last executing test programs: 7.972029164s ago: executing program 4 (id=4764): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="2d8e261000000000140012800b0001006970766c616e00000c00028008000500", @ANYRES32, @ANYBLOB="080004"], 0x44}}, 0x0) r3 = accept4$bt_l2cap(r2, 0x0, &(0x7f00000002c0), 0x800) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000300)) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r5, @ANYRES32=r5, @ANYBLOB="000000007937a6df04b697e7", @ANYRES32=0x0, @ANYRES64=0x0], 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@bridge_delneigh={0x1c, 0x1d, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r6, 0x8, 0x7a}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp(0x2, 0x2, 0x73) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002380)=@delchain={0x24, 0x26, 0xf31, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xfff3}}}, 0x24}}, 0x0) recvmmsg(r9, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=""/4096, 0x1000}], 0x1}, 0x3}], 0x2, 0x40002320, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0xc, 0x2, [@TCA_GRED_LIMIT={0x8, 0x5, 0x100}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x5}, 0x24008004) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x81}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r11, 0x0, 0x46, 0x4f, 0x0, &(0x7f0000000500)=""/74, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r12 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x2, 0x5, 0x7f, &(0x7f0000000040)={0xffffffffffffffff}) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000640000000d0a010400000000200000000200000008000a40000000000900020073797a32000000000900010073787a30000000000800054000000021280011800b00010074617267657400001800028008000240000000000a0001004155444954000000140000001000010000000000000000000000000a"], 0xac}, 0x1, 0x0, 0x0, 0x44001}, 0x0) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r15, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00012bbd7000ffdbdf25120000000800090001000080080008000000000008000800090000000c0001800800030000002000f709578ac7d224bdd8dc47de7511bbea0e1dae8817bb33"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x8800) ioctl$sock_kcm_SIOCKCMCLONE(r12, 0x89e2, &(0x7f0000000140)={r13}) 6.465304655s ago: executing program 3 (id=4770): r0 = socket$alg(0x26, 0x5, 0x0) sendmmsg$inet(r0, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000bc0)="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", 0x1c3}, {&(0x7f0000000800)="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", 0x156}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11", 0xa3}], 0x3, 0x0, 0x0, 0x900}}, {{&(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10, &(0x7f0000000dc0)}}], 0x2, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x5c}}, 0x4000000) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000800)={0x58, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) (async) setsockopt$RXRPC_SECURITY_KEYRING(r2, 0x110, 0x2, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r6, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000100)={0x14, 0x4, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x20000884) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 6.312518727s ago: executing program 1 (id=4771): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0x1, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xc88a0}, 0x8000000) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40600}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_ACCT_GET(r1, &(0x7f0000007240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x14, 0x1, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0xc88a0}, 0x8000000) (async) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000090400"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\n'], 0x5c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40600}, 0x0) (async) 6.164892823s ago: executing program 4 (id=4772): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 5.881349061s ago: executing program 1 (id=4773): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x90010022}]}, 0x90) close(r4) recvmsg$unix(r3, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000080)={0x8}) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, &(0x7f0000000000)={0x8}) setsockopt$sock_attach_bpf(r2, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r7, 0x18000000000002a0, 0xe80, 0xfffffffffffffd37, &(0x7f0000000100)="b9ff03316844268cb89e14f008004ce0003000000100008877fbac141416e000030a89079f03b180ff83080520e0845013f2325f004408050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014c0000c0adc043084617d7ecf41effff38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d7da058f6efa6d1f5f7ff400"/254, 0x0, 0xfe, 0x60000000, 0x0, 0xfffffffe}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r8, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000001c0)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r8, 0x2, {0x1, 0xff, 0x3}, 0xfe}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r8, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xb}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 5.77010105s ago: executing program 0 (id=4774): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x11, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000140)={0xfffe, 0x1}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(anubis))\x00'}, 0x58) bind$alg(r2, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r5, &(0x7f0000000580), &(0x7f0000000080)=@udp6, 0xff00}, 0x20) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000800), 0xffffffffffffffff) r7 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001580)={0xffffffffffffffff, 0xe0, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000012c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000001300)=[0x0], &(0x7f0000001340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x6a, &(0x7f0000001380)=[{}, {}], 0x10, 0x10, &(0x7f00000013c0), &(0x7f0000001400), 0x8, 0x1d, 0x8, 0x8, &(0x7f0000001440)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001640)={'syztnl0\x00', &(0x7f00000015c0)={'syztnl1\x00', 0x0, 0x4, 0x9, 0x9, 0x0, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, 0x40, 0x10, 0x5, 0x40000}}) sendmsg$BATADV_CMD_GET_ORIGINATORS(r4, &(0x7f0000001700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="24000080", @ANYRES16=r7, @ANYBLOB="040027bd7000fddbdf250800000008000600", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000340)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="df4800000000000000000c0000002c00038028000380140001800800810002000000050002000000000010000180090002007369743000000000180001801400020073697430"], 0x58}}, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="1801", @ANYRESHEX=r1, @ANYRESDEC=r0, @ANYRES64=r1, @ANYRES8=r4, @ANYRESHEX=0x0, @ANYRESHEX=r0], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 5.068386978s ago: executing program 3 (id=4775): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/206, 0xce}], 0x1}, 0x6}], 0x1, 0x102, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f7879000014000280080003400000001408000140000000000900010073797a30"], 0xf8}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) r2 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 5.011016126s ago: executing program 2 (id=4776): r0 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x3}}], 0x18}, 0x4004002) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYRES64=r0], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xe}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r4 = socket$phonet(0x23, 0x2, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000000)='team_slave_0\x00', 0x10) ioctl$SIOCPNGETOBJECT(r4, 0x89e0, &(0x7f0000000040)=0xfff7) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) close(r2) 4.835963334s ago: executing program 4 (id=4777): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0xfffffe22, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x16) 4.440779351s ago: executing program 1 (id=4778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073319e310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000300)={&(0x7f0000000240)=""/158, 0x9e, 0x87f1, 0xffff000}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18e1500002000000000000000800000018110000006d13f29e42c11dfca96c122db86ec4ba107cce4776de86d98814c5a5a602525362add32e5b52c3b45f7aa1442a534f0c1875312f016fde2dbce81ceaf5fd0d1189ac594eeb760d50d6dfadce8db7ecccd31c35c0fbffd1bb525d209ec583c0bcbef0be79817eee8173621fb8d7b36cffd0f1784c2bcd4718cde63e7a2959f6c760e1d84642b89bdc5d9a979cabaeeaf5b86480360fe5c33ff6c3d04472f1eca353ddd8c85155b8298b5a238361b49c9c999fdc6562457d5374", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000008b26020000000000008500000084000000b700000000000000950000000000000098"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073319e310000000008000a40fffffffc14000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610418000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) (async) sendmsg$NFT_MSG_GETSET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)={0x2c, 0xa, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048014}, 0x4000) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000020301020000000000000000000000100800"], 0x1c}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r2}, &(0x7f0000000080), &(0x7f00000001c0)=r2}, 0x20) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000000300)={&(0x7f0000000240)=""/158, 0x9e, 0x87f1, 0xffff000}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xf, &(0x7f00000006c0)=ANY=[@ANYBLOB="18e1500002000000000000000800000018110000006d13f29e42c11dfca96c122db86ec4ba107cce4776de86d98814c5a5a602525362add32e5b52c3b45f7aa1442a534f0c1875312f016fde2dbce81ceaf5fd0d1189ac594eeb760d50d6dfadce8db7ecccd31c35c0fbffd1bb525d209ec583c0bcbef0be79817eee8173621fb8d7b36cffd0f1784c2bcd4718cde63e7a2959f6c760e1d84642b89bdc5d9a979cabaeeaf5b86480360fe5c33ff6c3d04472f1eca353ddd8c85155b8298b5a238361b49c9c999fdc6562457d5374", @ANYRESHEX=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf9100000000008b26020000000000008500000084000000b700000000000000950000000000000098"], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) 4.31284511s ago: executing program 0 (id=4779): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x1}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) 4.141909719s ago: executing program 4 (id=4780): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xf8, 0x11, 0x148, 0xf8, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x7, 0x1], 0x4}, {0xffffffffffffffff, [0x7]}}}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffffff, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x29}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x6e, 0x70, 0x98}, {0x28}}}}, 0x2df) 3.955387511s ago: executing program 2 (id=4781): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195}, 0x94) 3.733468252s ago: executing program 1 (id=4782): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000a00)={{r1}, "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"}) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) close(r0) 3.698217663s ago: executing program 3 (id=4783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x54, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5}, @IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x5}, @IFLA_BR_MCAST_SNOOPING={0x5, 0x17, 0x1}]}}}]}, 0x54}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000fb000000000000000000e500020000000000e500fcff00000000060000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x8}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x2a, &(0x7f0000000100)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="c3ff", 0x2}], 0x1, 0x0, 0x0, 0x40000}, 0x20004011) recvmsg$unix(r2, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x32}]}}}]}, 0x3c}}, 0x0) 3.508884025s ago: executing program 4 (id=4784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e22, 0x2, @loopback, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, '\x00', "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "0200e300", "9b1f80001b00"}, 0x38) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e40000000000e000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a01000001"], 0x100}, 0x0) 3.091197434s ago: executing program 1 (id=4785): r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000005}, 0x44004) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r2, 0x10, 0x70bd2a, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x1, @bearer=@l2={'eth', 0x3a, 'vxcan1\x00'}}}}, ["", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2040010) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, 0x0, 0x228, 0x70bd28, 0x25dfdbfd, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x89}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @loopback}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2}]}, 0x84}, 0x1, 0x0, 0x0, 0x48180}, 0x2014) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x14, 0x4, 0x1, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x81) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000540)={0x2, 'vlan0\x00', 0x2}, 0x18) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x680000, 0x0) close(r4) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x4e23, @local}, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000600), r0) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f00000008c0)={'tunl0\x00', &(0x7f0000000840)={'tunl0\x00', 0x0, 0x7, 0xf806, 0x8b03, 0x7, {{0x16, 0x4, 0x1, 0x1a, 0x58, 0x67, 0x0, 0x5, 0x2f, 0x0, @multicast2, @private=0xa010101, {[@timestamp_addr={0x44, 0x2c, 0x9d, 0x1, 0x5, [{@multicast2, 0x6ec}, {@broadcast, 0x8}, {@empty, 0x6}, {@broadcast, 0x10}, {@multicast2, 0x7}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x14, 0x7c, 0x0, 0xb, [0x5, 0x10, 0xfffffff8, 0x3]}]}}}}}) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000980)={0x0, 0x9, 0x8}, 0xc) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000009c0)={0xffffffffffffffff, 0x6}, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a80)={0x11, 0x15, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xe}, [@ldst={0x3, 0x2, 0x3, 0x5, 0x5, 0x11, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}, @ldst={0x1, 0x0, 0x1, 0x0, 0x7, 0x4, 0x10}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x899}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @cb_func={0x18, 0x6}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x6}]}, &(0x7f00000007c0)='syzkaller\x00', 0xc, 0x13, &(0x7f0000000800)=""/19, 0x41000, 0x20, '\x00', r7, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x6, 0x9}, 0x8, 0x10, &(0x7f0000000940)={0x0, 0x2, 0x7fa49c10}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[r8, r9, r10], 0x0, 0x10, 0xbba}, 0x94) syz_genetlink_get_family_id$wireguard(&(0x7f0000000b40), r1) recvmmsg(r3, &(0x7f000000a5c0)=[{{&(0x7f0000000b80)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000c00)=""/197, 0xc5}, {&(0x7f0000000d00)=""/107, 0x6b}, {&(0x7f0000000d80)=""/161, 0xa1}], 0x3, &(0x7f0000000e80)=""/55, 0x37}, 0x1ff}, {{&(0x7f0000000ec0)=@generic, 0x80, &(0x7f0000001180)=[{&(0x7f0000000f40)=""/68, 0x44}, {&(0x7f0000000fc0)=""/208, 0xd0}, {&(0x7f00000010c0)=""/52, 0x34}, {&(0x7f0000001100)=""/113, 0x71}], 0x4, &(0x7f00000011c0)=""/65, 0x41}, 0x3}, {{&(0x7f0000001240)=@phonet, 0x80, &(0x7f0000002340)=[{&(0x7f00000012c0)=""/118, 0x76}, {&(0x7f0000001340)=""/4096, 0x1000}], 0x2, &(0x7f0000002380)=""/28, 0x1c}, 0x635}, {{&(0x7f00000023c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000004600)=[{&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/184, 0xb8}, {&(0x7f0000003500)=""/47, 0x2f}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/184, 0xb8}], 0x5, &(0x7f0000004680)=""/62, 0x3e}, 0x59}, {{&(0x7f00000046c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000004880)=[{&(0x7f0000004740)=""/78, 0x4e}, {&(0x7f00000047c0)=""/60, 0x3c}, {&(0x7f0000004800)=""/42, 0x2a}, {&(0x7f0000004840)=""/30, 0x1e}], 0x4, &(0x7f00000048c0)=""/4096, 0x1000}, 0xffff}, {{&(0x7f00000058c0)=@x25, 0x80, &(0x7f0000007c80)=[{&(0x7f0000005940)=""/211, 0xd3}, {&(0x7f0000005a40)=""/27, 0x1b}, {&(0x7f0000005a80)=""/13, 0xd}, {&(0x7f0000005ac0)=""/64, 0x40}, {&(0x7f0000005b00)=""/83, 0x53}, {&(0x7f0000005b80)=""/4096, 0x1000}, {&(0x7f0000006b80)=""/245, 0xf5}, {&(0x7f0000006c80)=""/4096, 0x1000}], 0x8}, 0x1}, {{0x0, 0x0, &(0x7f0000008e00)=[{&(0x7f0000007d00)=""/11, 0xb}, {&(0x7f0000007d40)=""/153, 0x99}, {&(0x7f0000007e00)=""/4096, 0x1000}], 0x3, &(0x7f0000008e40)=""/234, 0xea}}, {{&(0x7f0000008f40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000009fc0)=[{&(0x7f0000008fc0)=""/4096, 0x1000}], 0x1, &(0x7f000000a000)=""/232, 0xe8}, 0xcf8a}, {{&(0x7f000000a100)=@phonet, 0x80, &(0x7f000000a500)=[{&(0x7f000000a180)=""/136, 0x88}, {&(0x7f000000a240)=""/24, 0x18}, {&(0x7f000000a280)=""/72, 0x48}, {&(0x7f000000a300)=""/121, 0x79}, {&(0x7f000000a380)=""/104, 0x68}, {&(0x7f000000a400)=""/247, 0xf7}], 0x6, &(0x7f000000a580)=""/52, 0x34}, 0x1}], 0x9, 0x0, &(0x7f000000a800)) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f000000a840)={0x0, @initdev, @private}, &(0x7f000000a880)=0xc) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r8, 0x40786e88, &(0x7f000000aa40)={{&(0x7f000000a8c0)=[{0x0, 0x8, 0x0, {0x4, 0xfffffffffffffffd}, 0x4, 0x6, 0xfffffffe}, {0x7, 0x7, 0xfb, {0x81}, 0x5, 0xe}], 0x2, 0x40, 0x33ab, 0x40000000000}, {&(0x7f000000a940)=[{0xcdb, 0x1}], 0x1, 0x10, 0xfffd, 0x485}, {&(0x7f000000a980)=[0xfffffffffffffffa], 0x1, 0x8, 0xedce, 0x70}, {&(0x7f000000a9c0), 0x0, 0x28, 0x0, 0xffffffffffffffff}, {&(0x7f000000aa00)=[0xc9dd, 0x7, 0x7, 0xbd7, 0x8000000000000001, 0x0, 0x3, 0x9], 0x8, 0x8, 0x40, 0x100}}) pipe(&(0x7f000000aac0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$SEG6_CMD_DUMPHMAC(r11, &(0x7f000000abc0)={&(0x7f000000ab00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f000000ab80)={&(0x7f000000ab40)={0x3c, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x3c}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f000000ac00)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r13, 0x10f, 0x86) ioctl$BTRFS_IOC_GET_DEV_STATS(r12, 0xc4089434, &(0x7f000000ac40)={0x0, 0x4, 0x1, [0x9, 0x84c, 0x6, 0xa816, 0x5], [0x9, 0x6, 0x0, 0x158a, 0x5, 0x4, 0xa, 0x1, 0x7, 0xffffffffffff0000, 0x200, 0x4688, 0x5, 0x4, 0xfff, 0x2, 0x8, 0x2, 0x800, 0x8ad, 0x5, 0x942c, 0x8, 0x1, 0x4, 0x3432, 0x6, 0x5, 0x1, 0x5, 0x7, 0x3, 0x3, 0x401, 0x5, 0x80000001, 0x2, 0x1, 0x2, 0x8, 0x3, 0x6, 0x3, 0x3, 0xfffffffffffffeff, 0x9, 0x9, 0x3, 0x4, 0xc00000000000, 0x81, 0x6, 0xc83b, 0x5, 0xf, 0x8, 0xc273, 0xfff, 0x4, 0x7, 0xfff, 0x0, 0x0, 0xffffffffffff53e4, 0x9, 0x101, 0x77c, 0x3, 0x3, 0xe, 0x101, 0xf559, 0xfffffffffffffff9, 0x10, 0x2, 0x8000000000000000, 0x1, 0x100000000, 0x7, 0x822d, 0x3d, 0xffffffffffff483b, 0x1, 0x9, 0x8000000000000000, 0x0, 0x751, 0x4, 0xffffffffffffff7f, 0x802, 0x4, 0x7fffffff, 0x3, 0x0, 0x3, 0xe306, 0x200, 0x0, 0x8, 0xc000, 0x0, 0x0, 0x2, 0x1000, 0x5, 0x5, 0x5, 0xfffffffffffffffe, 0x8, 0x2, 0x0, 0x4, 0x5, 0x8, 0x1ff, 0x0, 0x4, 0x9, 0xfffffffff3fae888, 0x6, 0x6]}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f000000b0c0)={'filter\x00', 0x0, 0x0, 0x0, [0x5, 0x7, 0x4, 0x8, 0x2, 0x3cea9400], 0x0, &(0x7f000000b080)=[{}]}, 0x78) 3.091035627s ago: executing program 2 (id=4786): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r2, 0x2) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="308a400c", @ANYRES16=r1, @ANYBLOB="01002bbd7000fcdbdf250300000005000500e1000000"], 0x1c}, 0x1, 0x0, 0x0, 0x49054}, 0x4000080) 3.068695323s ago: executing program 0 (id=4787): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x20, 0x0, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) sendmsg$NFC_CMD_ACTIVATE_TARGET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000600)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4040084}, 0x4008) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32, @ANYBLOB="d50633008000009effff"], 0x6f4}}, 0x0) 2.716985292s ago: executing program 4 (id=4788): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r3, 0x800452d2, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@getqdisc={0x48, 0x26, 0x400, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x4, 0xc}, {0x8, 0xffff}, {0xa, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket(0x11, 0x2, 0x10001) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000000)={'wlan0\x00', &(0x7f0000000340)=@ethtool_rxnfc={0x2e, 0x0, 0x1, {0xb, @esp_ip6_spec={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3, 0x81}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0x5, 0x8, [0x1, 0x7ff]}, @udp_ip4_spec={@dev={0xac, 0x14, 0x14, 0x42}, @empty, 0x4e22, 0x4e20, 0x9}, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, 0x3, 0xf6, [0x3, 0xffffffff]}, 0x6, 0x30}}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r8, @ANYBLOB="1c005a801800018014000300060010000c000100000000000000b6b2"], 0x38}}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000000000000ff030000000000000400000000000000", @ANYRES32=r5, @ANYBLOB="00000000885c00"/28, @ANYRES32=r1, @ANYBLOB="000000000400"/28, @ANYRES32=r6, @ANYBLOB="00000000800f00"/28, @ANYRES32=r0, @ANYBLOB="000000007547cdd200"/25]) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r9, &(0x7f00000006c0)="8c3fe11ab92621892c08002ce7ae64beb16577531055c3000000000000000000000000dcce97605c", 0x28, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @broadcast}, 0x14) socket$kcm(0x29, 0x7, 0x0) 2.307072665s ago: executing program 3 (id=4789): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x24, r2, 0x1, 0x0, 0x0, {0x3}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0xc20, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44014) (async) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0xc20, 0x70bd27, 0x25dfdbfe, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @loopback}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x44014) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d40)=@raw={'raw\x00', 0x8, 0x3, 0x370, 0x0, 0xffffffff, 0xffffffff, 0x110, 0xffffffff, 0x2a0, 0xffffffff, 0xffffffff, 0x2a0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x0, 0x0, 0x0, 0x41}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x401, 0x8, 0x0, 'netbios-ns\x00', 'syz0\x00', {0x840}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x128, 0x190, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x5, 0x0, 0x7, 0x3ff}}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x4, 0xa, 0x8, 'syz0\x00', 'syz1\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x3d0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000009682440aec0a42608a580ebbeefaf8c2be09429b124e44381970a70f6ce0812cc5ab611c8de7986946251d88272d7d6d11a0137ed940cf488caef04fd7767ce5d6", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251700000044000680040003003c00040067636d2861657329000000000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6"], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="580000009682440aec0a42608a580ebbeefaf8c2be09429b124e44381970a70f6ce0812cc5ab611c8de7986946251d88272d7d6d11a0137ed940cf488caef04fd7767ce5d6", @ANYRES16=r4, @ANYBLOB="010028bd7000fcdbdf251700000044000680040003003c00040067636d2861657329000000000000000000000000000000000000000000000000140000009ea2d328893918792a5ca222a6ad614b6f3aa3a6"], 0x58}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 2.178609049s ago: executing program 0 (id=4790): r0 = socket$inet6(0xa, 0x3, 0x3c) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async, rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (rerun: 64) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x5000, 0x0, @loopback, 0x5}, 0x1c) (async) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) 2.122100448s ago: executing program 2 (id=4791): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0xb0, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219, 0x20000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_PROP_LIST={0x7c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'gre0\x00'}, {0x14, 0x35, 'vlan0\x00'}, {0x14, 0x35, 'bond_slave_1\x00'}, {0x14, 0x35, 'team_slave_0\x00'}, {0x14, 0x35, 'vxcan1\x00'}, {0x14, 0x35, 'veth1_macvtap\x00'}]}]}, 0xb0}}, 0xd106655d0bea0126) 1.801259043s ago: executing program 1 (id=4792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x5, 0xe, 0x1, 0xd, 0x18, 0x5, 0x2, {0x6, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e0}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="05db71b86fbfe7fc98b2714b9563e13b9bd9a828f9d19d88e69b946ad2", 0x1d, 0x4009, &(0x7f0000000140)={0x11, 0xf6, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000300)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00160006000600a8000600200002400700027c035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000000)='dctcp', 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000300000018650000000000000000000007317782875f51e13f84750d0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="a0010000100001000000000000000000fc010000000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000fc01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000ff07000002000000cd000000000000004800020063626328616573290000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000001c001700000000000000000000000001003924ad324f0e4f410000004c001400636d61632861657329"], 0x1a0}}, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r10, 0x29, 0x8, 0x0, &(0x7f0000000340)) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a8001600a000014001000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe10000000001001000730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r6}, 0x8) 1.403428161s ago: executing program 0 (id=4793): syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@local, @random="ce3500590a7f", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x2, 0x2, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "eed95425ef497343e285ee56ff9cd27f91306943185560d0", "424927f0b3a5b1a5bae583a55bca1d80986985716b5fe7237cbf62ea040ff7c4"}}}}}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000440)=""/206, 0xce}], 0x1}, 0x6}], 0x1, 0x102, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400f5000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000084000000060a010400000000000000000100000008000b40000000005c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020089000000240001800b0001007470726f7879000014000280080003400000001408000140000000000900010073797a30"], 0xf8}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "c8bf5d03ac85c25d", "9a5d38a17f00c500000000feff00", "a1c4776d", "3c84a3a3be2adbff"}, 0x28) r2 = socket$inet(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200"], 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 1.24064581s ago: executing program 3 (id=4794): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x268, 0xf8, 0x11, 0x148, 0xf8, 0x0, 0x1d0, 0x2a8, 0x2a8, 0x1d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x7, 0x1], 0x4}, {0xffffffffffffffff, [0x7]}}}}, {{@ip={@multicast1, @empty, 0xffffffff, 0xffffffff, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x29}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0xf8, 0x70, 0x98}, {0x28}}}}, 0x2df) 712.103551ms ago: executing program 2 (id=4795): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000a00)={{r1}, "43034353bc9f685fc5d678c047a4a5292e3237ca30cb0f3a9420c9fba0ec4682958baa9e0e94da65970a1c631b5f0139cf3987ad6efa4f483175bc44153da819970a879c6f3ada010c83640ed4e74958a739e85472f4c4c77469644ceadcdc5c688787fd96c27af4ce68d4a65843bd76785c6e519ee90f9a6920bf477c4891a82b124921220cbe3b082be08d48c6ed9eb46a9dc47e23779e961a3f99ea4191028fc46a22e8aad0c413261138ed0b5e2056e522c88a23ad104748d91912d3a9d239ce3ef5ce9c223039b540070954e9505d511ad49ed448daf48cab80390481984f69d19168efdba082cd2a7655d6b0139b0df978c71cd3782f409d56bf0fe9a685e0f79624ac8eb9850ec36fdf31c73234e61c34de1be1c48b7bc738125753deb1f50a00415fb76765ea1155af266b7f6f3ecc7c7754a7209684c4384e6a0884561230064b245748e9fa9f40e206d6c0008730bc1c1bc1a5649e2c4252cab52fe3b883b9a0f3f8deb174325b2a1734809c927458120698ade675a545a0082dc1a3daa41ae2923d0531d18f8231909d20edb1475df9c0684bcbd764711d9df0fcc98375d8afb5b613b79af337615b069f10f2d445fc76905d8fa1a120b65a0d62c4bef582e7292ee61629555dfaece502e533d2789773100c9ddcc1080e9574db85ffc46167537683ecc535c0684b4f64ae228bc16b6236a85e74f61886ea3aba3c6e4faf1dbd2722af34655cbe76df53958323fa8a59e1543cf60721caa411cb9c824798756d3631c61d45bf5018d09f7a2884e3672fefa55c0d7222ef614598f80518d4067061a18ef791d1dc153131417515b13afd314a49370ab130756c19c344daec5c857a867cdd5e73e7f7f4e4611a83b484af2d8cfe7a70d248719ac90c463182edec6c2fb702d9c0a4a141fdfb2a88121532da6f7bee16a4bfd9aa342a744eb798d4c274ce2fe5395966f69736b1d8e8cc737d2b7d1be6dd133eb76e2697ef6a07766a5ec66348fa6373d085be3310936bf6c39807d670d2a68c9510142f55f48455ae19377d690acefb34294622c44384def20d9d2b5f2001f94ddf291945746b3c264acf6face324e50b919f5f36dad3cacd6e6a894d773068481821d478f196ac8a1b097cfe1176b4f46e1db657e56cbd482abe729e7fc4d2b11f094cbaedd342cf72738683c8f8a075e1a6f27edff0d9e891e22b4d51e0c6bcb612390b395ec9b6b6590ca6eae2f7a8a0ffe079b8083d4a0601441571cb3ad6a5da6c1ac4143c17937710d01ff9b3f00908d8c2a9d6950d02b47b3b282aad26980f2b30d4366d7ac3691a2ef8aa959aaabc5b306ad2597a2613fb7237040e95d950ba6b78dbc4522fa0af7711f448be54019bf002719f2450d36ba9e80291357360634df225a9fcf5699658a26243ac82c15b8d4fb5eca179f09cee87a8bef8fdacbcfa74f93bf2a9a79063c17c08995ed2fe5e41eafb99b6eb7090623e3147d04f94e21d0302b1e398c0e74863156a2e4cf34c0f65a7b927f8cb840ca7ea907a6ee218bf39e24134f0f33206ca13366041940d265009eb2ee66a9f0ab3335ab14ff5a19b9d18fc98c547880cc7bf19513a353395933f1df3ad602e718ff3c344234678ee263e6f1023470466899bda51ce5e4f82f403e273a0ea32bf813f4ce90f21acc91a38379cfa454c183d5cdf670d25dd6ad168b7c4fb74cc5e6e17af5eef96478df04de0f703716e592ff8f2f7f4d36eef28095151aa1082bf828e12ca9a331ddeefddcfdb52ad2b4e89448f309ee8756224ff1878e37f3a177c0d78d7f71013252377616fa9d6d547ed9e562eae85a4c7e8776770c58e6d77ff3376c0f5c16966b8545a5f1a336bf4d60eb606035f284e14c69ab8b909938dd4f8257f5da1e8d16513c0f1a561d55208db14d69d33259d9e2befde605014340018f26079860879627754ba9e924dc3efbec4fa1186d075666a87662113bfb8750fd83a26b227ca421d5a266fac72a4258462e0fb7b2ce5ac6e692d82c2c6c8383bbae39d884c23c4c47555f924b22b60f621f2db8d009da303c919c847962ddefa13f1a0195e3b33881f11d0a15faf5617b8af3e684f50cb3a53e13b18e23a93059ecc630f98832c3f9cc8617a307b7373971aa35ddcf474fce083578ed556fbb0dc9e5ccebcaccf9fc382931278e5ad16b73432287be57f9e9d746a1b0ed9558378a7e819fd808b3aa608203c9f62bfbe88785be6c4da06dca42dcac31c6d850b82166951524df711bc044e12abf6d1817be7dbeaf19dbe068db18d93e87e1101d8c09298a71fd891d5976fc311903c9977c45fd8c8f375fc2d3f2b2ef58bf4378f148ff3a4d378174e1f26085b22cee03e252e73c28c71fc4552f1f3b9198fb6fed1c2133a65c7eda35a21b5c891db6e9cfc78abae9d2caff25bbf982f665ebaa870e87d289eb59f9b8f6151545dedf74c4d27d4aff17b507bcd71fe12efa3195bdbf5b757758f3a4b77283f7e6cd56d566c2bb3918d860eb23db3933ab1bbbf5ca63b5026f72dab99dac9a4a613b2da18eac33a398d158763bef75f70e7fc5c75a7cb7ab56b325f95a1e6d9743dd2487b6c7b5709258add8b5019a2fc22f0d18822ac79c5b3b8d5b8f7dbf611a6b1143c21ffdfb4764d10899f84892a28034a5872f7ee1015141f76368762dbd61d68308746375f8f9640019a25dd3a11c4b3596d86c83e8047cf5c47739623cb9aab3e9273b741b89a12d00829ba96301bf35f9bc7164428a031edeab4c746c1f4a38c9c05e8b0d891b7cc03aa35e9c9aacecf158381241114806a91ee0d5c1f2523b5b9f7b8f38e083c05bca2200ac96dc63272004e9ef20fd577ea7ae4a3387306fa5656229c03e4f968ce39ef07b7a89051f4f577d65651fb64ac6265be9aa8dcb238343cedcafaf7c562225fd1840dc5ccb90322766d1634993360570ec7feb40cb3101bca80a58640d0bac91308437014df7c14da356427a6ecca491e6f9588ec2c7f896e39b099591086b04d0d568eb399f0bb8c841611931cb2fd6fd73ebb7f8b9b73d48fb3b294e052953b315a951019a043b7ebca3c4821d7c540facf4c2bb4534aa3445decfd270b8f03a9d71dc2a8e4c50439c956161e1ad4b067b197db3b86b8b4022f2ee27a7e9d4658c3cd641e34ad088969674f3cc7bcc6256221922fed4c749a0d41c095c0e3995056b43744ad9b8b6ba6565c2cc4fd43d8a9abeb60e5c2db0fee542869de33fd32ef72d7bc6a918763f187538a830280e326448dca9fa31403054357234592cc1d55504d9ab55cdaa369958626b476bdbf7c5913f38db214f1be91020b327346b1e05a90026b67915abbf1fd69103935e87699dd3f920da161441764598005fbd92ff22f287ca6809be5497322b42cc300e76e7877d42949a10c79cf8a7b22e46b34b4624a0550de07ef48547abac7d30e79d6028c70aa6942c8558d61c4d3e831cb586ed72e18fd5c1a15e4d81d1c35b5bd143ec188983c524a52f69ba844fdb3b20909d32997cdc822a5646adc597463c0f354aa55943d9eca6b01751902cd8ad8bb8e19f82cccbc696989332be3af34fc9547abfbee54267d775e85e65b2d5ecc0947b2772aeb7b41db3edd3025f5f2d57b0edda51b69191bbe8bfdc06ccb2bb1f55a104bc3b4298470d44531a1b1f1400a094453a9ebe3e06f522847be402b85aecc13422ca423c7357c7cefd5acb9b7dab1e724076b755323bf375918f0de79c78dd2b76963f35ca8c3c7bf3e9fa3b6e12b63646a717a92abac968286b1d0c6b4277b9a4a975fd6a5ad30e18aeae32040687265d0d1848d30190e43cdcf167f8db57ea04be0ce696f4257abe3427eb9b785ee619c52aef573266a886b298c4371ae2e7c141c5263dd6fa898171b3b6e3194a446fe27807bb685b700188acff8d10cf5ed0d8007db138dd93b5afc9dd60470e1639b712aa8669094c32f8c8652be3d2b7100281d7d9495795a97c3dff5a844ce6a2c2c1aa92356bc7b767db8bf3a9a438aaea4d3806afa53ba86922e4c4424485cc05dc26b44059528cbf208a6774eb6dfdf1492393d9c17268a97ead7700fb2d61e3b9378f09e5bafec089b2b8f971b78ac6b5dfda6ae423ad9fb162306912c76cc6c6936b4cc08598b5cf4f3037ce1c03f0dda1018d1600c3f452d2ad9a7b52eae3b55f1d9b0e0a3283cca3db142d3daf62a8c758b9a294779b645b05dcd478c42ad24e5cec8c25da6bd7271e9df0195e13737f86996da964b6b11fabce88258c5b628cc3368ebcb7c8350f0d17c9af5250516c8cf31407ed32704a5fb5d7da05750485c687452ad238bc7f645dc9efa61f88b3f8c3faeb1f8e44a9b907fc5c3ad527270732f3ebd574a75e8ff7b6e6537f54fbf0e8e3316efda3eab14e4f0d7c74d6e3f82e0145588106be9da5d1c74297cc72bf4783078d7ffee9ded2349a53305910998c2837254e864f31e2287dcc19a7d6fb6cdcf80a5dede163a6c3d36e2c5861b89a46eaf0504ad0c7d16ddf02bf6f1d90bf9feaa0b7d9cfefd47d08aac22ee4a6241191f4d6acbdcf6eceae1d2d2028b6e559fb550e1f4a5ee9866da456c7eb034c2f34238572f0d3e3085b1f03509cca9958701fc4a73539c4d446c065bc9e2a4ff1861471c31c6223882ccf0258dcd79634975b560a4905843e26ac6a99346e2de740e4deaa6925a7afdc98025b9b89fc02035efa1457f7b343d3a4c0feeff66f6c719db8528bc49bffcdae000b64fdf1cc755d993b9a77da4c26d8cb8700545c68e4ca1bfd30fb70ad2fe57ce2881cc5b1b6e5126e7705abcc0b8e553252ebc893b5f045e51acdb19944ace5182269f111d1a3533de0c38ec8db309dc44a1c5734846fd5d9e18b07df7ebdbb546f115dc5ef4423351f131c5739e4eed6136dfa022c99c1323144db427af9e3e5c2be67967a3b637413beca8c2081d664af22ac9058bbeeb0d843d09111245a36a245e77fccd3d4e7b359f6ba6521e5a6cbd99b2ef135df13d76d07d0e847ae16ce2b4050c58a775460b6ed86631074516667d590771b2809d55d32b1ed895531e1ee10b25eec4939b0360a2064076a40a8780611ec7f261132e5f7dca1e7284085795408d1385ed7fe4a5cb18c29108cde9b7cbe844d929838a231899e772a381403685446273a564ce6c35aa294ea02b91f61e093ef9191c2d4cf8b722b17093b16d6a3b34444ff9e22ca1dd429d40c2f655ddcf7564aa1cde88a652c5a8589b522ff88938203b09b2fca155be384af4c8d12a32e705ad1d2c4e4e3a9d1a151956ae0f19f9c88ab11137975a5ab53047f5ee69ebbb8c1a2b605e738584a29ad501c0f949aa6a9c0247f17b40f3d8ccbef3c9cc2602d2eb5bf84c7d5bd2480f3478b7975cfa90faf03bbea007baa6682bce23cd245ac372523cf758b939030ad185bc1d0f5753a7268bee39056345130353e0d44d5e46f4a1d933e553f7768071b41d08631a1165b5af7ca4e9d17a3c67ac57aea2d530b6b3a21c279708e71ed6464d01409da47dbadbce0583609105ea631eab93924c1937bf496afe2a4e0758ca521753f8e03e9998618a3304329f70f9a8358416b96c0b42a2287cbd435390a2131d33a8081d5199834a13de7d195ee118bd442af7f34ac1bcce9fad8d61ccc124ed99830dec1d77e90f061ff04043d5e0ea6f1e581a378d2bcbe128ac3756e6070b8321ee6a27634deb278e60e73b9a75083f470808b4b3c4e8661ca91ebed4d028c0683623dc8cbdc01baac0a9451319d960"}) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) close(r0) 394.642309ms ago: executing program 3 (id=4796): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x8, 0x3, 0x588, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x4b8, 0xffffffff, 0xffffffff, 0x4b8, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x1, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xff, 0xffffffff, 0xff000000], 'netpci0\x00', 'ipvlan0\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x2b, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xff, 0xff000000, 0xffffffff], 0x4e23, 0x4e21, 0x4e22, 0x4e21, 0x100, 0x1, 0x6, 0x3ff, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e8) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@gettaction={0x14, 0x5a, 0xc6b747b6bf1c6b95}, 0x14}}, 0x0) 6.921947ms ago: executing program 0 (id=4797): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200008}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x3c, 0x1402, 0x20, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1040}, 0x10010) sendmsg$AUDIT_TRIM(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x3f6, 0x100, 0x70bd26, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000001840)=ANY=[@ANYRES32=r4], 0xb) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000640)={r4, 0x1000, "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"}, &(0x7f0000001680)=0x1008) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_PHYS_PORT_ID={0x9, 0x22, "c74268e7af"}, @IFLA_TXQLEN={0x8, 0xd, 0xfffffffd}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x8}]}, 0x3c}}, 0x0) 0s ago: executing program 2 (id=4798): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000100)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002600), 0xffffffffffffffff) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000000180)={0x14, r3, 0xf21, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40085}, 0x24008840) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000180)={'geneve1\x00', @remote}) (async) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000000)=0xd938, 0x4) (async) r5 = socket$netlink(0x10, 0x3, 0xf) (async) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) (async) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f0000000040)={0x2a, 0x1}, 0xc) r7 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r6, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) (async) getsockopt$sock_buf(r0, 0x1, 0x1a, &(0x7f00000001c0)=""/115, &(0x7f0000000240)=0x73) (async) connect$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc) (async) writev(r7, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(r6, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) (async) write(r5, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) kernel console output (not intermixed with test programs): tcp or -p udp [ 426.882528][T18127] ip6gre1: entered allmulticast mode [ 427.001123][T18135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3570'. [ 427.037056][T18135] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3570'. [ 427.340343][T18157] No such timeout policy "syz1" [ 427.509552][T18175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3584'. [ 427.563295][T18175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3584'. [ 428.033008][T18211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3591'. [ 428.116709][T18215] No such timeout policy "syz1" [ 428.371902][T18231] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3598'. [ 428.649741][T18249] Unsupported ieee802154 address type: 0 [ 428.674050][T18246] bond3: option arp_validate: invalid value (12032) [ 428.709547][T18246] bond3 (unregistering): Released all slaves [ 428.905693][T18252] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.052774][T18252] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.152713][T18252] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.244089][T18252] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.310242][T18290] pimreg: entered allmulticast mode [ 429.387311][T18295] openvswitch: netlink: Flow actions attr not present in new flow. [ 429.442362][ T1019] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.466270][T18298] syzkaller1: entered promiscuous mode [ 429.472053][T18298] syzkaller1: entered allmulticast mode [ 429.479917][T18295] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.514913][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.557038][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.586839][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 429.726732][T18313] bond1: option arp_validate: invalid value (12169) [ 429.743428][T18313] bond1 (unregistering): Released all slaves [ 429.829708][T18320] __nla_validate_parse: 3 callbacks suppressed [ 429.829733][T18320] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3620'. [ 429.919107][T18324] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3622'. [ 429.928630][T18324] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3622'. [ 429.949259][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880267c0800: rx timeout, send abort [ 429.961237][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880267c0800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 429.985234][T18329] openvswitch: netlink: IP tunnel dst address not specified [ 430.102455][T18331] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3625'. [ 430.145591][T18339] netlink: 312 bytes leftover after parsing attributes in process `syz.4.3627'. [ 430.148560][T18331] syzkaller1: entered promiscuous mode [ 430.170505][T18331] syzkaller1: entered allmulticast mode [ 430.289491][T18349] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3632'. [ 430.454312][T18361] netlink: 'syz.4.3635': attribute type 1 has an invalid length. [ 430.476755][T18352] syzkaller0: entered promiscuous mode [ 430.485226][T18352] syzkaller0: entered allmulticast mode [ 430.559413][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3635'. [ 430.666523][T18373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3638'. [ 430.675127][T18371] netlink: 'syz.1.3637': attribute type 8 has an invalid length. [ 430.879835][T18384] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3643'. [ 430.895906][T18384] IPv6: NLM_F_CREATE should be specified when creating new route [ 430.923646][T12134] IPVS: starting estimator thread 0... [ 430.970107][T18404] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3645'. [ 431.016024][T18395] IPVS: using max 34 ests per chain, 81600 per kthread [ 431.173191][ T35] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 431.218723][T18413] netlink: 'syz.1.3647': attribute type 13 has an invalid length. [ 431.234265][ T1177] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.234284][T18413] netlink: 'syz.1.3647': attribute type 13 has an invalid length. [ 431.245718][ T1177] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.260340][ T1177] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.271702][ T1177] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 431.805906][T18423] netlink: 'syz.4.3651': attribute type 1 has an invalid length. [ 433.673980][T18433] netlink: 'syz.0.3654': attribute type 39 has an invalid length. [ 433.849457][T18384] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 434.016444][T18441] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 434.053279][T18441] vlan2: entered allmulticast mode [ 434.065499][T18441] bond0: entered allmulticast mode [ 434.074318][T18441] bond_slave_0: entered allmulticast mode [ 434.086131][T18441] bond_slave_1: entered allmulticast mode [ 434.246872][T18446] FAULT_INJECTION: forcing a failure. [ 434.246872][T18446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 434.300534][T18446] CPU: 0 UID: 0 PID: 18446 Comm: syz.4.3659 Not tainted syzkaller #0 PREEMPT(full) [ 434.300558][T18446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.300572][T18446] Call Trace: [ 434.300582][T18446] [ 434.300589][T18446] dump_stack_lvl+0xe8/0x150 [ 434.300613][T18446] should_fail_ex+0x412/0x560 [ 434.300638][T18446] _copy_to_user+0x31/0xb0 [ 434.300662][T18446] simple_read_from_buffer+0xe1/0x170 [ 434.300687][T18446] proc_fail_nth_read+0x1bb/0x230 [ 434.300710][T18446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.300733][T18446] ? rw_verify_area+0x2a6/0x4d0 [ 434.300753][T18446] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 434.300773][T18446] vfs_read+0x20c/0xa70 [ 434.300799][T18446] ? __pfx___mutex_lock+0x10/0x10 [ 434.300821][T18446] ? __pfx_vfs_read+0x10/0x10 [ 434.300844][T18446] ? __fget_files+0x2a/0x420 [ 434.300866][T18446] ? __fget_files+0x3a0/0x420 [ 434.300882][T18446] ? __fget_files+0x2a/0x420 [ 434.300908][T18446] ksys_read+0x150/0x270 [ 434.300933][T18446] ? __pfx_ksys_read+0x10/0x10 [ 434.300951][T18446] ? fput+0xa0/0xd0 [ 434.300976][T18446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.300993][T18446] do_syscall_64+0x15f/0xf80 [ 434.301013][T18446] ? trace_irq_disable+0x3b/0x140 [ 434.301036][T18446] ? clear_bhb_loop+0x40/0x90 [ 434.301061][T18446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.301077][T18446] RIP: 0033:0x7f2c0ed5d68e [ 434.301092][T18446] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 434.301105][T18446] RSP: 002b:00007f2c0fcc1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 434.301123][T18446] RAX: ffffffffffffffda RBX: 00007f2c0fcc26c0 RCX: 00007f2c0ed5d68e [ 434.301134][T18446] RDX: 000000000000000f RSI: 00007f2c0fcc20a0 RDI: 0000000000000008 [ 434.301144][T18446] RBP: 00007f2c0fcc2090 R08: 0000000000000000 R09: 0000000000000000 [ 434.301153][T18446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.301163][T18446] R13: 00007f2c0f016038 R14: 00007f2c0f015fa0 R15: 00007ffd86c399a8 [ 434.301191][T18446] [ 434.654787][T18462] sit1: entered promiscuous mode [ 434.670994][T18462] sit1: entered allmulticast mode [ 434.692273][T18468] tunl0: entered promiscuous mode [ 434.699222][T18468] netlink: 'syz.4.3666': attribute type 3 has an invalid length. [ 434.763751][T18463] veth0_to_bond: entered promiscuous mode [ 434.795556][T18463] veth0_to_bond: entered allmulticast mode [ 434.854572][T18475] __nla_validate_parse: 6 callbacks suppressed [ 434.854587][T18475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3669'. [ 434.855555][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3670'. [ 434.880821][T18476] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.908224][T18476] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 435.107289][T18493] netlink: 'syz.2.3675': attribute type 3 has an invalid length. [ 435.120426][ T1019] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0xe8 [ 435.137494][T18493] netlink: 'syz.2.3675': attribute type 3 has an invalid length. [ 435.161868][T18493] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3675'. [ 435.577374][T18521] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3682'. [ 435.618081][T18524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3683'. [ 435.628404][T18524] netlink: 'syz.0.3683': attribute type 7 has an invalid length. [ 435.639013][T18524] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3683'. [ 438.041750][T18486] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.176143][T18532] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 438.519137][T18555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3693'. [ 438.540540][T18550] syzkaller0: entered promiscuous mode [ 438.555178][T18550] syzkaller0: entered allmulticast mode [ 438.842024][T18573] netlink: 'syz.3.3699': attribute type 11 has an invalid length. [ 438.892073][T18576] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3701'. [ 438.970967][T18586] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.009662][T18590] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3705'. [ 439.059079][T18593] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3707'. [ 439.587368][T18616] x_tables: duplicate entry at hook 1 [ 439.886508][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.885435][T18576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.206236][T18659] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3727'. [ 442.219301][T18661] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'. [ 442.247273][T18662] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3728'. [ 442.328355][T18661] syzkaller0: entered promiscuous mode [ 442.337088][T18661] syzkaller0: entered allmulticast mode [ 442.465130][T18677] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3732'. [ 442.815616][T18702] syzkaller0: entered promiscuous mode [ 442.830333][T18702] syzkaller0: entered allmulticast mode [ 442.867143][T18706] No such timeout policy "syz1" [ 442.933808][T18708] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3745'. [ 442.938581][T18710] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3746'. [ 443.015289][T18710] bond2: entered promiscuous mode [ 443.067651][T18720] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3747'. [ 443.272163][T18710] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.284037][T18710] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.314356][T18727] netlink: 'syz.1.3751': attribute type 15 has an invalid length. [ 443.365211][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3751'. [ 443.397833][T18710] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.416617][T18710] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.443499][T18727] netlink: 'syz.1.3751': attribute type 15 has an invalid length. [ 443.457671][T18727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3751'. [ 443.566434][T18710] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.609373][T18710] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.871208][T18710] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 443.906466][T18710] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.059631][ T1113] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.085013][ T1113] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.132055][ T1177] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.145657][ T1177] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.148401][T18761] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 444.174214][ T1177] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.184338][ T1177] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.224769][ T138] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 444.244798][ T138] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.415678][T18774] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3769'. [ 444.436037][T18774] syzkaller1: entered promiscuous mode [ 444.441585][T18774] syzkaller1: entered allmulticast mode [ 445.026418][T18799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.037829][T18799] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.221207][T18799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.231781][T18799] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.354058][T18799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.366973][T18799] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.484508][T18799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 445.497307][T18799] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.645411][ T5632] Bluetooth: hci3: command tx timeout [ 445.816336][ T35] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.827810][ T35] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.897513][ T1177] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.917141][ T1177] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.941494][T18847] netlink: 'syz.0.3791': attribute type 7 has an invalid length. [ 445.949382][T18849] Cannot find map_set index 135 as target [ 445.986146][ T35] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 445.986243][T18847] netlink: 'syz.0.3791': attribute type 7 has an invalid length. [ 446.002466][ T35] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.060089][ T138] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 446.070130][ T138] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.238120][T18859] netlink: 'syz.2.3796': attribute type 1 has an invalid length. [ 446.308685][T18861] erspan0: entered allmulticast mode [ 446.528298][T18879] netlink: 'syz.2.3803': attribute type 3 has an invalid length. [ 446.709286][T18890] netlink: 'syz.4.3807': attribute type 2 has an invalid length. [ 446.967554][T18911] netlink: 'syz.4.3815': attribute type 11 has an invalid length. [ 447.388395][T18923] __nla_validate_parse: 8 callbacks suppressed [ 447.388724][T18923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3817'. [ 447.469772][T18923] team1: entered promiscuous mode [ 447.474979][T18923] team1: entered allmulticast mode [ 447.591994][T18930] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3820'. [ 447.625447][T18932] netlink: 'syz.2.3821': attribute type 1 has an invalid length. [ 447.638775][T18930] ip6erspan0: entered allmulticast mode [ 447.681592][T18932] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 447.696309][T18932] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3821'. [ 447.710484][T18932] 8021q: adding VLAN 0 to HW filter on device bond3 [ 447.718350][ T35] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 447.721135][T18932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3821'. [ 447.935563][ T35] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 447.966782][T18947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3828'. [ 448.039110][T18953] netlink: 'syz.2.3831': attribute type 1 has an invalid length. [ 448.087222][T18953] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3831'. [ 448.114611][T18960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3832'. [ 448.200245][T18959] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3833'. [ 448.369628][T18973] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3837'. [ 448.395677][T18974] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 448.404381][T18974] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3838'. [ 448.414489][T18974] NCSI netlink: No device for ifindex 0 [ 448.425391][T18973] netlink: 'syz.0.3837': attribute type 2 has an invalid length. [ 448.459812][T18973] netlink: 'syz.0.3837': attribute type 2 has an invalid length. [ 448.459817][T18978] netlink: 'syz.3.3840': attribute type 1 has an invalid length. [ 448.459834][T18978] netlink: 'syz.3.3840': attribute type 7 has an invalid length. [ 448.505167][T18978] netlink: 'syz.3.3840': attribute type 8 has an invalid length. [ 448.742426][T19002] sctp: [Deprecated]: syz.4.3847 (pid 19002) Use of struct sctp_assoc_value in delayed_ack socket option. [ 448.742426][T19002] Use struct sctp_sack_info instead [ 448.784476][T19003] xfrm0: entered promiscuous mode [ 448.790276][T19003] xfrm0: entered allmulticast mode [ 449.090733][T19021] bond1: Unable to set down delay as MII monitoring is disabled [ 449.101974][T19021] bond1 (unregistering): Released all slaves [ 449.112391][T19027] nbd: must specify at least one socket [ 449.393857][T19045] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 449.412059][T19047] netlink: 'syz.3.3864': attribute type 1 has an invalid length. [ 449.427928][T19050] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 449.436431][T19047] netlink: 'syz.3.3864': attribute type 2 has an invalid length. [ 449.446582][T19050] netlink: 'syz.0.3865': attribute type 1 has an invalid length. [ 449.488896][T19050] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 449.530844][T19052] netlink: 'syz.3.3864': attribute type 1 has an invalid length. [ 449.833346][T19083] FAULT_INJECTION: forcing a failure. [ 449.833346][T19083] name failslab, interval 1, probability 0, space 0, times 0 [ 449.866959][T19083] CPU: 0 UID: 0 PID: 19083 Comm: syz.2.3874 Not tainted syzkaller #0 PREEMPT(full) [ 449.866984][T19083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 449.866993][T19083] Call Trace: [ 449.866998][T19083] [ 449.867005][T19083] dump_stack_lvl+0xe8/0x150 [ 449.867030][T19083] should_fail_ex+0x412/0x560 [ 449.867055][T19083] should_failslab+0xa8/0x100 [ 449.867077][T19083] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 449.867096][T19083] ? __alloc_skb+0x186/0x7d0 [ 449.867114][T19083] ? __alloc_skb+0x1d0/0x7d0 [ 449.867129][T19083] ? __local_bh_enable_ip+0xd0/0x130 [ 449.867154][T19083] __alloc_skb+0x1d0/0x7d0 [ 449.867170][T19083] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 449.867194][T19083] netlink_sendmsg+0x5d4/0xb40 [ 449.867221][T19083] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.867244][T19083] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.867265][T19083] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.867286][T19083] ____sys_sendmsg+0x972/0x9f0 [ 449.867306][T19083] ? __might_fault+0xaf/0x130 [ 449.867338][T19083] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.867364][T19083] ? import_iovec+0x73/0xa0 [ 449.867388][T19083] ___sys_sendmsg+0x2a5/0x360 [ 449.867407][T19083] ? __lock_acquire+0x6b5/0x2cf0 [ 449.867427][T19083] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.867476][T19083] ? __fget_files+0x2a/0x420 [ 449.867494][T19083] ? __fget_files+0x3a0/0x420 [ 449.867520][T19083] __x64_sys_sendmsg+0x1bd/0x2a0 [ 449.867543][T19083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.867570][T19083] ? __pfx_ksys_write+0x10/0x10 [ 449.867598][T19083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.867616][T19083] do_syscall_64+0x15f/0xf80 [ 449.867635][T19083] ? trace_irq_disable+0x3b/0x140 [ 449.867654][T19083] ? clear_bhb_loop+0x40/0x90 [ 449.867672][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.867686][T19083] RIP: 0033:0x7f8cc6d9ce59 [ 449.867702][T19083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.867714][T19083] RSP: 002b:00007f8cc4fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.867731][T19083] RAX: ffffffffffffffda RBX: 00007f8cc7015fa0 RCX: 00007f8cc6d9ce59 [ 449.867742][T19083] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000009 [ 449.867751][T19083] RBP: 00007f8cc4fee090 R08: 0000000000000000 R09: 0000000000000000 [ 449.867759][T19083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.867768][T19083] R13: 00007f8cc7016038 R14: 00007f8cc7015fa0 R15: 00007ffda727ebe8 [ 449.867792][T19083] [ 450.413795][T19087] bond1: option arp_validate: invalid value (17664) [ 450.426482][T19087] bond1 (unregistering): Released all slaves [ 450.597913][T19108] IPVS: set_ctl: invalid protocol: 135 172.20.20.10:21 [ 451.315836][T19157] syzkaller1: entered promiscuous mode [ 451.327373][T19157] syzkaller1: entered allmulticast mode [ 451.348679][T19157] FAULT_INJECTION: forcing a failure. [ 451.348679][T19157] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.395166][T19157] CPU: 1 UID: 0 PID: 19157 Comm: syz.3.3901 Not tainted syzkaller #0 PREEMPT(full) [ 451.395189][T19157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 451.395199][T19157] Call Trace: [ 451.395206][T19157] [ 451.395213][T19157] dump_stack_lvl+0xe8/0x150 [ 451.395236][T19157] should_fail_ex+0x412/0x560 [ 451.395261][T19157] _copy_to_user+0x31/0xb0 [ 451.395285][T19157] simple_read_from_buffer+0xe1/0x170 [ 451.395308][T19157] proc_fail_nth_read+0x1bb/0x230 [ 451.395330][T19157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 451.395351][T19157] ? rw_verify_area+0x2a6/0x4d0 [ 451.395370][T19157] ? tun_chr_write_iter+0x18a/0x200 [ 451.395387][T19157] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 451.395416][T19157] vfs_read+0x20c/0xa70 [ 451.395439][T19157] ? __pfx___mutex_lock+0x10/0x10 [ 451.395462][T19157] ? __pfx_vfs_read+0x10/0x10 [ 451.395484][T19157] ? __fget_files+0x2a/0x420 [ 451.395506][T19157] ? __fget_files+0x3a0/0x420 [ 451.395520][T19157] ? __fget_files+0x2a/0x420 [ 451.395544][T19157] ksys_read+0x150/0x270 [ 451.395564][T19157] ? __pfx_ksys_read+0x10/0x10 [ 451.395592][T19157] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.395609][T19157] do_syscall_64+0x15f/0xf80 [ 451.395628][T19157] ? trace_irq_disable+0x3b/0x140 [ 451.395650][T19157] ? clear_bhb_loop+0x40/0x90 [ 451.395669][T19157] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.395684][T19157] RIP: 0033:0x7f08e575d68e [ 451.395699][T19157] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 451.395712][T19157] RSP: 002b:00007f08e663dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 451.395729][T19157] RAX: ffffffffffffffda RBX: 00007f08e663e6c0 RCX: 00007f08e575d68e [ 451.395740][T19157] RDX: 000000000000000f RSI: 00007f08e663e0a0 RDI: 0000000000000009 [ 451.395749][T19157] RBP: 00007f08e663e090 R08: 0000000000000000 R09: 0000000000000000 [ 451.395759][T19157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 451.395768][T19157] R13: 00007f08e5a16038 R14: 00007f08e5a15fa0 R15: 00007fffbad3c258 [ 451.395796][T19157] [ 451.797481][T19176] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.907888][T19179] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.936663][T19179] bridge_slave_0 (unregistering): left allmulticast mode [ 451.959332][T19184] IPv6: NLM_F_CREATE should be specified when creating new route [ 451.962456][T19179] bridge_slave_0 (unregistering): left promiscuous mode [ 451.988176][T19179] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.118829][T19203] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 452.214097][T19209] FAULT_INJECTION: forcing a failure. [ 452.214097][T19209] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 452.241854][T19194] syzkaller1: entered promiscuous mode [ 452.252262][T19194] syzkaller1: entered allmulticast mode [ 452.263870][T19209] CPU: 0 UID: 0 PID: 19209 Comm: syz.1.3916 Not tainted syzkaller #0 PREEMPT(full) [ 452.263893][T19209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.263903][T19209] Call Trace: [ 452.263910][T19209] [ 452.263917][T19209] dump_stack_lvl+0xe8/0x150 [ 452.263941][T19209] should_fail_ex+0x412/0x560 [ 452.263967][T19209] _copy_from_iter+0x1d3/0x1670 [ 452.263990][T19209] ? rcu_is_watching+0x15/0xb0 [ 452.264015][T19209] ? __pfx__copy_from_iter+0x10/0x10 [ 452.264042][T19209] ? netlink_sendmsg+0x650/0xb40 [ 452.264062][T19209] ? skb_put+0x11b/0x210 [ 452.264083][T19209] netlink_sendmsg+0x6c0/0xb40 [ 452.264131][T19209] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.264153][T19209] ? aa_sock_msg_perm+0xf1/0x1b0 [ 452.264174][T19209] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.264197][T19209] ____sys_sendmsg+0x972/0x9f0 [ 452.264217][T19209] ? __might_fault+0xaf/0x130 [ 452.264240][T19209] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.264265][T19209] ? import_iovec+0x73/0xa0 [ 452.264287][T19209] ___sys_sendmsg+0x2a5/0x360 [ 452.264306][T19209] ? __lock_acquire+0x6b5/0x2cf0 [ 452.264325][T19209] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.264372][T19209] ? __fget_files+0x2a/0x420 [ 452.264390][T19209] ? __fget_files+0x3a0/0x420 [ 452.264417][T19209] __x64_sys_sendmsg+0x1bd/0x2a0 [ 452.264439][T19209] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.264468][T19209] ? __pfx_ksys_write+0x10/0x10 [ 452.264497][T19209] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.264514][T19209] do_syscall_64+0x15f/0xf80 [ 452.264534][T19209] ? trace_irq_disable+0x3b/0x140 [ 452.264556][T19209] ? clear_bhb_loop+0x40/0x90 [ 452.264574][T19209] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.264589][T19209] RIP: 0033:0x7f23c9f9ce59 [ 452.264604][T19209] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.264617][T19209] RSP: 002b:00007f23cae18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.264634][T19209] RAX: ffffffffffffffda RBX: 00007f23ca215fa0 RCX: 00007f23c9f9ce59 [ 452.264645][T19209] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000009 [ 452.264654][T19209] RBP: 00007f23cae18090 R08: 0000000000000000 R09: 0000000000000000 [ 452.264663][T19209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.264673][T19209] R13: 00007f23ca216038 R14: 00007f23ca215fa0 R15: 00007fff76ffed08 [ 452.264699][T19209] [ 452.654183][T19218] __nla_validate_parse: 21 callbacks suppressed [ 452.654201][T19218] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3919'. [ 452.659723][T19223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3921'. [ 452.781020][T19232] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 452.962449][T19249] FAULT_INJECTION: forcing a failure. [ 452.962449][T19249] name failslab, interval 1, probability 0, space 0, times 0 [ 452.976625][T19249] CPU: 1 UID: 0 PID: 19249 Comm: syz.2.3930 Not tainted syzkaller #0 PREEMPT(full) [ 452.976649][T19249] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 452.976658][T19249] Call Trace: [ 452.976670][T19249] [ 452.976676][T19249] dump_stack_lvl+0xe8/0x150 [ 452.976701][T19249] should_fail_ex+0x412/0x560 [ 452.976726][T19249] should_failslab+0xa8/0x100 [ 452.976752][T19249] __kmalloc_cache_noprof+0x88/0x660 [ 452.976772][T19249] ? netlink_lookup+0x30/0x200 [ 452.976790][T19249] ? genl_family_rcv_msg_attrs_parse+0xe9/0x2f0 [ 452.976807][T19249] ? genl_start+0x1c9/0x6c0 [ 452.976826][T19249] genl_start+0x1c9/0x6c0 [ 452.976840][T19249] ? netlink_lookup+0x30/0x200 [ 452.976865][T19249] __netlink_dump_start+0x469/0x7e0 [ 452.976893][T19249] genl_family_rcv_msg_dumpit+0x213/0x310 [ 452.976912][T19249] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 452.976934][T19249] ? __pfx_genl_start+0x10/0x10 [ 452.976944][T19249] ? __pfx_genl_dumpit+0x10/0x10 [ 452.976956][T19249] ? __pfx_genl_done+0x10/0x10 [ 452.976975][T19249] ? bpf_lsm_capable+0x9/0x20 [ 452.976990][T19249] ? security_capable+0x7e/0x2c0 [ 452.977013][T19249] genl_rcv_msg+0x5e8/0x7a0 [ 452.977044][T19249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.977058][T19249] ? __pfx_batadv_bla_claim_dump+0x10/0x10 [ 452.977076][T19249] ? __pfx_ref_tracker_free+0x10/0x10 [ 452.977094][T19249] ? __asan_memcpy+0x40/0x70 [ 452.977109][T19249] ? __skb_clone+0x63/0x7a0 [ 452.977137][T19249] netlink_rcv_skb+0x232/0x4b0 [ 452.977158][T19249] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.977174][T19249] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.977208][T19249] ? down_read+0x270/0x2e0 [ 452.977221][T19249] ? genl_rcv+0xd/0x40 [ 452.977238][T19249] genl_rcv+0x28/0x40 [ 452.977252][T19249] netlink_unicast+0x75c/0x8e0 [ 452.977281][T19249] netlink_sendmsg+0x813/0xb40 [ 452.977310][T19249] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.977333][T19249] ? aa_sock_msg_perm+0xf1/0x1b0 [ 452.977354][T19249] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 452.977378][T19249] ____sys_sendmsg+0x972/0x9f0 [ 452.977398][T19249] ? __might_fault+0xaf/0x130 [ 452.977423][T19249] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.977452][T19249] ? import_iovec+0x73/0xa0 [ 452.977478][T19249] ___sys_sendmsg+0x2a5/0x360 [ 452.977497][T19249] ? __lock_acquire+0x6b5/0x2cf0 [ 452.977518][T19249] ? __pfx____sys_sendmsg+0x10/0x10 [ 452.977573][T19249] ? __fget_files+0x2a/0x420 [ 452.977591][T19249] ? __fget_files+0x3a0/0x420 [ 452.977618][T19249] __x64_sys_sendmsg+0x1bd/0x2a0 [ 452.977642][T19249] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 452.977671][T19249] ? __pfx_ksys_write+0x10/0x10 [ 452.977701][T19249] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.977717][T19249] do_syscall_64+0x15f/0xf80 [ 452.977737][T19249] ? trace_irq_disable+0x3b/0x140 [ 452.977760][T19249] ? clear_bhb_loop+0x40/0x90 [ 452.977779][T19249] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.977795][T19249] RIP: 0033:0x7f8cc6d9ce59 [ 452.977810][T19249] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.977821][T19249] RSP: 002b:00007f8cc4fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.977839][T19249] RAX: ffffffffffffffda RBX: 00007f8cc7015fa0 RCX: 00007f8cc6d9ce59 [ 452.977849][T19249] RDX: 0000000004000000 RSI: 0000200000004340 RDI: 0000000000000009 [ 452.977859][T19249] RBP: 00007f8cc4fee090 R08: 0000000000000000 R09: 0000000000000000 [ 452.977869][T19249] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 452.977878][T19249] R13: 00007f8cc7016038 R14: 00007f8cc7015fa0 R15: 00007ffda727ebe8 [ 452.977905][T19249] [ 453.383967][T19256] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3934'. [ 453.459351][T19259] syzkaller1: entered promiscuous mode [ 453.501963][T19261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3936'. [ 453.514669][T19259] syzkaller1: entered allmulticast mode [ 453.839810][T19287] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3943'. [ 453.871529][T19287] validate_nla: 6 callbacks suppressed [ 453.871546][T19287] netlink: 'syz.2.3943': attribute type 13 has an invalid length. [ 453.910166][T19287] gretap0: refused to change device tx_queue_len [ 453.925458][T19287] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 453.946080][T19291] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3945'. [ 453.966324][T19291] netlink: 'syz.1.3945': attribute type 1 has an invalid length. [ 453.974242][T19291] netlink: 228 bytes leftover after parsing attributes in process `syz.1.3945'. [ 453.989766][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3945'. [ 454.004877][T19291] : renamed from bond0 (while UP) [ 454.010959][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 454.021628][T19299] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3948'. [ 454.163598][T19306] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.175713][T19306] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.198128][T19308] wireguard0: entered promiscuous mode [ 454.206025][T19308] wireguard0: entered allmulticast mode [ 454.254262][T19306] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.267010][T19306] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.288809][T19310] netlink: 'syz.3.3951': attribute type 11 has an invalid length. [ 454.331411][T19306] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.341532][T19306] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.420456][T19306] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.457332][T19306] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.583325][T19316] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.644491][ T12] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.661505][ T12] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.698930][ T12] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.709266][ T12] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.739579][T19328] bond2: option min_links: invalid value (18446744073709551614) [ 454.747601][T19328] bond2: option min_links: allowed values 0 - 2147483647 [ 454.757086][T19328] bond2 (unregistering): Released all slaves [ 454.803549][T19316] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.827398][ T1113] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.848298][ T1113] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.883023][ T1113] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 454.896741][ T1113] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.919894][T19316] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.990069][T19339] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 455.013101][ T4959] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 455.041932][T19316] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.157723][ T138] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.203041][ T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.235085][ T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.275454][ T1006] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.711169][T19372] netlink: 'syz.0.3973': attribute type 28 has an invalid length. [ 455.728529][T19372] netlink: 'syz.0.3973': attribute type 3 has an invalid length. [ 455.963963][T19384] syzkaller0: entered promiscuous mode [ 455.977664][T19384] syzkaller0: entered allmulticast mode [ 456.342683][T19405] team0: Port device dummy0 removed [ 456.484759][ T29] audit: type=1804 audit(1778879641.311:10): pid=19418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3990" name="/newroot/119/cgroup.controllers" dev="tmpfs" ino=620 res=1 errno=0 [ 456.556136][ T29] audit: type=1800 audit(1778879641.311:11): pid=19418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3990" name="cgroup.controllers" dev="tmpfs" ino=620 res=0 errno=0 [ 456.803522][T19438] FAULT_INJECTION: forcing a failure. [ 456.803522][T19438] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.849394][T19438] CPU: 1 UID: 0 PID: 19438 Comm: syz.0.3998 Not tainted syzkaller #0 PREEMPT(full) [ 456.849417][T19438] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 456.849427][T19438] Call Trace: [ 456.849433][T19438] [ 456.849440][T19438] dump_stack_lvl+0xe8/0x150 [ 456.849464][T19438] should_fail_ex+0x412/0x560 [ 456.849490][T19438] _copy_from_user+0x2d/0xb0 [ 456.849514][T19438] kstrtouint_from_user+0xd6/0x180 [ 456.849536][T19438] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 456.849575][T19438] proc_fail_nth_write+0x8e/0x210 [ 456.849597][T19438] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.849622][T19438] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 456.849643][T19438] vfs_write+0x29a/0xb90 [ 456.849673][T19438] ? __pfx_vfs_write+0x10/0x10 [ 456.849696][T19438] ? __fget_files+0x2a/0x420 [ 456.849727][T19438] ? __fget_files+0x3a0/0x420 [ 456.849744][T19438] ? __fget_files+0x2a/0x420 [ 456.849771][T19438] ksys_write+0x150/0x270 [ 456.849795][T19438] ? __pfx_ksys_write+0x10/0x10 [ 456.849824][T19438] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.849841][T19438] do_syscall_64+0x15f/0xf80 [ 456.849862][T19438] ? trace_irq_disable+0x3b/0x140 [ 456.849884][T19438] ? clear_bhb_loop+0x40/0x90 [ 456.849904][T19438] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.849919][T19438] RIP: 0033:0x7f5325b5d68e [ 456.849935][T19438] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 456.849948][T19438] RSP: 002b:00007f5326a1bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 456.849965][T19438] RAX: ffffffffffffffda RBX: 00007f5326a1c6c0 RCX: 00007f5325b5d68e [ 456.849977][T19438] RDX: 0000000000000001 RSI: 00007f5326a1c0a0 RDI: 000000000000000a [ 456.849986][T19438] RBP: 00007f5326a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 456.849995][T19438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.850003][T19438] R13: 00007f5325e16038 R14: 00007f5325e15fa0 R15: 00007ffda3c06f78 [ 456.850031][T19438] [ 457.208084][T19452] bridge0: port 3(veth1_to_bridge) entered blocking state [ 457.237293][T19452] bridge0: port 3(veth1_to_bridge) entered disabled state [ 457.244702][T19452] veth1_to_bridge: entered allmulticast mode [ 457.253167][T19452] veth1_to_bridge: entered promiscuous mode [ 457.262644][T19452] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 457.278941][T19452] bridge0: port 3(veth1_to_bridge) entered blocking state [ 457.286263][T19452] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 457.293025][T19461] openvswitch: netlink: IP tunnel TTL not specified. [ 457.528740][T19474] gretap2: entered promiscuous mode [ 457.553074][T19474] batman_adv: batadv0: Adding interface: gretap2 [ 457.601115][T19474] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 457.652304][T19474] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 458.119817][T19518] xt_hashlimit: size too large, truncated to 1048576 [ 458.157833][T19517] ±ÿª¨úrBº“: renamed from lo (while UP) [ 458.388193][T19538] netlink: 'syz.3.4027': attribute type 11 has an invalid length. [ 458.406501][T19538] netlink: 'syz.3.4027': attribute type 11 has an invalid length. [ 458.422670][T19538] __nla_validate_parse: 13 callbacks suppressed [ 458.422685][T19538] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4027'. [ 458.604543][T19551] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4034'. [ 458.631082][T19554] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 458.758906][T19559] netlink: 'syz.1.4036': attribute type 4 has an invalid length. [ 458.861933][T19569] netlink: 212340 bytes leftover after parsing attributes in process `syz.0.4039'. [ 458.878496][T19569] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 459.119151][T19588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4047'. [ 459.252311][T19601] netlink: 76 bytes leftover after parsing attributes in process `syz.1.4050'. [ 459.274036][T19601] netlink: 320 bytes leftover after parsing attributes in process `syz.1.4050'. [ 459.288481][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4050'. [ 459.370153][T19606] x_tables: duplicate underflow at hook 1 [ 459.402703][T19610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4051'. [ 459.447641][T19610] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4051'. [ 459.458620][T19610] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4051'. [ 459.533384][T19610] gretap1: entered promiscuous mode [ 459.547312][T19610] gretap1: entered allmulticast mode [ 459.596479][T19626] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 2, id = 0 [ 459.789345][T19643] FAULT_INJECTION: forcing a failure. [ 459.789345][T19643] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.803800][T19643] CPU: 1 UID: 0 PID: 19643 Comm: syz.4.4061 Not tainted syzkaller #0 PREEMPT(full) [ 459.803824][T19643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 459.803833][T19643] Call Trace: [ 459.803841][T19643] [ 459.803847][T19643] dump_stack_lvl+0xe8/0x150 [ 459.803872][T19643] should_fail_ex+0x412/0x560 [ 459.803896][T19643] _copy_to_user+0x31/0xb0 [ 459.803919][T19643] sctp_getsockopt_default_sndinfo+0x495/0x650 [ 459.803943][T19643] ? __pfx_sctp_getsockopt_default_sndinfo+0x10/0x10 [ 459.803963][T19643] ? sctp_getsockopt+0x12f/0xb90 [ 459.803983][T19643] ? __local_bh_enable_ip+0xd0/0x130 [ 459.804001][T19643] sctp_getsockopt+0x360/0xb90 [ 459.804015][T19643] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 459.804033][T19643] do_sock_getsockopt+0x51d/0x7e0 [ 459.804059][T19643] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 459.804090][T19643] ? __fget_files+0x3a0/0x420 [ 459.804105][T19643] ? __fget_files+0x2a/0x420 [ 459.804128][T19643] __x64_sys_getsockopt+0x1a4/0x240 [ 459.804153][T19643] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.804168][T19643] do_syscall_64+0x15f/0xf80 [ 459.804186][T19643] ? trace_irq_disable+0x3b/0x140 [ 459.804208][T19643] ? clear_bhb_loop+0x40/0x90 [ 459.804227][T19643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.804240][T19643] RIP: 0033:0x7f2c0ed9ce59 [ 459.804255][T19643] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.804269][T19643] RSP: 002b:00007f2c0fcc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 459.804287][T19643] RAX: ffffffffffffffda RBX: 00007f2c0f015fa0 RCX: 00007f2c0ed9ce59 [ 459.804299][T19643] RDX: 0000000000000022 RSI: 0000000000000084 RDI: 0000000000000003 [ 459.804308][T19643] RBP: 00007f2c0fcc2090 R08: 0000200000000080 R09: 0000000000000000 [ 459.804318][T19643] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 459.804328][T19643] R13: 00007f2c0f016038 R14: 00007f2c0f015fa0 R15: 00007ffd86c399a8 [ 459.804363][T19643] [ 460.536192][T19669] syzkaller1: entered promiscuous mode [ 460.541944][T19669] syzkaller1: entered allmulticast mode [ 461.600325][T19733] bond2: option arp_all_targets: invalid value (18446744073709551613) [ 461.685981][T19733] bond2 (unregistering): Released all slaves [ 461.790896][T19747] pim6reg: entered allmulticast mode [ 461.798778][T19747] pim6reg: left allmulticast mode [ 462.087950][T19767] tipc: Failed to remove unknown binding: 66,0,0/0:2092877619/2092877621 [ 462.113084][T19763] bond3: option arp_validate: invalid value (25944) [ 462.144889][T19767] tipc: Failed to remove unknown binding: 66,0,0/0:2092877619/2092877620 [ 462.155459][T19763] bond3 (unregistering): Released all slaves [ 462.181707][T19767] tipc: Failed to remove unknown binding: 66,0,0/0:2092877619/2092877621 [ 462.217477][T19767] tipc: Failed to remove unknown binding: 66,0,0/0:2092877619/2092877620 [ 462.233315][T19774] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 462.289630][T19771] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 462.968229][T19828] bridge3: entered allmulticast mode [ 463.412975][T19870] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.431012][T19870] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.490281][T19883] __nla_validate_parse: 18 callbacks suppressed [ 463.490309][T19883] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4127'. [ 463.511235][T19875] tunl0: left promiscuous mode [ 463.534836][T19885] openvswitch: netlink: Flow key attr not present in new flow. [ 463.541261][T19875] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.549666][T19875] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.575491][T19875] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.582706][T19875] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.615853][T19875] veth0_to_bond: left promiscuous mode [ 463.621460][T19875] veth0_to_bond: left allmulticast mode [ 463.672786][T19875] team1: left promiscuous mode [ 463.686802][T19875] team1: left allmulticast mode [ 463.703095][T19875] bridge3: left allmulticast mode [ 463.903125][T19908] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 464.096819][T19925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4135'. [ 464.206313][T12140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 464.254147][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4140'. [ 464.439993][T19938] xt_hashlimit: size too large, truncated to 1048576 [ 464.566513][T19945] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4145'. [ 464.965627][T19961] wireguard: wg0: Could not create IPv4 socket [ 465.142319][T19978] netlink: 'syz.0.4156': attribute type 1 has an invalid length. [ 465.201899][T19984] Timeout policy `syz1' can only be used by L3 protocol number 35006 [ 465.203905][T19986] xt_hashlimit: invalid rate [ 465.236701][T19978] bond1: (slave bridge5): making interface the new active one [ 465.247019][T12140] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 465.257100][T19978] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 465.333595][T19996] netlink: 'syz.4.4162': attribute type 1 has an invalid length. [ 465.344111][T19996] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4162'. [ 465.505832][T20002] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.551157][T20009] syzkaller0: entered promiscuous mode [ 465.582992][T20009] syzkaller0: entered allmulticast mode [ 465.698041][T20013] syzkaller0: entered promiscuous mode [ 465.713744][T20013] syzkaller0: entered allmulticast mode [ 465.718902][T20018] No such timeout policy "syz1" [ 466.344555][T20058] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4184'. [ 466.485657][T20073] netlink: 'syz.3.4188': attribute type 10 has an invalid length. [ 466.528211][T20073] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4188'. [ 466.628391][T20081] netlink: 'syz.3.4188': attribute type 23 has an invalid length. [ 466.691860][T20068] syzkaller0: entered promiscuous mode [ 466.700037][T20068] syzkaller0: entered allmulticast mode [ 466.715337][T20069] syzkaller1: entered promiscuous mode [ 466.720960][T20069] syzkaller1: entered allmulticast mode [ 466.732515][T20081] IPv6: sit1: Disabled Multicast RS [ 466.947029][T20093] netlink: 516 bytes leftover after parsing attributes in process `syz.2.4190'. [ 466.985121][T20092] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 467.578392][ T4948] Bluetooth: hci5: command 0x0406 tx timeout [ 469.398593][T20135] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 469.418189][T20135] syzkaller1: Refused to change device type [ 469.437011][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4210'. [ 469.457594][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4210'. [ 469.468343][T20135] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4210'. [ 469.478849][T20135] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4210'. [ 469.703433][T20157] netlink: 168 bytes leftover after parsing attributes in process `syz.4.4218'. [ 469.782161][T20163] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4217'. [ 470.013618][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4225'. [ 470.032744][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4225'. [ 470.060541][T20181] netlink: 'syz.4.4226': attribute type 3 has an invalid length. [ 470.066921][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4225'. [ 470.081200][T20183] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4225'. [ 470.098099][T20181] bridge0: port 3(ipvlan2) entered blocking state [ 470.115287][T20181] bridge0: port 3(ipvlan2) entered disabled state [ 470.122012][T20181] ipvlan2: entered allmulticast mode [ 470.135282][T20181] bridge0: entered allmulticast mode [ 470.167559][T20181] ipvlan2: left allmulticast mode [ 470.197539][T20181] bridge0: left allmulticast mode [ 470.551907][T20211] syzkaller1: entered promiscuous mode [ 470.566588][T20211] syzkaller1: entered allmulticast mode [ 470.883662][T20236] netlink: 'syz.4.4247': attribute type 2 has an invalid length. [ 471.053901][T20252] openvswitch: netlink: Key 19 has unexpected len 3 expected 4 [ 471.159583][T20254] syzkaller1: entered promiscuous mode [ 471.172572][T20254] syzkaller1: entered allmulticast mode [ 471.658502][T20291] A link change request failed with some changes committed already. Interface 26±ÿª¨úrBº“ may have been left with an inconsistent configuration, please check. [ 471.714798][T20296] netlink: 'syz.3.4265': attribute type 1 has an invalid length. [ 471.822481][T20298] syzkaller1: entered promiscuous mode [ 471.835849][T20300] xt_l2tp: v2 doesn't support IP mode [ 471.836691][T20298] syzkaller1: entered allmulticast mode [ 471.929764][T20308] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.156816][T20325] bond4: option arp_validate: invalid value (34525) [ 472.167719][T20325] bond4 (unregistering): Released all slaves [ 472.684682][T20356] syzkaller1: entered promiscuous mode [ 472.692243][T20356] syzkaller1: entered allmulticast mode [ 473.112552][T20369] netlink: 'syz.3.4289': attribute type 1 has an invalid length. [ 473.125683][T20369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 473.132960][T20369] IPv6: NLM_F_CREATE should be set when creating new route [ 474.186775][T20430] netlink: 'syz.4.4308': attribute type 7 has an invalid length. [ 474.239772][T20430] netlink: 'syz.4.4308': attribute type 8 has an invalid length. [ 474.436525][T20438] x_tables: duplicate underflow at hook 2 [ 474.447886][T20439] __nla_validate_parse: 13 callbacks suppressed [ 474.447902][T20439] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4310'. [ 474.486361][T20442] x_tables: duplicate underflow at hook 2 [ 474.497993][T20439] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4310'. [ 474.532235][T20434] batman_adv: batadv0: Interface activated: gretap2 [ 474.539162][T20439] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4310'. [ 474.551001][T20439] netlink: 'syz.1.4310': attribute type 5 has an invalid length. [ 474.665651][T20447] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4314'. [ 474.704741][T20449] netlink: 'syz.0.4315': attribute type 1 has an invalid length. [ 474.760927][T20453] netlink: 'syz.2.4317': attribute type 1 has an invalid length. [ 474.812418][T20451] netlink: 'syz.1.4316': attribute type 12 has an invalid length. [ 474.897905][T20453] 8021q: adding VLAN 0 to HW filter on device bond4 [ 474.952601][T20455] bond4: (slave veth0_to_bond): making interface the new active one [ 474.967979][T20455] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 474.996846][T20467] netlink: 'syz.0.4321': attribute type 2 has an invalid length. [ 474.997236][T20453] macvlan3: entered promiscuous mode [ 475.011501][T20453] macvlan3: entered allmulticast mode [ 475.017969][T20453] bond4: entered promiscuous mode [ 475.023172][T20453] veth0_to_bond: entered promiscuous mode [ 475.030362][T20453] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 475.042495][T20453] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 475.063238][T20453] bond4: left promiscuous mode [ 475.068542][T20453] veth0_to_bond: left promiscuous mode [ 475.130776][T20451] bond0: option primary_reselect: invalid value (255) [ 475.141108][T20451] bond0 (unregistering): Released all slaves [ 475.178385][T20459] bond4: entered promiscuous mode [ 475.183638][T20459] veth0_to_bond: entered promiscuous mode [ 475.190144][T20459] bond4: entered allmulticast mode [ 475.201374][T20459] veth0_to_bond: entered allmulticast mode [ 475.429655][T20488] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4326'. [ 475.458754][T20488] bridge_slave_1: left allmulticast mode [ 475.468816][T20488] bridge_slave_1: left promiscuous mode [ 475.488002][T20488] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.526572][T20488] bridge_slave_0: left allmulticast mode [ 475.538644][T20488] bridge_slave_0: left promiscuous mode [ 475.546093][T20488] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.633449][T20494] bridge0: entered promiscuous mode [ 475.639055][T20494] bridge0: entered allmulticast mode [ 475.647550][T20496] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4331'. [ 475.669363][T20496] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4331'. [ 475.803796][T20511] syzkaller0: entered promiscuous mode [ 475.818350][T20511] syzkaller0: entered allmulticast mode [ 476.032565][T20528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4341'. [ 476.053546][T20528] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4341'. [ 476.323467][T20542] syzkaller0: entered promiscuous mode [ 476.337707][T20542] syzkaller0: entered allmulticast mode [ 476.433986][T20552] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4354'. [ 476.784627][T20576] sctp: [Deprecated]: syz.3.4362 (pid 20576) Use of int in max_burst socket option. [ 476.784627][T20576] Use struct sctp_assoc_value instead [ 477.068223][T20597] tipc: Enabling not permitted [ 477.084506][T20597] tipc: Enabling of bearer rejected, failed to enable media [ 477.314854][T20614] validate_nla: 1 callbacks suppressed [ 477.314872][T20614] netlink: 'syz.2.4376': attribute type 1 has an invalid length. [ 477.372823][T20614] 8021q: adding VLAN 0 to HW filter on device bond5 [ 477.433125][T20621] bond5: (slave gretap1): making interface the new active one [ 477.450341][T20621] bond5: (slave gretap1): Enslaving as an active interface with an up link [ 477.557135][T20631] syzkaller1: entered promiscuous mode [ 477.573653][T20631] syzkaller1: entered allmulticast mode [ 477.656195][T20639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 477.689227][T20634] netlink: 'syz.1.4381': attribute type 32 has an invalid length. [ 477.722426][T20634] bond0: option coupled_control: invalid value (192) [ 477.759463][T20634] bond0 (unregistering): Released all slaves [ 477.975297][T20655] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 478.013521][ T12] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.055915][ T12] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.105854][ T1019] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.147091][ T1019] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.185031][ T1019] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.215447][ T1019] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.223084][T20655] 8021q: adding VLAN 0 to HW filter on device bond2 [ 478.255070][ T1177] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.280113][T20661] bond2: (slave veth0_to_bond): making interface the new active one [ 478.297800][T20661] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 478.307078][ T12] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.325231][ T12] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.337164][T20666] bond2: (slave veth5): Enslaving as an active interface with a down link [ 478.346315][T20666] netlink: 'syz.0.4389': attribute type 1 has an invalid length. [ 478.354109][ T1006] bond3: (slave ip6gretap1): link status up again after 0 ms [ 478.357037][T20666] netlink: 'syz.0.4389': attribute type 2 has an invalid length. [ 478.561414][T20687] syzkaller1: entered promiscuous mode [ 478.569226][T20687] syzkaller1: entered allmulticast mode [ 479.049867][T20722] netlink: 'syz.0.4415': attribute type 1 has an invalid length. [ 479.088702][T20723] ip6t_srh: unknown srh invflags 4000 [ 479.215576][T20733] FAULT_INJECTION: forcing a failure. [ 479.215576][T20733] name failslab, interval 1, probability 0, space 0, times 0 [ 479.218877][T20731] syzkaller1: entered promiscuous mode [ 479.234158][T20731] syzkaller1: entered allmulticast mode [ 479.248492][T20733] CPU: 0 UID: 0 PID: 20733 Comm: syz.2.4419 Not tainted syzkaller #0 PREEMPT(full) [ 479.248514][T20733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 479.248524][T20733] Call Trace: [ 479.248530][T20733] [ 479.248536][T20733] dump_stack_lvl+0xe8/0x150 [ 479.248557][T20733] should_fail_ex+0x412/0x560 [ 479.248578][T20733] should_failslab+0xa8/0x100 [ 479.248598][T20733] ? xfrm_state_alloc+0x24/0x2f0 [ 479.248616][T20733] kmem_cache_alloc_noprof+0x87/0x650 [ 479.248635][T20733] ? __pfx___nla_validate_parse+0x10/0x10 [ 479.248659][T20733] xfrm_state_alloc+0x24/0x2f0 [ 479.248680][T20733] xfrm_add_sa+0x17ed/0x4230 [ 479.248703][T20733] ? __pfx_xfrm_add_sa+0x10/0x10 [ 479.248715][T20733] ? apparmor_capable+0x126/0x170 [ 479.248740][T20733] ? __nla_parse+0x40/0x60 [ 479.248761][T20733] xfrm_user_rcv_msg+0x7ae/0xc40 [ 479.248781][T20733] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 479.248834][T20733] ? __pfx___mutex_trylock_common+0x10/0x10 [ 479.248859][T20733] ? rcu_is_watching+0x15/0xb0 [ 479.248876][T20733] ? trace_contention_end+0x3d/0x140 [ 479.248896][T20733] ? __mutex_lock+0x319/0x1550 [ 479.248924][T20733] netlink_rcv_skb+0x232/0x4b0 [ 479.248946][T20733] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 479.248968][T20733] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 479.249002][T20733] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.249020][T20733] ? netlink_deliver_tap+0x2e/0x1b0 [ 479.249041][T20733] xfrm_netlink_rcv+0x79/0x90 [ 479.249057][T20733] netlink_unicast+0x75c/0x8e0 [ 479.249082][T20733] netlink_sendmsg+0x813/0xb40 [ 479.249109][T20733] ? __pfx_netlink_sendmsg+0x10/0x10 [ 479.249131][T20733] ? aa_sock_msg_perm+0xf1/0x1b0 [ 479.249151][T20733] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 479.249173][T20733] ____sys_sendmsg+0x972/0x9f0 [ 479.249194][T20733] ? __might_fault+0xaf/0x130 [ 479.249217][T20733] ? __pfx_____sys_sendmsg+0x10/0x10 [ 479.249245][T20733] ? import_iovec+0x73/0xa0 [ 479.249268][T20733] ___sys_sendmsg+0x2a5/0x360 [ 479.249287][T20733] ? __lock_acquire+0x6b5/0x2cf0 [ 479.249307][T20733] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.249359][T20733] ? __fget_files+0x2a/0x420 [ 479.249376][T20733] ? __fget_files+0x3a0/0x420 [ 479.249402][T20733] __x64_sys_sendmsg+0x1bd/0x2a0 [ 479.249424][T20733] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.249453][T20733] ? __pfx_ksys_write+0x10/0x10 [ 479.249481][T20733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.249496][T20733] do_syscall_64+0x15f/0xf80 [ 479.249515][T20733] ? trace_irq_disable+0x3b/0x140 [ 479.249533][T20733] ? clear_bhb_loop+0x40/0x90 [ 479.249551][T20733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.249565][T20733] RIP: 0033:0x7f8cc6d9ce59 [ 479.249580][T20733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.249592][T20733] RSP: 002b:00007f8cc4fee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.249609][T20733] RAX: ffffffffffffffda RBX: 00007f8cc7015fa0 RCX: 00007f8cc6d9ce59 [ 479.249620][T20733] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 479.249629][T20733] RBP: 00007f8cc4fee090 R08: 0000000000000000 R09: 0000000000000000 [ 479.249637][T20733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.249645][T20733] R13: 00007f8cc7016038 R14: 00007f8cc7015fa0 R15: 00007ffda727ebe8 [ 479.249670][T20733] [ 479.786981][T20750] netlink: 'syz.0.4426': attribute type 1 has an invalid length. [ 480.186488][T20744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 480.223085][T20744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 480.373945][T20744] vlan0: left promiscuous mode [ 480.608027][T20744] bridge1: left promiscuous mode [ 480.619408][T20744] bridge1: left allmulticast mode [ 480.626910][T20744] xfrm1: left promiscuous mode [ 480.637123][T20744] xfrm1: left allmulticast mode [ 480.675335][T20744] vlan2: left allmulticast mode [ 480.686313][T20744] : left allmulticast mode [ 480.691671][T20744] bond_slave_0: left allmulticast mode [ 480.699704][T20744] bond_slave_1: left allmulticast mode [ 480.830377][T20744] batman_adv: batadv0: Interface deactivated: gretap2 [ 480.846570][T20744] gretap2: left promiscuous mode [ 480.902825][T20743] netlink: 'syz.1.4423': attribute type 12 has an invalid length. [ 480.975042][ T1006] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.018143][ T1006] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.048841][ T1006] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.076930][ T1006] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.096804][T20772] __nla_validate_parse: 17 callbacks suppressed [ 481.096821][T20772] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4431'. [ 481.133159][ T1006] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.154402][ T1006] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.169225][ T1006] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 481.178632][ T1006] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.221056][T20779] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4434'. [ 481.276516][T20775] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4433'. [ 481.278391][T20779] syzkaller1: entered promiscuous mode [ 481.314356][T20779] syzkaller1: entered allmulticast mode [ 481.348317][T20784] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4436'. [ 481.468585][T20784] netlink: 14 bytes leftover after parsing attributes in process `syz.1.4436'. [ 481.545434][T20790] syzkaller1: entered promiscuous mode [ 481.555197][T20790] syzkaller1: entered allmulticast mode [ 481.781256][T20815] FAULT_INJECTION: forcing a failure. [ 481.781256][T20815] name failslab, interval 1, probability 0, space 0, times 0 [ 481.794738][T20815] CPU: 1 UID: 0 PID: 20815 Comm: syz.0.4446 Not tainted syzkaller #0 PREEMPT(full) [ 481.794760][T20815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 481.794769][T20815] Call Trace: [ 481.794776][T20815] [ 481.794783][T20815] dump_stack_lvl+0xe8/0x150 [ 481.794806][T20815] should_fail_ex+0x412/0x560 [ 481.794833][T20815] should_failslab+0xa8/0x100 [ 481.794855][T20815] ? skb_clone+0x212/0x3a0 [ 481.794877][T20815] kmem_cache_alloc_noprof+0x87/0x650 [ 481.794910][T20815] skb_clone+0x212/0x3a0 [ 481.794934][T20815] __netlink_deliver_tap+0x404/0x850 [ 481.794966][T20815] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.794988][T20815] netlink_deliver_tap+0x19c/0x1b0 [ 481.795009][T20815] netlink_sendskb+0x68/0x140 [ 481.795030][T20815] netlink_rcv_skb+0x2b6/0x4b0 [ 481.795050][T20815] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 481.795069][T20815] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.795105][T20815] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.795124][T20815] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.795146][T20815] xfrm_netlink_rcv+0x79/0x90 [ 481.795163][T20815] netlink_unicast+0x75c/0x8e0 [ 481.795193][T20815] netlink_sendmsg+0x813/0xb40 [ 481.795223][T20815] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.795246][T20815] ? aa_sock_msg_perm+0xf1/0x1b0 [ 481.795268][T20815] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 481.795293][T20815] ____sys_sendmsg+0x972/0x9f0 [ 481.795314][T20815] ? __might_fault+0xaf/0x130 [ 481.795340][T20815] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.795370][T20815] ? import_iovec+0x73/0xa0 [ 481.795395][T20815] ___sys_sendmsg+0x2a5/0x360 [ 481.795414][T20815] ? __lock_acquire+0x6b5/0x2cf0 [ 481.795435][T20815] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.795492][T20815] ? __fget_files+0x2a/0x420 [ 481.795510][T20815] ? __fget_files+0x3a0/0x420 [ 481.795538][T20815] __x64_sys_sendmsg+0x1bd/0x2a0 [ 481.795562][T20815] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.795593][T20815] ? __pfx_ksys_write+0x10/0x10 [ 481.795630][T20815] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.795647][T20815] do_syscall_64+0x15f/0xf80 [ 481.795667][T20815] ? trace_irq_disable+0x3b/0x140 [ 481.795689][T20815] ? clear_bhb_loop+0x40/0x90 [ 481.795709][T20815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.795724][T20815] RIP: 0033:0x7f5325b9ce59 [ 481.795740][T20815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.795752][T20815] RSP: 002b:00007f5326a1c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.795769][T20815] RAX: ffffffffffffffda RBX: 00007f5325e15fa0 RCX: 00007f5325b9ce59 [ 481.795780][T20815] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000004 [ 481.795790][T20815] RBP: 00007f5326a1c090 R08: 0000000000000000 R09: 0000000000000000 [ 481.795798][T20815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.795807][T20815] R13: 00007f5325e16038 R14: 00007f5325e15fa0 R15: 00007ffda3c06f78 [ 481.795836][T20815] [ 482.215661][T20821] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4449'. [ 482.232049][T20821] syzkaller1: entered promiscuous mode [ 482.242498][T20821] syzkaller1: entered allmulticast mode [ 482.350715][T20831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4453'. [ 482.444563][T20833] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4456'. [ 482.479085][T20836] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4455'. [ 482.534273][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4457'. [ 482.803212][T20862] syzkaller1: entered promiscuous mode [ 482.820055][T20866] netlink: 'syz.3.4467': attribute type 7 has an invalid length. [ 482.820469][T20862] syzkaller1: entered allmulticast mode [ 482.861454][T20866] netlink: 'syz.3.4467': attribute type 7 has an invalid length. [ 483.384808][T20872] syzkaller1: entered promiscuous mode [ 483.392470][T20872] syzkaller1: entered allmulticast mode [ 483.605036][ T1177] net_ratelimit: 20 callbacks suppressed [ 483.605066][ T1177] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.765008][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.885068][ T1019] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 483.970004][T20907] bridge_slave_0: entered allmulticast mode [ 484.025128][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.061969][T20916] syzkaller1: entered promiscuous mode [ 484.081714][T20916] syzkaller1: entered allmulticast mode [ 484.165116][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.295053][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.483122][T20953] netlink: 'syz.2.4498': attribute type 1 has an invalid length. [ 484.542247][T20953] 8021q: adding VLAN 0 to HW filter on device bond6 [ 484.595572][T20955] bond6: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 484.610468][T20955] bond6: entered allmulticast mode [ 484.636609][ T1177] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.640296][T20960] openvswitch: netlink: Flow actions attr not present in new flow. [ 484.833760][T20971] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.851455][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 484.963625][T20975] 8021q: adding VLAN 0 to HW filter on device bond4 [ 484.970841][T20975] bridge0: port 3(bond4) entered blocking state [ 484.979508][T20975] bridge0: port 3(bond4) entered disabled state [ 484.986198][T20975] bond4: entered allmulticast mode [ 484.992969][T20975] bond4: entered promiscuous mode [ 485.019674][T20975] netlink: 'syz.3.4504': attribute type 39 has an invalid length. [ 485.027654][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 485.468912][T21003] nbd: must specify at least one socket [ 485.568345][ T1019] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.578174][ T1019] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.593753][ T1019] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 485.618460][ T1019] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 486.069749][T21034] vlan2: entered allmulticast mode [ 486.075283][T21034] bond0: entered allmulticast mode [ 486.080506][T21034] bond_slave_0: entered allmulticast mode [ 486.087408][T21034] bond_slave_1: entered allmulticast mode [ 486.109232][T21035] bond0: option arp_validate: invalid value (56710) [ 486.118042][T21035] bond0 (unregistering): Released all slaves [ 486.146376][T21031] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.301245][T21043] __nla_validate_parse: 18 callbacks suppressed [ 486.301265][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4532'. [ 486.323886][T21043] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4532'. [ 486.728854][T21082] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4543'. [ 486.748872][T21081] netlink: 'syz.3.4542': attribute type 1 has an invalid length. [ 486.773354][T21082] syzkaller1: entered promiscuous mode [ 486.786468][T21082] syzkaller1: entered allmulticast mode [ 487.057917][T21097] team0: entered promiscuous mode [ 487.070178][T21097] team_slave_0: entered promiscuous mode [ 487.092863][T21097] team_slave_1: entered promiscuous mode [ 487.152274][T21106] netlink: 'syz.0.4553': attribute type 1 has an invalid length. [ 487.192314][T21115] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4555'. [ 487.233258][T21097] team0: left promiscuous mode [ 487.236610][T21115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.238380][T21097] team_slave_0: left promiscuous mode [ 487.253771][T21097] team_slave_1: left promiscuous mode [ 487.370194][T21128] bond0: entered allmulticast mode [ 487.375695][T21128] bond_slave_0: entered allmulticast mode [ 487.382601][T21128] bond_slave_1: entered allmulticast mode [ 487.392369][T21130] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4559'. [ 487.563420][T21137] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4561'. [ 487.587365][T21139] tipc: Started in network mode [ 487.605263][T21139] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 487.619217][T21139] tipc: Enabling of bearer rejected, failed to enable media [ 487.651979][T21137] syzkaller1: entered promiscuous mode [ 487.661571][T21137] syzkaller1: entered allmulticast mode [ 487.857626][T21150] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4566'. [ 487.892258][T21154] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.4569'. [ 487.906430][T21154] veth0_to_bond: default FDB implementation only supports local addresses [ 487.921052][T21152] syzkaller0: entered promiscuous mode [ 487.921214][T21156] netlink: 'syz.2.4570': attribute type 1 has an invalid length. [ 487.927430][T21154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4569'. [ 487.943504][T21157] netlink: 'syz.2.4570': attribute type 1 has an invalid length. [ 487.951334][T21152] syzkaller0: entered allmulticast mode [ 487.953348][T21154] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 487.972444][T21158] FAULT_INJECTION: forcing a failure. [ 487.972444][T21158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 487.989854][T21158] CPU: 1 UID: 0 PID: 21158 Comm: syz.4.4567 Not tainted syzkaller #0 PREEMPT(full) [ 487.989877][T21158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 487.989886][T21158] Call Trace: [ 487.989894][T21158] [ 487.989900][T21158] dump_stack_lvl+0xe8/0x150 [ 487.989923][T21158] should_fail_ex+0x412/0x560 [ 487.989946][T21158] _copy_from_user+0x2d/0xb0 [ 487.989969][T21158] __copy_msghdr+0x3c5/0x5b0 [ 487.989991][T21158] ___sys_sendmsg+0x213/0x360 [ 487.990017][T21158] ? __lock_acquire+0x6b5/0x2cf0 [ 487.990039][T21158] ? __pfx____sys_sendmsg+0x10/0x10 [ 487.990087][T21158] ? __fget_files+0x2a/0x420 [ 487.990104][T21158] ? __fget_files+0x3a0/0x420 [ 487.990128][T21158] __x64_sys_sendmsg+0x1bd/0x2a0 [ 487.990151][T21158] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 487.990180][T21158] ? __pfx_ksys_write+0x10/0x10 [ 487.990209][T21158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.990227][T21158] do_syscall_64+0x15f/0xf80 [ 487.990247][T21158] ? trace_irq_disable+0x3b/0x140 [ 487.990270][T21158] ? clear_bhb_loop+0x40/0x90 [ 487.990289][T21158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.990304][T21158] RIP: 0033:0x7f2c0ed9ce59 [ 487.990319][T21158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 487.990333][T21158] RSP: 002b:00007f2c0fca1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 487.990349][T21158] RAX: ffffffffffffffda RBX: 00007f2c0f016090 RCX: 00007f2c0ed9ce59 [ 487.990359][T21158] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 487.990369][T21158] RBP: 00007f2c0fca1090 R08: 0000000000000000 R09: 0000000000000000 [ 487.990377][T21158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.990386][T21158] R13: 00007f2c0f016128 R14: 00007f2c0f016090 R15: 00007ffd86c399a8 [ 487.990410][T21158] [ 488.188272][ T4948] Bluetooth: hci2: command 0x0406 tx timeout [ 488.207494][T21157] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 488.452367][T21184] macsec2: entered promiscuous mode [ 488.463177][T21186] xt_hashlimit: max too large, truncated to 1048576 [ 488.636344][ T1019] net_ratelimit: 29 callbacks suppressed [ 488.636364][ T1019] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.786376][T21212] syz.3.4584 (21212) used obsolete PPPIOCDETACH ioctl [ 488.805521][ T1131] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 488.811168][ T29] audit: type=1107 audit(1778879673.641:12): pid=21208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='»´†â¾€ ЇíO Z\õ|;+Üjå´w¶‰ÖÉÆ¢g7YcˆA*z§îfsBT‚Ip8rP:® ÄìÙ‰‡¡Nñî ÓÐ’°Ä€ˆVgbǹÁú±¬y™ôhÚö7.&µt ìÕ7µÎ<”b' [ 488.906804][ T29] audit: type=1107 audit(1778879673.641:13): pid=21208 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='»´†â¾€ ЇíO Z\õ|;+Üjå´w¶‰ÖÉÆ¢g7YcˆA*z§îfsBT‚Ip8rP:® ÄìÙ‰‡¡Nñî ÓÐ’°Ä€ˆVgbǹÁú±¬y™ôhÚö7.&µt ìÕ7µÎ<”b' [ 489.065076][ T1019] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.186350][ T1019] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.268333][T21237] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4594'. [ 489.305055][ T1019] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.425413][ T1131] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.462338][T21248] netlink: 'syz.3.4598': attribute type 6 has an invalid length. [ 489.555050][ T1019] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.676560][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.797377][ T1131] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 489.945069][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 491.499623][T21190] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 491.844537][ T29] audit: type=1800 audit(1778879676.671:14): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4612" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308FB8B77B116CFEEF21C8BAE694916FB74B6941B8F47252DA410A66696805FC1F8DAA52C55B6A1E864CF6BBADA281A6B45D9ADE0C8033E51C746E082C8DB3E27EC9AFE18816901CBD61AA7E91D2AA964240A29137AF77E2BF543BFF39D65446692F2B820ADF72EB79952C60B5FC751E1746B0E3056A57CCCE1CAF923A271C1701479E32BEC2CB572CF94515BCEED293A5B54EA31FDD581 dev="tmpfs" ino=1276 res=0 errno=0 [ 492.030217][T21305] __nla_validate_parse: 4 callbacks suppressed [ 492.030253][T21305] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4614'. [ 492.084268][T21310] syzkaller1: entered promiscuous mode [ 492.104421][T21310] syzkaller1: entered allmulticast mode [ 492.138745][T21313] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4618'. [ 492.203342][T21313] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4618'. [ 492.535480][T21331] netlink: 'syz.2.4621': attribute type 1 has an invalid length. [ 492.670102][T21332] netlink: 'syz.0.4622': attribute type 1 has an invalid length. [ 492.688023][T21339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4624'. [ 492.724996][T21339] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4624'. [ 492.853450][T21332] bond4: entered promiscuous mode [ 492.860093][T21332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 492.962587][T21344] bridge0: entered promiscuous mode [ 492.984058][T21344] bridge0: entered allmulticast mode [ 493.016728][T21332] bond4: (slave bridge6): making interface the new active one [ 493.024322][T21332] bridge6: entered promiscuous mode [ 493.031923][T21332] bond4: (slave bridge6): Enslaving as an active interface with an up link [ 493.041688][T21353] veth0_to_bridge: entered promiscuous mode [ 493.050901][T21358] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4629'. [ 493.157473][T21358] syzkaller1: entered promiscuous mode [ 493.182410][T21358] syzkaller1: entered allmulticast mode [ 493.326002][T21366] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4628'. [ 493.398892][T21371] netlink: 'syz.0.4632': attribute type 3 has an invalid length. [ 493.438589][T21352] veth0_to_bridge: left promiscuous mode [ 493.513416][T21373] vlan3: entered promiscuous mode [ 493.531108][T21376] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 493.764062][T21388] netlink: 'syz.1.4640': attribute type 1 has an invalid length. [ 493.835656][ T1131] net_ratelimit: 28 callbacks suppressed [ 493.835677][ T1131] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 493.861631][T21398] netlink: zone id is out of range [ 493.868188][T21398] netlink: zone id is out of range [ 493.880492][T21398] netlink: zone id is out of range [ 493.889910][T21398] netlink: del zone limit has 4 unknown bytes [ 493.975423][ T1131] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 494.078694][T21405] syzkaller0: entered promiscuous mode [ 494.101982][T21405] syzkaller0: entered allmulticast mode [ 494.226300][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 494.358874][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 494.453535][T21425] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4650'. [ 494.467171][T21425] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4650'. [ 494.476988][T21425] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 494.510294][T21427] netlink: 'syz.2.4651': attribute type 1 has an invalid length. [ 494.518263][T21427] netlink: 96 bytes leftover after parsing attributes in process `syz.2.4651'. [ 494.525684][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 494.528835][T21427] netlink: 'syz.2.4651': attribute type 1 has an invalid length. [ 494.545300][T21427] netlink: 'syz.2.4651': attribute type 8 has an invalid length. [ 494.731854][T21434] netlink: 'syz.0.4654': attribute type 30 has an invalid length. [ 494.785607][T21434] bond5: option arp_missed_max: invalid value (0) [ 494.794580][T21434] bond5: option arp_missed_max: allowed values 1 - 255 [ 494.801684][T21438] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 494.822231][T21434] bond5 (unregistering): Released all slaves [ 494.886050][T21438] macvtap0: entered promiscuous mode [ 494.916905][T21438] macvtap0: entered allmulticast mode [ 494.926162][T21438] veth1_vlan: entered allmulticast mode [ 494.951705][T21442] macvtap2: entered promiscuous mode [ 494.957547][T21442] macvtap2: entered allmulticast mode [ 495.066129][T21447] FAULT_INJECTION: forcing a failure. [ 495.066129][T21447] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 495.088398][T21447] CPU: 0 UID: 0 PID: 21447 Comm: syz.1.4658 Not tainted syzkaller #0 PREEMPT(full) [ 495.088422][T21447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.088432][T21447] Call Trace: [ 495.088439][T21447] [ 495.088446][T21447] dump_stack_lvl+0xe8/0x150 [ 495.088469][T21447] should_fail_ex+0x412/0x560 [ 495.088495][T21447] prepare_alloc_pages+0x22a/0x650 [ 495.088526][T21447] __alloc_frozen_pages_noprof+0x12f/0x380 [ 495.088554][T21447] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 495.088581][T21447] ? __pfx_policy_nodemask+0x10/0x10 [ 495.088608][T21447] ? __lock_acquire+0x6b5/0x2cf0 [ 495.088629][T21447] alloc_pages_mpol+0x235/0x490 [ 495.088655][T21447] folio_alloc_mpol_noprof+0x39/0x160 [ 495.088681][T21447] vma_alloc_folio_noprof+0xe1/0x1e0 [ 495.088702][T21447] ? __lock_acquire+0x6b5/0x2cf0 [ 495.088720][T21447] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 495.088743][T21447] ? __pte_offset_map+0x29/0x240 [ 495.088763][T21447] ? __pte_offset_map+0x29/0x240 [ 495.088783][T21447] do_pte_missing+0x159d/0x33f0 [ 495.088815][T21447] ? handle_mm_fault+0xee/0x3170 [ 495.088838][T21447] handle_mm_fault+0x1bd9/0x3170 [ 495.088870][T21447] ? handle_mm_fault+0xee/0x3170 [ 495.088894][T21447] ? __pfx_handle_mm_fault+0x10/0x10 [ 495.088924][T21447] ? __lock_acquire+0x6b5/0x2cf0 [ 495.088945][T21447] ? lock_mm_and_find_vma+0xa7/0x340 [ 495.088968][T21447] do_user_addr_fault+0x75b/0x1340 [ 495.089000][T21447] exc_page_fault+0x6a/0xc0 [ 495.089024][T21447] asm_exc_page_fault+0x26/0x30 [ 495.089040][T21447] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 495.089058][T21447] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 495.089072][T21447] RSP: 0018:ffffc9001bf574d8 EFLAGS: 00050202 [ 495.089086][T21447] RAX: ffff88809ed1e001 RBX: ffff88809ed1e3e1 RCX: 0000000000000157 [ 495.089105][T21447] RDX: 0000000000000000 RSI: ffff88809ed1e421 RDI: 0000200000001000 [ 495.089115][T21447] RBP: ffffc9001bf57650 R08: ffff88809ed1e577 R09: 1ffff11013da3cae [ 495.089126][T21447] R10: dffffc0000000000 R11: ffffed1013da3caf R12: dffffc0000000000 [ 495.089136][T21447] R13: 0000000000000197 R14: 00007ffffffff000 R15: 0000200000001157 [ 495.089163][T21447] _copy_to_iter+0x60a/0x17d0 [ 495.089199][T21447] ? __pfx__copy_to_iter+0x10/0x10 [ 495.089218][T21447] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 495.089238][T21447] ? lockdep_hardirqs_on+0x7a/0x110 [ 495.089259][T21447] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 495.089278][T21447] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 495.089306][T21447] __skb_datagram_iter+0xf8/0x980 [ 495.089330][T21447] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 495.089359][T21447] skb_copy_datagram_iter+0xb5/0x240 [ 495.089386][T21447] netlink_recvmsg+0x2c3/0xa50 [ 495.089407][T21447] ? irqentry_exit+0x218/0x760 [ 495.089438][T21447] ? __pfx_netlink_recvmsg+0x10/0x10 [ 495.089466][T21447] ? sock_recvmsg+0x5e/0x1b0 [ 495.089485][T21447] ? __pfx_netlink_recvmsg+0x10/0x10 [ 495.089505][T21447] sock_recvmsg+0x172/0x1b0 [ 495.089525][T21447] ____sys_recvmsg+0x1e6/0x4a0 [ 495.089555][T21447] ? __pfx_____sys_recvmsg+0x10/0x10 [ 495.089591][T21447] ? import_iovec+0x73/0xa0 [ 495.089615][T21447] ___sys_recvmsg+0x215/0x590 [ 495.089642][T21447] ? __pfx____sys_recvmsg+0x10/0x10 [ 495.089668][T21447] ? __fget_files+0x2a/0x420 [ 495.089703][T21447] ? __fget_files+0x3a0/0x420 [ 495.089730][T21447] do_recvmmsg+0x334/0x800 [ 495.089760][T21447] ? __pfx_do_recvmmsg+0x10/0x10 [ 495.089793][T21447] ? _copy_from_user+0x94/0xb0 [ 495.089830][T21447] __x64_sys_recvmmsg+0x1b7/0x250 [ 495.089855][T21447] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 495.089884][T21447] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.089901][T21447] do_syscall_64+0x15f/0xf80 [ 495.089923][T21447] ? clear_bhb_loop+0x40/0x90 [ 495.089942][T21447] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.089957][T21447] RIP: 0033:0x7f23c9f9ce59 [ 495.089972][T21447] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 495.089984][T21447] RSP: 002b:00007f23cae18028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 495.090000][T21447] RAX: ffffffffffffffda RBX: 00007f23ca215fa0 RCX: 00007f23c9f9ce59 [ 495.090011][T21447] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 495.090021][T21447] RBP: 00007f23cae18090 R08: 0000200000003700 R09: 0000000000000000 [ 495.090031][T21447] R10: 0000000002040000 R11: 0000000000000246 R12: 0000000000000001 [ 495.090040][T21447] R13: 00007f23ca216038 R14: 00007f23ca215fa0 R15: 00007fff76ffed08 [ 495.090067][T21447] [ 497.277965][T21524] netlink: 'syz.0.4680': attribute type 2 has an invalid length. [ 497.287182][T21524] netlink: 'syz.0.4680': attribute type 2 has an invalid length. [ 499.143804][T21503] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 499.187665][ T35] net_ratelimit: 8 callbacks suppressed [ 499.187683][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.352649][T21537] netlink: 'syz.4.4684': attribute type 5 has an invalid length. [ 499.358059][T21541] openvswitch: netlink: Key type 305 is out of range max 32 [ 499.386926][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.525366][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.645395][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.751763][T21567] bond8: option arp_validate: invalid value (65497) [ 499.761351][T21567] bond8 (unregistering): Released all slaves [ 499.805716][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 499.947882][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 500.155368][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 500.263978][T21596] __nla_validate_parse: 4 callbacks suppressed [ 500.263996][T21596] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4703'. [ 500.279483][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 500.353220][T21601] netlink: 'syz.2.4706': attribute type 5 has an invalid length. [ 500.367593][T21601] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 500.383216][T21601] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 500.396360][T21601] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4706'. [ 500.626123][T21613] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4709'. [ 500.677134][T21613] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.813779][T21619] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4711'. [ 500.867324][T21623] netlink: 'syz.1.4714': attribute type 1 has an invalid length. [ 500.921631][T21626] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4714'. [ 501.038158][T21632] bond1: option arp_validate: invalid value (65514) [ 501.067373][T21632] bond1 (unregistering): Released all slaves [ 501.332345][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.522317][T21655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4725'. [ 501.729420][ T1113] wlan1: Trigger new scan to find an IBSS to join [ 502.186444][T21660] Bluetooth: MGMT ver 1.23 [ 502.945215][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4731'. [ 503.061110][T21672] mac80211_hwsim hwsim27 syzkaller0: entered promiscuous mode [ 503.100991][T21669] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4731'. [ 503.159884][T21672] mac80211_hwsim hwsim27 syzkaller0: entered allmulticast mode [ 504.235105][ T1113] net_ratelimit: 22 callbacks suppressed [ 504.235154][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 504.575275][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 504.746023][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 504.876904][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 505.125204][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 505.265279][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 505.431846][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 505.575242][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 505.706689][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 505.728342][ T1006] wlan1: Trigger new scan to find an IBSS to join [ 505.887140][ T1006] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 506.283550][T21729] No such timeout policy "syz1" [ 506.388479][T21728] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 506.699687][ T1131] wlan1: Creating new IBSS network, BSSID 00:8d:ff:ff:00:00 [ 508.891373][T21777] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4764'. [ 509.256297][ T12] net_ratelimit: 26 callbacks suppressed [ 509.256345][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 509.636837][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 509.750184][T21791] netlink: 'syz.2.4768': attribute type 1 has an invalid length. [ 510.430751][T21793] 8021q: adding VLAN 0 to HW filter on device bond9 [ 510.473652][T21793] bond8: (slave bond9): making interface the new active one [ 510.534572][T21793] bond8: (slave bond9): Enslaving as an active interface with an up link [ 511.034589][T21814] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4773'. [ 511.077684][T21791] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 511.128901][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 511.557677][ T36] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 511.775170][ T35] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 511.951536][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 512.109458][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 512.256709][ T1113] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 512.444181][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 512.505405][T21838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 512.579946][T21841] No such timeout policy "syz1" [ 512.642338][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 513.549653][T21849] bridge5: entered promiscuous mode [ 513.609018][T21849] bridge5: entered allmulticast mode [ 513.865876][T21865] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 2, id = 0 [ 514.608501][T21878] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 514.886752][T21868] syzkaller0: entered promiscuous mode [ 514.938225][T21868] syzkaller0: entered allmulticast mode [ 515.565762][ T12] net_ratelimit: 7 callbacks suppressed [ 515.565813][ T12] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 515.581784][T21901] No such timeout policy "syz1" [ 515.704198][T21890] netlink: 'syz.1.4792': attribute type 21 has an invalid length. [ 515.888197][T21890] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4792'. [ 516.690196][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.698119][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 516.704158][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.714566][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.714921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.715638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 516.728954][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.739530][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 516.739906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 519.726446][T21916] Bluetooth: hci1: command 0x0419 tx timeout [ 520.575134][ C0] net_ratelimit: 14392 callbacks suppressed [ 520.575153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.575188][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.581438][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.582087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 520.595571][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.605924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.606279][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.606929][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 520.620323][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 520.631085][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.584971][ C1] net_ratelimit: 18100 callbacks suppressed [ 525.585004][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.585074][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 525.592236][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.603231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.603587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.604241][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 525.617834][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.628393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.628756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 525.629511][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 527.064915][ C0] sched: DL replenish lagged too much [ 530.595217][ C1] net_ratelimit: 18505 callbacks suppressed [ 530.595251][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.595534][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 530.602398][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.613570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.613938][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.614675][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 530.627989][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.638744][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.639140][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 530.639814][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 535.605174][ C1] net_ratelimit: 18708 callbacks suppressed [ 535.605208][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.605416][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 535.612349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.623424][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.623762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.624396][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 535.624686][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.624956][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 535.625441][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 535.625782][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.615030][ C0] net_ratelimit: 20078 callbacks suppressed [ 540.615049][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.615123][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.621345][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.621968][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 540.635438][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.645790][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.646133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.646758][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 540.660348][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 540.671012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.625062][ C0] net_ratelimit: 20127 callbacks suppressed [ 545.625082][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 545.625096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.625639][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.631364][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.631695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.645455][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.656193][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 545.656533][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.670041][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 545.680867][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.634956][ C0] net_ratelimit: 20305 callbacks suppressed [ 550.634978][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 550.635088][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.641283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.641601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.654974][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.666070][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 550.666585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.680368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.690837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 550.691651][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 555.645347][ C0] net_ratelimit: 20334 callbacks suppressed [ 555.645367][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 555.645365][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.651644][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.651973][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.665581][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.676595][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 555.676927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.690457][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.701215][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 555.701872][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 560.655285][ C1] net_ratelimit: 20064 callbacks suppressed [ 560.655319][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.655421][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 560.662368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.673639][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.673978][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.674613][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 560.687780][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.698570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.698908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 560.699584][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 565.665097][ C0] net_ratelimit: 19905 callbacks suppressed [ 565.665104][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.665118][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 565.665660][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.671399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.671729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.685225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.696232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 565.696576][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.710304][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 565.720825][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.675078][ C0] net_ratelimit: 20129 callbacks suppressed [ 570.675099][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 570.675163][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.681385][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.681704][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.695404][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.706329][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 570.706657][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.706969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.720245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 570.731206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 575.684975][ C0] net_ratelimit: 20404 callbacks suppressed [ 575.684995][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.685311][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.691580][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 575.705273][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.715799][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.716134][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.716750][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 575.729955][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.740716][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 575.741055][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.694941][ C0] net_ratelimit: 20108 callbacks suppressed [ 580.694961][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.696299][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.701536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 580.715246][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.725801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.726137][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.726766][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 580.740282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.750703][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 580.751039][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.705060][ C0] net_ratelimit: 19617 callbacks suppressed [ 585.705081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.705224][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.711724][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 585.725333][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.735870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.736206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.736838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 585.750211][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.760920][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 585.761259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.715085][ C0] net_ratelimit: 20183 callbacks suppressed [ 590.715105][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.715190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.721426][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.722078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 590.735475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.745997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.746328][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.746950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 590.760416][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 590.770944][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.725024][ C0] net_ratelimit: 19524 callbacks suppressed [ 595.725046][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.725055][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.731620][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 595.745324][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.755963][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.756294][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.756908][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 595.770279][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.780841][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 595.781169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.735086][ C0] net_ratelimit: 19842 callbacks suppressed [ 600.735105][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.735295][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.741401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.742021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 600.755386][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.765794][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.766129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.766765][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 600.780428][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 600.790977][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.745275][ C0] net_ratelimit: 20134 callbacks suppressed [ 605.745296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 605.745351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.751562][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.751896][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.765361][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.776509][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 605.776859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.777176][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.790562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 605.801609][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 610.754943][ C1] net_ratelimit: 20213 callbacks suppressed [ 610.754978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.755077][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 610.762187][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.773239][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.773586][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.774206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 610.787647][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.798263][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.798605][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 610.799312][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 615.765056][ C0] net_ratelimit: 18796 callbacks suppressed [ 615.765078][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.765289][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.771346][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.772237][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 615.785120][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.795942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.796277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.797191][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 615.810496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 615.821052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.774916][ C1] net_ratelimit: 17980 callbacks suppressed [ 620.774949][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.775184][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 620.781995][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.793149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.793541][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.794459][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 620.807645][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.818216][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.818561][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 620.819519][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 625.785013][ C0] net_ratelimit: 17422 callbacks suppressed [ 625.785032][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.785056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.791918][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 625.805368][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.816000][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.816339][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.817254][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 625.830350][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.840890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 625.841232][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.424866][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 627.431844][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P21914/3:b..l P21919/1:b..l [ 627.441537][ C0] rcu: (detected by 0, t=10503 jiffies, g=98281, q=1704 ncpus=2) [ 627.449359][ C0] task:syz.2.4798 state:R running task stack:28136 pid:21919 tgid:21914 ppid:15584 task_flags:0x400040 flags:0x00080000 [ 627.464017][ C0] Call Trace: [ 627.467311][ C0] [ 627.470252][ C0] __schedule+0x1821/0x5740 [ 627.474781][ C0] ? __update_page_owner_handle+0x5a/0x570 [ 627.480606][ C0] ? __update_page_owner_handle+0x5a/0x570 [ 627.486441][ C0] ? __pfx___schedule+0x10/0x10 [ 627.491323][ C0] preempt_schedule_irq+0x4d/0xa0 [ 627.496357][ C0] irqentry_exit+0x14f/0x760 [ 627.500961][ C0] ? trace_irq_disable+0x3b/0x140 [ 627.506007][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 627.511992][ C0] RIP: 0010:unwind_next_frame+0x1118/0x2550 [ 627.517903][ C0] Code: 4d 89 fc 74 08 4c 89 ef e8 45 00 ba 00 49 89 5d 00 49 8d bc 24 98 00 00 00 e8 94 20 00 00 48 89 c3 48 8b 44 24 58 80 3c 28 00 <4c> 8b 7c 24 78 74 08 4c 89 ff e8 19 00 ba 00 49 89 1f 48 8b 44 24 [ 627.537515][ C0] RSP: 0018:ffffc900046c7818 EFLAGS: 00000246 [ 627.543590][ C0] RAX: 1ffff920008d8f24 RBX: 00007f8cc4fcbf98 RCX: 1ffff920008d8f01 [ 627.551560][ C0] RDX: ffffffff90bc0cfe RSI: 0000000000000003 RDI: ffffc900046c7fe0 [ 627.559534][ C0] RBP: dffffc0000000000 R08: 0000000000000022 R09: ffffffff8e95cda0 [ 627.567520][ C0] R10: ffffc900046c7938 R11: ffffffff81b0efc0 R12: ffffc900046c7f48 [ 627.575499][ C0] R13: ffffc900046c7930 R14: ffffc900046c78e8 R15: ffffc900046c7f48 [ 627.583485][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 627.589665][ C0] ? unwind_next_frame+0x110c/0x2550 [ 627.594969][ C0] ? unwind_next_frame+0xa6/0x2550 [ 627.600091][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.606170][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 627.612340][ C0] arch_stack_walk+0x11b/0x150 [ 627.617124][ C0] stack_trace_save+0xa9/0x100 [ 627.621907][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 627.627308][ C0] save_stack+0x122/0x230 [ 627.631653][ C0] ? __pfx_save_stack+0x10/0x10 [ 627.636508][ C0] ? __free_frozen_pages+0xbc7/0xd30 [ 627.641801][ C0] ? __slab_free+0x274/0x2c0 [ 627.646401][ C0] ? qlist_free_all+0x99/0x100 [ 627.651174][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 627.656823][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 627.661868][ C0] ? kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 627.667857][ C0] ? sock_alloc_inode+0x2c/0x190 [ 627.672795][ C0] ? alloc_inode+0x6a/0x1b0 [ 627.677301][ C0] ? __sock_create+0x12d/0x9d0 [ 627.682068][ C0] ? __sys_socket+0xd6/0x1b0 [ 627.686661][ C0] ? __x64_sys_socket+0x7a/0x90 [ 627.691516][ C0] ? do_syscall_64+0x15f/0xf80 [ 627.696288][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.702367][ C0] ? page_ext_put+0x97/0xc0 [ 627.706886][ C0] __reset_page_owner+0x71/0x1f0 [ 627.711839][ C0] __free_frozen_pages+0xbc7/0xd30 [ 627.716970][ C0] __slab_free+0x274/0x2c0 [ 627.721402][ C0] ? qlist_free_all+0x8e/0x100 [ 627.726183][ C0] qlist_free_all+0x99/0x100 [ 627.730780][ C0] ? sock_alloc_inode+0x2c/0x190 [ 627.735728][ C0] kasan_quarantine_reduce+0x148/0x160 [ 627.741206][ C0] __kasan_slab_alloc+0x22/0x80 [ 627.746070][ C0] kmem_cache_alloc_lru_noprof+0x2b8/0x640 [ 627.751884][ C0] ? sock_alloc_inode+0x2c/0x190 [ 627.756829][ C0] ? kmem_cache_alloc_lru_noprof+0x15c/0x640 [ 627.762825][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 627.768203][ C0] sock_alloc_inode+0x2c/0x190 [ 627.772976][ C0] ? __pfx_sock_alloc_inode+0x10/0x10 [ 627.778352][ C0] alloc_inode+0x6a/0x1b0 [ 627.782690][ C0] __sock_create+0x12d/0x9d0 [ 627.787304][ C0] __sys_socket+0xd6/0x1b0 [ 627.791736][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.797806][ C0] __x64_sys_socket+0x7a/0x90 [ 627.802493][ C0] do_syscall_64+0x15f/0xf80 [ 627.807099][ C0] ? trace_irq_disable+0x3b/0x140 [ 627.812137][ C0] ? clear_bhb_loop+0x40/0x90 [ 627.816827][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.822731][ C0] RIP: 0033:0x7f8cc6d9e6c7 [ 627.827157][ C0] RSP: 002b:00007f8cc4fcbf98 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 627.835573][ C0] RAX: ffffffffffffffda RBX: 00007f8cc7016090 RCX: 00007f8cc6d9e6c7 [ 627.843523][ C0] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 627.851469][ C0] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 627.859415][ C0] R10: 0000200000002600 R11: 0000000000000286 R12: 0000000000000000 [ 627.867366][ C0] R13: 00007f8cc7016128 R14: 00007f8cc7016090 R15: 00007ffda727ebe8 [ 627.875324][ C0] [ 627.878321][ C0] task:syz.2.4798 state:R running task stack:24264 pid:21914 tgid:21914 ppid:15584 task_flags:0x400040 flags:0x00080000 [ 627.891765][ C0] Call Trace: [ 627.895022][ C0] [ 627.897934][ C0] __schedule+0x1821/0x5740 [ 627.902433][ C0] ? trace_irq_disable+0x3b/0x140 [ 627.907440][ C0] ? __pfx___schedule+0x10/0x10 [ 627.912275][ C0] preempt_schedule_irq+0x4d/0xa0 [ 627.917277][ C0] irqentry_exit+0x14f/0x760 [ 627.921847][ C0] ? trace_irq_disable+0x3b/0x140 [ 627.926853][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 627.932813][ C0] RIP: 0010:preempt_schedule_thunk+0x0/0x30 [ 627.938687][ C0] Code: 29 92 00 48 c7 c0 20 5a c0 8b e9 8b 1d 78 0a cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 48 89 e5 57 56 52 51 50 41 50 41 51 41 52 41 53 e8 aa 5c 76 0a [ 627.958273][ C0] RSP: 0000:ffffc90004c2f928 EFLAGS: 00000246 [ 627.964316][ C0] RAX: 0000000000000000 RBX: ffff88802932ec60 RCX: 0000000000000000 [ 627.972267][ C0] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff [ 627.980229][ C0] RBP: ffffc90004c2fb30 R08: ffff88802932ec63 R09: 1ffff11005265d8c [ 627.988177][ C0] R10: dffffc0000000000 R11: ffffed1005265d8d R12: 0000000000000100 [ 627.996126][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000000 [ 628.004083][ C0] _raw_spin_unlock+0x3f/0x50 [ 628.008743][ C0] filemap_map_pages+0x1a2a/0x2100 [ 628.013843][ C0] ? filemap_map_pages+0x1e6/0x2100 [ 628.019037][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 628.024477][ C0] ? __pte_offset_map+0x29/0x240 [ 628.029392][ C0] ? __pfx_filemap_map_pages+0x10/0x10 [ 628.034828][ C0] ? do_pte_missing+0x125b/0x33f0 [ 628.039827][ C0] do_pte_missing+0x1f38/0x33f0 [ 628.044665][ C0] ? handle_mm_fault+0xee/0x3170 [ 628.049578][ C0] handle_mm_fault+0x1bd9/0x3170 [ 628.054496][ C0] ? handle_mm_fault+0xee/0x3170 [ 628.059410][ C0] ? __pfx_handle_mm_fault+0x10/0x10 [ 628.064668][ C0] ? lock_vma_under_rcu+0x45a/0x500 [ 628.069854][ C0] ? irqentry_exit+0x218/0x760 [ 628.074636][ C0] do_user_addr_fault+0xa73/0x1340 [ 628.079732][ C0] ? rcu_is_watching+0x15/0xb0 [ 628.084475][ C0] ? trace_page_fault_user+0x84/0x1e0 [ 628.089824][ C0] exc_page_fault+0x6a/0xc0 [ 628.094307][ C0] asm_exc_page_fault+0x26/0x30 [ 628.099132][ C0] RIP: 0033:0x7f8cc6c72780 [ 628.103523][ C0] RSP: 002b:00007ffda727ed08 EFLAGS: 00010246 [ 628.109562][ C0] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 0000000000000000 [ 628.117506][ C0] RDX: 0000000000000000 RSI: 000000000000001c RDI: 0000200000000190 [ 628.125454][ C0] RBP: 00007ffda727ee30 R08: 0000000000000000 R09: 0000000000000000 [ 628.133401][ C0] R10: 000000000000001c R11: 0000000000000000 R12: 0000000000000002 [ 628.141346][ C0] R13: 00007f8cc701618c R14: 000000000007e232 R15: 00007ffda727ee50 [ 628.149303][ C0] [ 628.152309][ C0] rcu: rcu_preempt kthread starved for 5884 jiffies! g98281 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 628.163413][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 628.173384][ C0] rcu: RCU grace-period kthread stack dump: [ 628.179260][ C0] task:rcu_preempt state:R running task stack:27968 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 628.192755][ C0] Call Trace: [ 628.196049][ C0] [ 628.199004][ C0] __schedule+0x1821/0x5740 [ 628.203532][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 628.208499][ C0] ? irqentry_exit+0x218/0x760 [ 628.213277][ C0] ? trace_irq_disable+0x3b/0x140 [ 628.218335][ C0] ? __pfx___schedule+0x10/0x10 [ 628.223206][ C0] ? schedule+0x90/0x360 [ 628.227460][ C0] schedule+0x164/0x360 [ 628.231631][ C0] schedule_timeout+0x158/0x2c0 [ 628.236493][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 628.241965][ C0] ? __pfx_process_timeout+0x10/0x10 [ 628.247263][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 628.253082][ C0] ? prepare_to_swait_event+0x340/0x370 [ 628.258648][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 628.263509][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 628.268727][ C0] ? rcu_gp_init+0x1315/0x15b0 [ 628.273496][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 628.279658][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 628.284951][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 628.290162][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 628.295982][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 628.300580][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 628.305776][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 628.311591][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 628.316535][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 628.321571][ C0] kthread+0x389/0x470 [ 628.325651][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 628.330857][ C0] ? __pfx_kthread+0x10/0x10 [ 628.335458][ C0] ret_from_fork+0x514/0xb70 [ 628.340058][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 628.345176][ C0] ? __switch_to+0xc79/0x1410 [ 628.349874][ C0] ? __pfx_kthread+0x10/0x10 [ 628.354472][ C0] ret_from_fork_asm+0x1a/0x30 [ 628.359256][ C0] [ 628.362279][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 628.368615][ C0] Sending NMI from CPU 0 to CPUs 1: [ 628.373830][ C1] NMI backtrace for cpu 1 [ 628.373845][ C1] CPU: 1 UID: 0 PID: 1019 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 628.373862][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 628.373873][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 628.373900][ C1] RIP: 0010:match_held_lock+0x3/0xb0 [ 628.373924][ C1] Code: b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f c3 cc cc cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 56 53 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 5f 48 8b [ 628.373944][ C1] RSP: 0000:ffffc90000a08368 EFLAGS: 00000097 [ 628.373957][ C1] RAX: 0000000000000001 RBX: ffff8880277b4910 RCX: 0000000080010101 [ 628.373967][ C1] RDX: ffff8880277b3d80 RSI: ffff8880b8728298 RDI: ffff8880277b4910 [ 628.373978][ C1] RBP: 00000000ffffffff R08: ffffffff9a714b83 R09: 1ffffffff34e2970 [ 628.373989][ C1] R10: dffffc0000000000 R11: fffffbfff34e2971 R12: 0000000000000046 [ 628.374000][ C1] R13: ffff8880277b3d80 R14: ffff8880b8728298 R15: 0000000000000000 [ 628.374010][ C1] FS: 0000000000000000(0000) GS:ffff88812538a000(0000) knlGS:0000000000000000 [ 628.374023][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 628.374034][ C1] CR2: 00007f8cc6c72780 CR3: 0000000074eee000 CR4: 00000000003526f0 [ 628.374047][ C1] Call Trace: [ 628.374053][ C1] [ 628.374060][ C1] lock_is_held_type+0x89/0x150 [ 628.374083][ C1] __remove_hrtimer+0x82/0x3e0 [ 628.374106][ C1] __hrtimer_run_queues+0x299/0xa20 [ 628.374132][ C1] hrtimer_interrupt+0x44b/0x950 [ 628.374160][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 628.374180][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 628.374200][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 628.374216][ C1] RIP: 0010:skb_ext_add+0x595/0x8f0 [ 628.374236][ C1] Code: eb 05 e8 6e 10 4d f8 48 8b 7c 24 20 e8 24 07 00 00 4c 8b 6c 24 18 4d 85 ed 0f 85 4e fb ff ff e8 51 10 4d f8 31 c0 48 83 c4 48 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7c 04 33 02 cc 89 d1 80 e1 07 38 [ 628.374250][ C1] RSP: 0000:ffffc90000a086e8 EFLAGS: 00000286 [ 628.374261][ C1] RAX: ffff888052497e10 RBX: ffff888052497e04 RCX: ffff8880277b3d80 [ 628.374273][ C1] RDX: ffff888052497e00 RSI: 0000000000000000 RDI: 0000000000000006 [ 628.374282][ C1] RBP: 0000000000000000 R08: ffff888052497e03 R09: 1ffff1100a492fc0 [ 628.374293][ C1] R10: dffffc0000000000 R11: ffffed100a492fc1 R12: ffff888052497e00 [ 628.374304][ C1] R13: ffff888052497e00 R14: 0000000000000006 R15: dffffc0000000000 [ 628.374323][ C1] br_nf_pre_routing_ipv6+0x12e/0x6f0 [ 628.374339][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 628.374356][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 628.374381][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 628.374402][ C1] br_handle_frame+0x1277/0x1510 [ 628.374429][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 628.374452][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 628.374475][ C1] ? __netif_receive_skb_core+0x94f/0x3170 [ 628.374494][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 628.374516][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 628.374537][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 628.374555][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 628.374571][ C1] ? ip6_rcv_finish+0x265/0x280 [ 628.374593][ C1] ? NF_HOOK+0x336/0x3c0 [ 628.374617][ C1] ? process_backlog+0x3eb/0x1950 [ 628.374637][ C1] ? process_backlog+0x3eb/0x1950 [ 628.374653][ C1] ? process_backlog+0x3eb/0x1950 [ 628.374670][ C1] ? process_backlog+0x3eb/0x1950 [ 628.374686][ C1] process_backlog+0x76d/0x1950 [ 628.374710][ C1] __napi_poll+0xae/0x340 [ 628.374724][ C1] ? skb_defer_free_flush+0x233/0x260 [ 628.374741][ C1] net_rx_action+0x627/0xf70 [ 628.374763][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 628.374779][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 628.374804][ C1] ? net_tx_action+0x5b6/0xc30 [ 628.374823][ C1] ? net_tx_action+0xbfb/0xc30 [ 628.374841][ C1] handle_softirqs+0x22a/0x840 [ 628.374857][ C1] ? __irq_exit_rcu+0xca/0x220 [ 628.374875][ C1] __irq_exit_rcu+0xca/0x220 [ 628.374889][ C1] irq_exit_rcu+0x9/0x30 [ 628.374903][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 628.374923][ C1] [ 628.374928][ C1] [ 628.374933][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 628.374955][ C1] RIP: 0010:unwind_next_frame+0x2b4/0x2550 [ 628.374974][ C1] Code: 00 00 fc ff df 0f 84 17 04 00 00 4a 8d 14 ad 04 41 43 90 45 29 e8 4a 8d 1c 82 48 83 c3 fc 49 89 d5 48 39 da 0f 86 1c 02 00 00 <49> 29 d5 49 c1 fd 02 4a 8d 04 6d 00 00 00 00 4c 01 e8 48 8d 14 46 [ 628.374987][ C1] RSP: 0000:ffffc900051a7418 EFLAGS: 00000202 [ 628.374998][ C1] RAX: ffffffff90493fcc RBX: ffffffff90493fd0 RCX: ffffffff90493fd4 [ 628.375009][ C1] RDX: ffffffff90493fb0 RSI: ffffffff90c50aee RDI: ffffffff8c28af00 [ 628.375020][ C1] RBP: ffffffff90493fd4 R08: 0000000000000009 R09: ffffffff8e95cda0 [ 628.375030][ C1] R10: ffffc900051a7548 R11: fffff52000a34eb5 R12: ffffffff81771cd6 [ 628.375041][ C1] R13: ffffffff90493fd0 R14: ffffc900051a7548 R15: ffffffff90493fd0 [ 628.375053][ C1] ? __unwind_start+0xf6/0x760 [ 628.375075][ C1] ? unwind_next_frame+0xd5/0x2550 [ 628.375094][ C1] ? cfg80211_wiphy_work+0x2cf/0x460 [ 628.375114][ C1] ? unwind_next_frame+0xa6/0x2550 [ 628.375131][ C1] ? kthread+0x389/0x470 [ 628.375149][ C1] ? get_stack_info_noinstr+0x1b/0x130 [ 628.375164][ C1] ? __unwind_start+0xf7/0x760 [ 628.375184][ C1] __unwind_start+0x5b8/0x760 [ 628.375202][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 628.375225][ C1] arch_stack_walk+0xe3/0x150 [ 628.375244][ C1] ? __unwind_start+0xf7/0x760 [ 628.375263][ C1] stack_trace_save+0xa9/0x100 [ 628.375284][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 628.375309][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 628.375324][ C1] kasan_save_track+0x3e/0x80 [ 628.375363][ C1] kasan_save_free_info+0x46/0x50 [ 628.375379][ C1] __kasan_slab_free+0x5c/0x80 [ 628.375399][ C1] kfree+0x1c5/0x640 [ 628.375415][ C1] ? skb_release_data+0x828/0xa60 [ 628.375437][ C1] skb_release_data+0x828/0xa60 [ 628.375460][ C1] __kfree_skb+0x5d/0x210 [ 628.375480][ C1] ieee80211_iface_work+0xbdb/0x1380 [ 628.375501][ C1] cfg80211_wiphy_work+0x2cf/0x460 [ 628.375522][ C1] ? process_scheduled_works+0xa70/0x1860 [ 628.375537][ C1] process_scheduled_works+0xb5d/0x1860 [ 628.375563][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 628.375580][ C1] ? assign_work+0x3d5/0x5e0 [ 628.375596][ C1] worker_thread+0xa53/0xfc0 [ 628.375621][ C1] kthread+0x389/0x470 [ 628.375639][ C1] ? __pfx_worker_thread+0x10/0x10 [ 628.375653][ C1] ? __pfx_kthread+0x10/0x10 [ 628.375672][ C1] ret_from_fork+0x514/0xb70 [ 628.375688][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 628.375704][ C1] ? __switch_to+0xc79/0x1410 [ 628.375726][ C1] ? __pfx_kthread+0x10/0x10 [ 628.375745][ C1] ret_from_fork_asm+0x1a/0x30 [ 628.375768][ C1] [ 630.825128][ C1] net_ratelimit: 16364 callbacks suppressed [ 630.825148][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.825151][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.826069][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 630.831388][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.843429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.855315][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.867316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.889479][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 630.891668][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 630.903018][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 634.767875][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.875356][ C0] net_ratelimit: 22167 callbacks suppressed [ 635.875377][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 635.885174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.893625][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.905665][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.917569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.929376][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.942081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8a:77:cd:c8:4b:8c, vlan:0) [ 635.953294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.965337][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 635.977130][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)