthread starved for 1082 jiffies! g110489 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 648.895381][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 648.905375][ C0] rcu: RCU grace-period kthread stack dump: [ 648.911344][ C0] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 648.924986][ C0] Call Trace: [ 648.928295][ C0] [ 648.931257][ C0] __schedule+0x17d9/0x56c0 [ 648.935808][ C0] ? __lock_acquire+0x683/0x2cf0 [ 648.940835][ C0] ? __pfx___schedule+0x10/0x10 [ 648.945746][ C0] ? schedule+0x90/0x2b0 [ 648.950042][ C0] schedule+0x164/0x2b0 [ 648.954247][ C0] schedule_timeout+0x152/0x2c0 [ 648.959135][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 648.964552][ C0] ? __pfx_process_timeout+0x10/0x10 [ 648.969976][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 648.975828][ C0] ? prepare_to_swait_event+0x322/0x350 [ 648.981444][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 648.986363][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 648.992569][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 648.997905][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 649.003164][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 649.009022][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 649.013663][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 649.018908][ C0] ? __kthread_parkme+0x71/0x1f0 [ 649.023910][ C0] ? __kthread_parkme+0x196/0x1f0 [ 649.029003][ C0] kthread+0x388/0x470 [ 649.033162][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 649.038403][ C0] ? __pfx_kthread+0x10/0x10 [ 649.043078][ C0] ret_from_fork+0x514/0xb70 [ 649.047718][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 649.053048][ C0] ? __switch_to+0xc89/0x1420 [ 649.057775][ C0] ? __pfx_kthread+0x10/0x10 [ 649.062418][ C0] ret_from_fork_asm+0x1a/0x30 [ 649.067255][ C0] [ 649.070310][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 649.076670][ C0] Sending NMI from CPU 0 to CPUs 1: [ 649.081916][ C1] NMI backtrace for cpu 1 [ 649.081934][ C1] CPU: 1 UID: 0 PID: 6279 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(full) [ 649.081959][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 649.081971][ C1] Workqueue: wg-kex-wg0 wg_packet_handshake_send_worker [ 649.082118][ C1] RIP: 0010:rcu_is_watching+0x6/0xb0 [ 649.082150][ C1] Code: e8 6f 8e 64 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 <41> 56 53 65 ff 05 10 d2 c0 11 e8 db c3 23 0a 89 c3 83 f8 08 73 65 [ 649.082167][ C1] RSP: 0018:ffffc90000a076f0 EFLAGS: 00000202 [ 649.082182][ C1] RAX: 0000000000000001 RBX: ffffffff81909b08 RCX: ffff88805528dd00 [ 649.082196][ C1] RDX: 000000007f45ee1d RSI: ffffffff8e4b068c RDI: ffffffff8c4bd380 [ 649.082210][ C1] RBP: 1ffff92000140efc R08: ffffffff8176f27f R09: 0000000000000000 [ 649.082223][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: dffffc0000000000 [ 649.082236][ C1] R13: ffffffff8176f27f R14: ffffc90000a077a8 R15: 1ffff92000140ef5 [ 649.082251][ C1] FS: 0000000000000000(0000) GS:ffff88812505e000(0000) knlGS:0000000000000000 [ 649.082266][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 649.082278][ C1] CR2: 00007fabe15ffffc CR3: 000000007f8e8000 CR4: 00000000003526f0 [ 649.082295][ C1] Call Trace: [ 649.082302][ C1] [ 649.082309][ C1] unwind_next_frame+0xbe/0x2550 [ 649.082333][ C1] ? worker_thread+0xa47/0xfb0 [ 649.082354][ C1] ? unwind_next_frame+0x8f/0x2550 [ 649.082375][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 649.082399][ C1] arch_stack_walk+0x11b/0x150 [ 649.082421][ C1] ? kthread+0x388/0x470 [ 649.082456][ C1] stack_trace_save+0xa9/0x100 [ 649.082478][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 649.082499][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 649.082594][ C1] ? __lock_acquire+0x683/0x2cf0 [ 649.082622][ C1] kasan_save_track+0x3e/0x80 [ 649.082649][ C1] ? kasan_save_track+0x3e/0x80 [ 649.082671][ C1] ? kasan_save_free_info+0x40/0x50 [ 649.082688][ C1] ? __kasan_slab_free+0x5c/0x80 [ 649.082711][ C1] ? kmem_cache_free+0x182/0x650 [ 649.082734][ C1] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 649.082807][ C1] ? NF_HOOK+0x64e/0x6e0 [ 649.082832][ C1] ? br_nf_post_routing+0xa53/0xee0 [ 649.082859][ C1] ? nf_hook_slow+0xc5/0x220 [ 649.082914][ C1] ? NF_HOOK+0x23e/0x3f0 [ 649.082964][ C1] ? br_forward_finish+0xd3/0x130 [ 649.082987][ C1] ? br_nf_forward_finish+0xa76/0xea0 [ 649.083014][ C1] ? NF_HOOK+0x64e/0x6e0 [ 649.083039][ C1] ? br_nf_forward_ip+0x7eb/0xa30 [ 649.083066][ C1] ? nf_hook_slow+0xc5/0x220 [ 649.083084][ C1] ? NF_HOOK+0x23e/0x3f0 [ 649.083106][ C1] ? __br_forward+0x397/0x540 [ 649.083129][ C1] ? br_handle_frame_finish+0x1175/0x1990 [ 649.083156][ C1] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 649.083182][ C1] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 649.083199][ C1] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 649.083216][ C1] ? br_handle_frame+0x127f/0x1510 [ 649.083243][ C1] ? __netif_receive_skb_core+0x989/0x30b0 [ 649.083319][ C1] ? process_backlog+0x706/0x1860 [ 649.083341][ C1] ? __napi_poll+0xaa/0x330 [ 649.083361][ C1] ? net_rx_action+0x61d/0xf50 [ 649.083384][ C1] ? handle_softirqs+0x225/0x840 [ 649.083407][ C1] ? do_softirq+0x76/0xd0 [ 649.083426][ C1] ? __local_bh_enable_ip+0xf8/0x130 [ 649.083451][ C1] ? blake2s_compress+0xfa/0x1c00 [ 649.083522][ C1] ? blake2s_final+0x10f/0x260 [ 649.083548][ C1] ? hmac+0x204/0x3b0 [ 649.083567][ C1] ? kdf+0xff/0x290 [ 649.083586][ C1] ? wg_noise_handshake_create_initiation+0x460/0x810 [ 649.083610][ C1] ? wg_packet_handshake_send_worker+0x18c/0x370 [ 649.083636][ C1] ? process_scheduled_works+0xa8e/0x14e0 [ 649.083656][ C1] ? worker_thread+0xa47/0xfb0 [ 649.083675][ C1] ? kthread+0x388/0x470 [ 649.083716][ C1] ? br_nf_dev_queue_xmit+0x4f6/0x2540 [ 649.083745][ C1] kasan_save_free_info+0x40/0x50 [ 649.083763][ C1] __kasan_slab_free+0x5c/0x80 [ 649.083788][ C1] kmem_cache_free+0x182/0x650 [ 649.083811][ C1] ? __skb_ext_put+0x221/0x2f0 [ 649.083842][ C1] ? __skb_ext_del+0x271/0x390 [ 649.083872][ C1] br_nf_dev_queue_xmit+0x4f6/0x2540 [ 649.083909][ C1] ? NF_HOOK+0xa2/0x6e0 [ 649.083935][ C1] NF_HOOK+0x64e/0x6e0 [ 649.083966][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 649.083994][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 649.084024][ C1] ? net_generic+0x1e/0x240 [ 649.084050][ C1] ? net_generic+0x1e/0x240 [ 649.084079][ C1] br_nf_post_routing+0xa53/0xee0 [ 649.084107][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 649.084138][ C1] ? __pfx_br_nf_post_routing+0x10/0x10 [ 649.084168][ C1] nf_hook_slow+0xc5/0x220 [ 649.084190][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 649.084216][ C1] NF_HOOK+0x23e/0x3f0 [ 649.084242][ C1] ? NF_HOOK+0xa2/0x3f0 [ 649.084265][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 649.084287][ C1] ? net_generic+0x1e/0x240 [ 649.084315][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 649.084344][ C1] ? net_generic+0x1e/0x240 [ 649.084373][ C1] br_forward_finish+0xd3/0x130 [ 649.084396][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 649.084424][ C1] br_nf_forward_finish+0xa76/0xea0 [ 649.084465][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 649.084496][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 649.084523][ C1] ? NF_HOOK+0xa2/0x6e0 [ 649.084549][ C1] ? NF_HOOK+0xa2/0x6e0 [ 649.084575][ C1] NF_HOOK+0x64e/0x6e0 [ 649.084605][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 649.084630][ C1] ? net_generic+0x1e/0x240 [ 649.084657][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 649.084687][ C1] ? net_generic+0x1e/0x240 [ 649.084712][ C1] ? net_generic+0x1e/0x240 [ 649.084741][ C1] br_nf_forward_ip+0x7eb/0xa30 [ 649.084768][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 649.084798][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 649.084827][ C1] nf_hook_slow+0xc5/0x220 [ 649.084848][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 649.084873][ C1] NF_HOOK+0x23e/0x3f0 [ 649.084899][ C1] ? NF_HOOK+0xa2/0x3f0 [ 649.084922][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 649.084948][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 649.084972][ C1] ? skb_clone+0x246/0x3a0 [ 649.084992][ C1] ? br_flood+0x623/0x8d0 [ 649.085015][ C1] ? br_handle_vlan+0x5e/0x530 [ 649.085061][ C1] __br_forward+0x397/0x540 [ 649.085084][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 649.085112][ C1] br_handle_frame_finish+0x1175/0x1990 [ 649.085139][ C1] ? kasan_save_track+0x4f/0x80 [ 649.085170][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.085203][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 649.085225][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 649.085246][ C1] ? nf_hook_slow+0x176/0x220 [ 649.085269][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.085297][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 649.085324][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 649.085371][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 649.085401][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.085430][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 649.085453][ C1] ? lock_acquire+0x106/0x350 [ 649.085481][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 649.085500][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.085533][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 649.085552][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 649.085569][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 649.085589][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 649.085608][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 649.085641][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 649.085667][ C1] br_handle_frame+0x127f/0x1510 [ 649.085702][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 649.085731][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 649.085761][ C1] ? __lock_acquire+0x683/0x2cf0 [ 649.085789][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 649.085816][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 649.085852][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 649.085888][ C1] ? process_backlog+0x3c3/0x1860 [ 649.085917][ C1] ? process_backlog+0x3c3/0x1860 [ 649.085940][ C1] ? process_backlog+0x3c3/0x1860 [ 649.085967][ C1] process_backlog+0x706/0x1860 [ 649.085995][ C1] ? process_backlog+0x3c3/0x1860 [ 649.086029][ C1] __napi_poll+0xaa/0x330 [ 649.086054][ C1] net_rx_action+0x61d/0xf50 [ 649.086086][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 649.086131][ C1] handle_softirqs+0x225/0x840 [ 649.086154][ C1] ? do_softirq+0x76/0xd0 [ 649.086178][ C1] ? kernel_fpu_end+0x62/0x80 [ 649.086198][ C1] do_softirq+0x76/0xd0 [ 649.086218][ C1] [ 649.086223][ C1] [ 649.086230][ C1] __local_bh_enable_ip+0xf8/0x130 [ 649.086251][ C1] blake2s_compress+0xfa/0x1c00 [ 649.086282][ C1] ? encode_point+0x8346/0x84b0 [ 649.086300][ C1] ? __crypto_xor+0xac6/0xd10 [ 649.086327][ C1] ? chacha_crypt+0xf24/0xf90 [ 649.086359][ C1] ? __pfx_chacha_crypt+0x10/0x10 [ 649.086387][ C1] ? poly1305_blocks+0x2b5/0x450 [ 649.086410][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 649.086438][ C1] ? __asan_memset+0x22/0x50 [ 649.086466][ C1] ? __asan_memset+0x22/0x50 [ 649.086486][ C1] ? __chacha20poly1305_encrypt+0x316/0x350 [ 649.086525][ C1] blake2s_final+0x10f/0x260 [ 649.086554][ C1] hmac+0x204/0x3b0 [ 649.086577][ C1] ? __pfx_hmac+0x10/0x10 [ 649.086597][ C1] ? kernel_fpu_end+0x62/0x80 [ 649.086623][ C1] ? blake2s_compress+0x1b4d/0x1c00 [ 649.086668][ C1] kdf+0xff/0x290 [ 649.086689][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 649.086719][ C1] ? __pfx_kdf+0x10/0x10 [ 649.086751][ C1] ? __asan_memset+0x22/0x50 [ 649.086774][ C1] wg_noise_handshake_create_initiation+0x460/0x810 [ 649.086801][ C1] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 649.086826][ C1] ? __lock_acquire+0x683/0x2cf0 [ 649.086853][ C1] ? __lock_acquire+0x683/0x2cf0 [ 649.086879][ C1] ? gcm_process_assoc+0x4f8/0x6b0 [ 649.086906][ C1] ? memcpy_to_scatterwalk+0x303/0x480 [ 649.086969][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 649.086998][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 649.087025][ C1] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 649.087051][ C1] ? ktime_get_coarse_with_offset+0x102/0x150 [ 649.087078][ C1] wg_packet_handshake_send_worker+0x18c/0x370 [ 649.087109][ C1] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 649.087153][ C1] ? rcu_is_watching+0x15/0xb0 [ 649.087183][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 649.087203][ C1] process_scheduled_works+0xa8e/0x14e0 [ 649.087244][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 649.087270][ C1] ? assign_work+0x3cf/0x5d0 [ 649.087294][ C1] worker_thread+0xa47/0xfb0 [ 649.087334][ C1] kthread+0x388/0x470 [ 649.087359][ C1] ? __pfx_worker_thread+0x10/0x10 [ 649.087379][ C1] ? __pfx_kthread+0x10/0x10 [ 649.087406][ C1] ret_from_fork+0x514/0xb70 [ 649.087434][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 649.087465][ C1] ? __switch_to+0xc89/0x1420 [ 649.087489][ C1] ? __pfx_kthread+0x10/0x10 [ 649.087515][ C1] ret_from_fork_asm+0x1a/0x30 [ 649.087545][ C1] [ 649.289270][ C1] net_ratelimit: 17696 callbacks suppressed [ 649.289323][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.291029][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.295522][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.300979][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.305464][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.310609][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 649.315262][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.319546][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 649.324697][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 649.330082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.299488][ C1] net_ratelimit: 17549 callbacks suppressed [ 654.299512][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.313302][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.318657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.330495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.342587][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.354427][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:7e:be:b8:64:b2:b6, vlan:0) [ 654.366418][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.378400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 654.390390][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 654.402267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)