last executing test programs: 49.626010032s ago: executing program 4 (id=13212): r0 = socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="09090000000000000000010000000000000009410000004c00180000006062726f6164636173740d6c696e6b00000c000000000000000000000000000000000000000000000000000000000000000000000000000000000060"], 0x68}}, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$RDS_GET_MR(0xffffffffffffffff, 0x114, 0x2, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', 0x0}) 49.512524517s ago: executing program 4 (id=13215): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x7ffffffe, 0x1, 'syz0\x00'}) 49.369321042s ago: executing program 4 (id=13219): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a4c0000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d103"], 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x20, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x26ffc86098878bdf}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmp}]}, 0x20}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x8090}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000380)=@deltaction={0x208, 0x31, 0x300, 0x70bd27, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd72e}}]}, @TCA_ACT_TAB={0x78, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa0}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0x14, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8001}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x64, 0x1, [{0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}]}, @TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xff}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0x10, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffff63b}}]}]}, 0x208}, 0x1, 0x0, 0x0, 0x40}, 0x24000000) 49.019469596s ago: executing program 0 (id=13224): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400000006000a006b983800080001"], 0x24}, 0x1, 0x0, 0x0, 0x40080c0}, 0x8000) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007910510000ae000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 48.823252217s ago: executing program 0 (id=13227): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@ipv4_delrule={0x40, 0x21, 0x400, 0x70bd26, 0x25dfdbfe, {0x2, 0x14, 0x20, 0x0, 0x5, 0x0, 0x0, 0x8, 0x14}, [@FRA_SRC={0x8, 0x2, @broadcast}, @FRA_GENERIC_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x4}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@gettfilter={0x3c, 0x2e, 0x100, 0x70bc25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x10, 0xfff1}, {0xe, 0xf}, {0x8, 0xffff}}, [{0x8, 0xb, 0x5}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xc0e}]}, 0x3c}}, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x8}}) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="280000001d00010021bdf000fedbdf2507", @ANYRES32], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x24040004) (async) r3 = socket(0x10, 0x2, 0x0) (async) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) (async) sendto$packet(r3, &(0x7f00000002c0)="16674161a34308a682a291c107f1246b5542ef037429906b5615a962c553067ca376d712b8d4dae74995ffa3d9e08f15add03a27f3011197defdbe6a60174eb5f74fb33d0c8fc638b89b90d7cf01883791d177dcd0f2c2bd333c2d2941587c9729e97f9dac68d2944b3218", 0x6b, 0x4088, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @loopback}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x9}]}, 0x40}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 46.074091053s ago: executing program 4 (id=13228): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x400, 0x4) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, 0x0, &(0x7f00000000c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c", 0x32}], 0x1, 0x0, 0x0, 0x8000}, 0x0) recvmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000280)=""/48, 0x30}], 0x1}, 0x400060df) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x39, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x200008, 0x5, 0x409}, 0x10, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r1], 0x4c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 46.025493263s ago: executing program 4 (id=13229): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000600)={r0, r0, 0x2008, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x7ffffffe, 0x1, 'syz0\x00'}) 45.96861518s ago: executing program 4 (id=13230): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4, 0x5}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x2, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x440c4) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) syz_emit_ethernet(0x613, &(0x7f0000000380)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x9, 0x605, 0x67, 0x0, 0x9, 0x1, 0x0, @remote, @remote}, @echo={0x8, 0x0, 0x0, 0xd, 0x6d63, "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"}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x20, r7, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}]}, 0x20}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) recvfrom(r8, 0x0, 0x0, 0x40002062, 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 45.283405759s ago: executing program 0 (id=13234): ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000180)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0xffff, 0x9}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xbf, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f0000000180)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0xa}, {0xffff, 0x9}, {0xffff, 0x9}}, [@TCA_RATE={0x6, 0x5, {0xbf, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) 43.718945871s ago: executing program 3 (id=13243): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x6, 0x4, 0x8, 0x6}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000fbffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000580)={r2, 0x0, 0x0}, 0x10) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff6c01000000000000000000483a00fe88000000000000000000000000000f0d9ab88a9ae11b886bff03ca1d4ddb010903000000000000000000000000000102009078000000086098a35000000000fe800000000000000000000000000002fc0100000000000000000000000000001100000000000000"], 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) bind$tipc(r3, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x0, 0x5, 0x2a}, 0x2c) 43.714105867s ago: executing program 1 (id=13245): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x6, &(0x7f0000000000), 0x4) getsockopt$inet6_opts(r2, 0x29, 0x37, 0x0, &(0x7f0000000040)) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x8, 0x2, @multicast1}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x2, 0x3, 0x2, {0xa, 0x4e21, 0x800, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}}}, 0x32) ioctl$PPPIOCGCHAN(r1, 0x80047437, 0x0) 43.525068677s ago: executing program 1 (id=13246): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000100)=ANY=[@ANYBLOB="18080000d0ff00000000000080000100851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000003c080000000000001800000000000000000000000000000095000000000000009500000000000000a32c3d8bc33170cd5d87a462adf49729733e70acb46c910314a4ac17c923a14b6252261a3a9d80d1dfc446508028c1120aeb07fe75c881"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) 43.446979351s ago: executing program 3 (id=13247): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=@newtfilter={0x30, 0x2c, 0xd27, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5, 0x9}, {0x0, 0x1}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006cdbf80789f3f947dd000280080003"], 0xe4}}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 43.345911979s ago: executing program 1 (id=13248): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000"], 0xf0}}, 0x0) 43.276891177s ago: executing program 3 (id=13249): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 43.166297287s ago: executing program 1 (id=13250): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "001863718e9bf703"}}}}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEV(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x20, r3, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x1ca5220560dca020}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) connect$rds(r6, &(0x7f00000001c0)={0x2, 0x0, @empty}, 0x10) r7 = socket(0x2, 0x80805, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001280)={0x1c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4750a8f0842baf26}, 0x408c0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x6c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x6, 0xffff, 0xffffffffffffffff, 0x7, 0xf}, 0xa}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) getsockopt$inet_int(r7, 0x0, 0x22, &(0x7f0000000100), &(0x7f0000000140)=0x4) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 43.091428718s ago: executing program 3 (id=13251): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) accept4$inet6(r1, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2004c050) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "0000000000000208", "5171bb74cd3660dab9e200", "d8a024e5", "20000926000200"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffc00, 0x0, 0x0, 0x0, 0x3}, [@alu={0x4, 0x1, 0x9, 0x0, 0x0, 0x1}]}, 0x0, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25e0000001000000000000000000000000ff020000000000000000000000000001000400004e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r4], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback, 0x3}, 0x1c) 42.89696593s ago: executing program 1 (id=13252): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, 0x0) 42.813060417s ago: executing program 0 (id=13253): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x10, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x800}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf9}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x24004040}, 0x8800) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000001c0)={r0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_KEY={0x24, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x3}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "9b6e2aae77"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, 'W^:QB'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2}, 0x40004) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, r4, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0x14, 0x34, @random="79429842141f5ff19ddf785d93ef60cd"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000081}, 0x40000) r5 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f00000004c0)={0xf8, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x58}, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0xdec}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x800}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3ff}, @NL80211_ATTR_VENDOR_DATA={0x94, 0xc5, "1329832cb0e57bbccfc5dc002345421c2c6a16928653cb2197e9b09646aeeb97d8e6345e021de8e01b104a91ba8f07ed02376d7006472c806f3a16cd651353c746dda687e99f837f5e24b025002f7a69848f20022907358e87a10717b7e38f0ba0120f4c30f482d7d6a65a423ea15893b2087fc5d4d48267e202624971ef10067758617229cae9f35f3868bb9f57e427"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x9}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x3}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x3}]}, 0xf8}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000680), r3) sendmsg$BATADV_CMD_SET_VLAN(r6, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x68, r8, 0xa, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000800}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_SCAN_REQ(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DURATION={0x5, 0x15, 0x66}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0xc0}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x24000050) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r9) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000980)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f00000009c0)={0x6c, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xd53a3f27f5f7390f}, @NL802154_ATTR_CCA_MODE={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x440c0}, 0x808) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000b00)={'dvmrp0\x00', &(0x7f0000000ac0)=@ethtool_ringparam={0x11, 0x7, 0x9, 0x2, 0x4, 0x6, 0x6, 0x10b, 0xb112}}) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000b80), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f0000000bc0)=0x0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r9, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x3c, r13, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'batadv\x00'}, @NFC_ATTR_FIRMWARE_NAME={0x7, 0x14, '\n:\\'}, @NFC_ATTR_FIRMWARE_NAME={0xb, 0x14, 'dvmrp0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8010) r15 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r15, 0x0, 0x2e, &(0x7f0000000cc0)={0x800, {{0x2, 0x4e23, @broadcast}}, {{0x2, 0x4e21, @multicast2}}}, 0x108) r16 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000f40)={'syztnl0\x00', &(0x7f0000000e40)={'ip_vti0\x00', r2, 0x10, 0x7800, 0x3, 0xff, {{0x2b, 0x4, 0x1, 0x0, 0xac, 0x64, 0x0, 0x5, 0x29, 0x0, @multicast2, @empty, {[@timestamp_addr={0x44, 0x14, 0x32, 0x1, 0x2, [{@rand_addr=0x64010102, 0x8}, {@multicast2, 0x8001}]}, @rr={0x7, 0xb, 0xb1, [@multicast2, @broadcast]}, @timestamp_prespec={0x44, 0x3c, 0x5d, 0x3, 0x1, [{@broadcast, 0xd}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@local, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@rand_addr=0x64010102, 0x1}, {@private=0xa010102, 0x1a92}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1}]}, @cipso={0x86, 0x3d, 0xffffffffffffffff, [{0x0, 0x5, "fdfff9"}, {0x0, 0x5, "9bf976"}, {0x6, 0xa, "f69c02f8ce846226"}, {0x5, 0xa, "7286a5bc2c9e94f4"}, {0x2, 0x9, "915a6d9036959b"}, {0x5, 0x2}, {0x1, 0xa, "caa489acf75316b8"}, {0x4, 0x4, "4aa5"}]}]}}}}}) sendmsg$nl_route(r16, &(0x7f0000001000)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)=@bridge_delneigh={0x2c, 0x1d, 0x20, 0x70bd27, 0x25dfdbfd, {0x1c, 0x0, 0x0, r17, 0x1, 0x45, 0x9}, [@NDA_IFINDEX={0x8, 0x8, r2}, @NDA_PROTOCOL={0x5, 0xc, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x43c08e99eb5d17f6}, 0x40) 42.77416375s ago: executing program 2 (id=13254): socket$inet6(0xa, 0x2, 0x3a) syz_emit_ethernet(0x7e, &(0x7f0000000280)={@local, @random="15687efec3d2", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f81fcb", 0x48, 0x3a, 0x0, @private0, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "4aa1d3", 0x0, 0x0, 0x0, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, [@routing={0x3c}, @srh={0x2f}, @dstopts]}}}}}}}, 0x0) 42.680211599s ago: executing program 1 (id=13255): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000011c0)={0x0, 0x8, 0x1, 0x101}, &(0x7f0000001200)=0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3, 0xa, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193dfb6c575963f86dd606712e900320400000000000000eaebfd2607eef2", 0x27}, {&(0x7f0000000100)="051ae2ff0d8c60c2730369b7", 0xc}, {&(0x7f0000000040)="37a8a6c41e646a566a4ce01f972bef63842ee3b291da39d1977010", 0x1b}], 0x3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYRES8=r3], 0x2c}, 0x1, 0x0, 0x0, 0x150}, 0x20008040) sendmsg$IPSET_CMD_LIST(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000b00)=ANY=[@ANYBLOB="28000000070605000000000000000000050000050500010007"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x20040) 42.530857714s ago: executing program 2 (id=13256): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f00000006c0)={0x130, 0x13, 0x1, 0x70bd2a, 0x25dfdbfb, {0x20}, [@typed={0x4, 0xdd}, @nested={0x14, 0x123, 0x0, 0x1, [@typed={0x4, 0xf5}, @generic, @nested={0x4, 0x122}, @nested={0x4, 0x6e}, @nested={0x4, 0x61}]}, @generic="f2265af53bd047c0163716a18b73e71dfc5f00942f25db044bb5c1d621a250521101848b7ce5a8a289a612ae7d2dd684119f94e191264d42f7", @typed={0x14, 0x13b, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="93f89def015462cd15507949f5803729878f1e565f3ca806fd86ba771390646e84716bc4a2630326e033db5428c0760c5b271e97400fc576293affd682e5eff5b1edf0d7eaac6ef1b541704a523fff130fa759a7e37d1459646ad8198fb86cfd7fc33a20faa2fa90e7b7b27cbfa64f2f14b5423abcd073f92a60cd7c39e58bc87bcd8465dc800cb57af92a18ba1ab6565cede47b46573e75f126cba2be935c03b063ea32872f166397c89f166f232ae02a83e919"]}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0x4000) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x29) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x4, 0x840, 0x0, {}, {0x77359400}, {}, 0x1, @canfd={{}, 0x80, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18fd964df81213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) recvfrom$inet(r0, &(0x7f0000000380)=""/118, 0x76, 0x140, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292e154c7beef915d564c90c2004b0f25d41ecb7588de", 0x21) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000500)="005a4df78f5dc730979fc2a8e34032376589b18a67cb15c4", 0x18}, {0x0}, {0x0}], 0x3, &(0x7f0000001340)=ANY=[@ANYBLOB='H\x00\x00\x00'], 0x48}}], 0x1, 0x42080) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000007110bb000000000095"], &(0x7f0000000400)='syzkaller\x00'}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) 42.410835086s ago: executing program 2 (id=13257): bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmmsg$alg(r0, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0958730", 0x4c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd", 0x59}], 0x2}], 0x1, 0x40800) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000340)=""/83, 0x53}], 0x2}, 0x2000) r1 = socket$inet(0x2, 0x2, 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000000c0)='wg1\x00', 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r4}, 0x38) 42.196383377s ago: executing program 0 (id=13258): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@fwd={0x2, 0x0, 0x0, 0x12}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x1}]}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x40}, 0x20) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r4, 0x8918, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000009c0)={'vxcan0\x00', 0x0}) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e22, 0x3, @local, 0x40}, 0x1c) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r6}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a00)={0x1, 0xb08, 0x0, {0x77359400}, {0x0, 0x2710}, {}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "ef1d62ee7e923b0ad9cda5b28dd4753620a2f0271768a8284c18a4e2b5e44dc77098b18f14710a44213608ec503db52d42f1a78c97322f4ae4c8dc89cf2b1440"}}, 0x80}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendmsg$can_bcm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB='\x00\x00\x00\x00A'], 0x80}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r7, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x8c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20040890}, 0xc0000) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000340)=[{r1, 0x20}, {r8, 0x402}, {r1, 0x249}], 0x3, 0xd) sendmmsg$inet6(r0, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xc400}], 0x7}}], 0x44, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4, 0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 42.083401629s ago: executing program 3 (id=13259): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r2, @ANYBLOB="0a0034000202020202dfff9ecf937a2ac4b61614"], 0x30}}, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(r0, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, 0x0, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x8814) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) ioctl$XFS_IOC_GOINGDOWN(0xffffffffffffffff, 0x8004587d, &(0x7f0000000000)=0x44) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) syz_80211_inject_frame(&(0x7f00000004c0), &(0x7f0000000200)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @initial, {0x0, 0x2}}, 0x9, 0x3, @default, @val={0x1, 0x4b, [{0x1}, {0x2, 0x1}, {0x3, 0x1}]}, @void}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r4, 0x1, 0x70bd2b, 0x0, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffffd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x240048d4}, 0x4000004) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000580)={0x1b0, r4, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65addf04}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6070000}]}, @TIPC_NLA_NODE={0x4}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}]}, @TIPC_NLA_NODE={0xf4, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "01eb301f1de72e27a67e11d5d519ffd571a129b2fe607e9d"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x8}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0x94, 0x3, "ca4d4337598b1c2913965c45f8189d1c5855c973a08cea53d61f57c24c08bbde854d5268d86ace7c5fb428885f8d0c162d0d5665720aad1c70d149b003220c49618a30da441fdd06640e8a654caf6ab2654e402f1d61c83194a2ff59451f2d4e19dc74b14068ff60bf24fb7de2d5692b7abb466c4cdb5f04fd5fd74bf758d3a28f6302c40304c75811d2a3b3c7f7f3e1"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x38b2}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1a1}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffc00}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20008084}, 0x4008001) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) 41.871711102s ago: executing program 2 (id=13260): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000"], 0xf0}}, 0x0) 41.772658915s ago: executing program 2 (id=13261): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0xfe, 0x4, 0x0, 0x1, 0x20000000}}, 0x1c}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) (fail_nth: 1) 41.400161678s ago: executing program 0 (id=13262): syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x9, 0x4, 0x0, 0x1, 0x34, 0x65, 0x0, 0x4, 0x21, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0xc}, {[@generic={0x83, 0x8, "a464e654cfb7"}, @cipso={0x86, 0x6, 0x2}]}}, {{0x4e21, 0x4e22, 0x4, 0x1, 0x5, 0x0, 0x0, 0x4, 0x0, "9cc7e8", 0x3, "94125f"}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000c00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03080000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021440000000c0a09030000000000000000070000000900020073797a31000000000900010073797a300000000018000380140000800800034000000002050006405200000014000000110001"], 0xc8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x4, 0x80000000, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xffe0}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x5}]}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r1 = socket(0x14, 0x2, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x61d8, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x406c080) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x5) readv(0xffffffffffffffff, &(0x7f0000000600)=[{&(0x7f0000000380)=""/152, 0x98}, {&(0x7f0000000440)=""/29, 0x1d}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/160, 0xa0}], 0x4) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000009110aa000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) sendmsg$NL802154_CMD_SET_TX_POWER(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="01ad27bd7000fedbdf25080097ec08000300", @ANYRES32=r6, @ANYBLOB="febc30719d7ff1c89c52475bb40b8a5ba54719b1e5839c80035372cde1f104eadbd4ba36a731535b7c9d48b1462c2a6891dddfe063fb52241f38ba170fd157ec2319d64d9d61d17eaa"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4140) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) 40.601676006s ago: executing program 2 (id=13263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x18) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r5, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, &(0x7f0000000140)={0x7, 0x5, 0x0, 0xbc, 0x0, [0x3, 0x3, 0x4000, 0x80000000]}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x24, r8, 0x5, 0x2000000, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0xd}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x20) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r12}, @IFLA_MASTER={0x8, 0xa, r12}]}, 0x4c}}, 0x0) 0s ago: executing program 3 (id=13264): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) recvfrom(r0, &(0x7f0000000600)=""/231, 0xe7, 0x60, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@name={0x1e, 0x2, 0x3, {{0x43, 0x4}, 0x2}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="80400100000001000c00400000000100", @ANYRES32, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r2 = socket$inet6(0xa, 0x80001, 0x0) r3 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80800) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000002c0)={{r2, &(0x7f0000000000)='@+]\x1e\x00', 0x14001, &(0x7f0000000080)={@align=0x8, {0x5, 0x6, 0x4b7f, 0x2}}, 0x1, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000140)=0xd}, 0x0, &(0x7f0000000240)}) sendmmsg$alg(r3, &(0x7f0000000e00)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)="9aad78a91b8febd523b119fb30117449bdc48b276896e992ae8bbb34567e900132f00a7b8fc98a945c88a0515968660fa9886e1d5c326744f77991af9c5e2d21499c779bdeb2c66f0c085cf9d84d11b2f3b80d16f459023f77af33c3ec90f91666001c03f0ab6ea96072de24bfd34672fceee06a7396a496f361c7a2f06d25d34d8917577811ee9f8a488005486c6de20b281444512fce761d4b91469a341709bd28c5713ebbb61e8a7f239d4026a1ee2d1be30baa37e53191cd0af606f0086ca96c50f613ce903a4478735eddd25ecda48edb5a26bf444ae04b", 0xda}, {&(0x7f00000001c0)="131291456c30b06eb0", 0x9}], 0x2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x168, 0x4000}, {0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000240)="fc8b840e80aaf0cc156fcf90dfe3978c151e06dc5e1e3671d8a1b97a4186b0d74a2d0e1ac2986724bc97cd4f51c82810aaab", 0x32}, {&(0x7f0000000340)="63f5963c3f57a794d5e0bd3e033029ae89c4218c366cfbd70a1e0c", 0x1b}, {&(0x7f0000000640)="0dbc5a4c5706fdaca8324e86bc52ab2d41066a78b41334cd9e0d3322e322ce", 0x1f}, {&(0x7f0000000680)="59925adc92ff415cf67ee80e184b5dbbbca3d191b1155f072ffaf101f2239cab2c68c618177a4f9a4a02808c4e41cc2f96ee6fefbc0191362ab4ccd5b3e7822cd248ceaab14e9479d7e9950ee55ff482ac587425c33d45d7d56b84a91afbf21e0112b28a051f11045cb59e81042b8ab1c84c1af071b48d60432cbffd330691f1c07befce53de738872ef67d1", 0x8c}, {&(0x7f0000000740)="771aa9a20612d282425277bd46ca1bbf53f91e4ea9e8ce9c356ebff2b2d46250bda9dcd97aecb44bc0aeb76045", 0x2d}, {&(0x7f0000000780)="84264153c52421447a01ec2116b8c3c039fe98c6bbca26ed3f37746354fb38afbea183e0b9f93b314368d300b85c8e01d4866b3b9883e28b060d640a5f742cdddd7ca0c376789e55be00dead8bc6ddc17fd1927b5c398324a021103bac787dc10400c3", 0x63}], 0x6, &(0x7f0000000880)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18}], 0x30, 0x4001}, {0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f00000008c0)="a62188af53a4ac8c9744a99ebdb9b180e4b87435557367dd64bba44489d07a27a9a205a4a1ab5d6381cfc82df7abe0d7b920feeb42db1b26acb105", 0x3b}, {&(0x7f0000000900)="dd0ebd12455ccb79226b42de2529283538d5ff66fb9baa59f7efd0c77db30d3e222e746bbe494f00b9789d1ed66f8380cb985ed450003bb700d8e1023d8e9e944fc667df0c91ff1976fd90d0b20e6c2fafb9613cbbd6b36e8f4a7f7851d6289a5c119e1060e5ffba91d1630c15066971eed80ab95aaf6d984f898a1b15daf4e81fbe39ec200bf744dd51fe2311b6e4af386d8eef7544a05c5a43c7f01ee6108959d41cf9257568cfbbb3", 0xaa}, {&(0x7f00000009c0)="80df4f3edda22b4bc9214fe321aec67d24777cd1444848271b5f0952ab1fbe52d2ec87c1f27cad8b006466d8792aa477cb81e08821c07111078f3105661ec0b1232c98e8c584645fa875335d72c389fec31ff99e0373654d66b15af2957647fb07f082f81fdaeda833ccba3524fd7808daf6fde91f572c39446a550a4584499e67491c238222f71816bd74c3f6bd74f341f32d9ac78b7cd662b2c5bc20e9e65ff32c20987b5118a759acf08a2a8bf014dfcd6962b64b52fc37c681c16dbe07eb413ef9807d3f152a098706cc6454a65e8dc4af3b0a985db378fe17801d26bf89d4cda7bd810ff695fce47231919dbed1c8172aaa34d11315b6", 0xf9}, {&(0x7f0000000ac0)="7b8842f20a0726411d9456f8be3b2499e2a1204f6ee4334a778d61cdcea9db491e53f12e512530d95f461ccf9356f78d343626cbb7dc4bfbeecf59292cc3dbde77cfe8a456790ca666e34042a382eb6b898bbfe2c25ed8106587896423562ae64ce5c9f4c6e144332ad0436c4fbbb0d27f9ac1772f1eb5bd9f40629dfcd77846cc", 0x81}, {&(0x7f0000000b80)="c693a87ecdd7cc618eb7d2326f01288e2737c443cd2428", 0x17}, {&(0x7f0000000bc0)="1ad845c685a2ebedd30454e78967183ecdec69d1ee55559d0a2e568d977572d2cf5ccc09b01a3c14053f621c47eea790be7191343bbbf87f6127f4e9fd5e7909417e69832a15e20d8f4899dfe85dee2ffeef6120644e28681c6d24611b8895155a6fc1614fcc3ef8c7e30c718de9c82426b001f3d9191aa46438df2df53bf778cdf6fdeeb627b9dfd20c5431e7103b67f864d43968cc233944ef124c6627c7d833498c5848dcb06715b98add449dc9891e1ea668edcfb4dfd2e1c35f08b5ab723d9f", 0xc2}, {&(0x7f0000000cc0)="40c1119db6b291d2528673394c941263ee6c43b3887b72f85ecc590e5cf13ded9364b6dfa7394ccc630162b0f17171e07298a61cca3e3ee8d3f1bfbd385130b34bbac01f89c83184d010ee1f8d9bcec549c2e48bd778b934f01973316362b1ccf646d7962a094336cb412d07f35a45128a113afd25968e558b58fd9b03f5dbd2a20515a3e3", 0x85}], 0x7, 0x0, 0x0, 0x10}], 0x3, 0x2) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000380)=r4, 0x4) getsockopt$bt_hci(r2, 0x0, 0x70ff1d8149895e3a, &(0x7f0000000040)=""/51, &(0x7f0000d23000)=0x33) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x30, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x0, 0x101, 0x1, 0x8}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20000800) kernel console output (not intermixed with test programs): link_sendmsg+0x10/0x10 [ 855.087364][T12709] ____sys_sendmsg+0xa68/0xad0 [ 855.087398][T12709] ? __pfx_____sys_sendmsg+0x10/0x10 [ 855.087432][T12709] ? import_iovec+0x73/0xa0 [ 855.087460][T12709] ___sys_sendmsg+0x2a5/0x360 [ 855.087497][T12709] ? __pfx____sys_sendmsg+0x10/0x10 [ 855.087555][T12709] ? __fget_files+0x2a/0x420 [ 855.087579][T12709] ? __fget_files+0x3a0/0x420 [ 855.087613][T12709] __x64_sys_sendmsg+0x1bd/0x2a0 [ 855.087641][T12709] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 855.087676][T12709] ? __pfx_ksys_write+0x10/0x10 [ 855.087706][T12709] do_syscall_64+0x14d/0xf80 [ 855.087727][T12709] ? trace_irq_disable+0x3b/0x150 [ 855.087751][T12709] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.087770][T12709] ? clear_bhb_loop+0x40/0x90 [ 855.087792][T12709] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 855.087810][T12709] RIP: 0033:0x7f7f4019c799 [ 855.087827][T12709] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 855.087842][T12709] RSP: 002b:00007f7f410a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 855.087862][T12709] RAX: ffffffffffffffda RBX: 00007f7f40415fa0 RCX: 00007f7f4019c799 [ 855.087875][T12709] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 855.087887][T12709] RBP: 00007f7f410a8090 R08: 0000000000000000 R09: 0000000000000000 [ 855.087899][T12709] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 855.087910][T12709] R13: 00007f7f40416038 R14: 00007f7f40415fa0 R15: 00007ffd99fcffe8 [ 855.087938][T12709] [ 855.447284][T12718] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12471'. [ 855.695113][T12727] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 855.714631][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5400 ms [ 855.722672][ C1] lec:lec_tx_timeout: lec0 [ 855.735735][T12729] bond6: option miimon: invalid value (18446744073709551585) [ 855.753620][T12729] bond6: option miimon: allowed values 0 - 2147483647 [ 855.775569][T12729] bond6 (unregistering): Released all slaves [ 855.987293][T12745] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12479'. [ 856.091493][T12749] FAULT_INJECTION: forcing a failure. [ 856.091493][T12749] name failslab, interval 1, probability 0, space 0, times 0 [ 856.109156][T12749] CPU: 1 UID: 0 PID: 12749 Comm: syz.4.12482 Not tainted syzkaller #0 PREEMPT(full) [ 856.109181][T12749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 856.109192][T12749] Call Trace: [ 856.109199][T12749] [ 856.109206][T12749] dump_stack_lvl+0xe8/0x150 [ 856.109236][T12749] should_fail_ex+0x412/0x560 [ 856.109262][T12749] should_failslab+0xa8/0x100 [ 856.109283][T12749] ? skb_clone+0x212/0x3a0 [ 856.109308][T12749] kmem_cache_alloc_noprof+0x87/0x650 [ 856.109333][T12749] ? __netlink_lookup+0xc6/0x8b0 [ 856.109359][T12749] skb_clone+0x212/0x3a0 [ 856.109404][T12749] __netlink_deliver_tap+0x404/0x850 [ 856.109435][T12749] ? netlink_deliver_tap+0x2e/0x1b0 [ 856.109458][T12749] netlink_deliver_tap+0x19c/0x1b0 [ 856.109482][T12749] netlink_unicast+0x7e3/0x9b0 [ 856.109510][T12749] ? __pfx_netlink_unicast+0x10/0x10 [ 856.109530][T12749] ? netlink_sendmsg+0x650/0xb40 [ 856.109550][T12749] ? skb_put+0x11b/0x210 [ 856.109576][T12749] netlink_sendmsg+0x813/0xb40 [ 856.109605][T12749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.109629][T12749] ? aa_sock_msg_perm+0xf1/0x1b0 [ 856.109659][T12749] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 856.109680][T12749] ? __pfx_netlink_sendmsg+0x10/0x10 [ 856.109700][T12749] ____sys_sendmsg+0xa68/0xad0 [ 856.109734][T12749] ? __pfx_____sys_sendmsg+0x10/0x10 [ 856.109768][T12749] ? import_iovec+0x73/0xa0 [ 856.109794][T12749] ___sys_sendmsg+0x2a5/0x360 [ 856.109825][T12749] ? __pfx____sys_sendmsg+0x10/0x10 [ 856.109885][T12749] ? __fget_files+0x2a/0x420 [ 856.109910][T12749] ? __fget_files+0x3a0/0x420 [ 856.109944][T12749] __x64_sys_sendmsg+0x1bd/0x2a0 [ 856.109972][T12749] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 856.110007][T12749] ? __pfx_ksys_write+0x10/0x10 [ 856.110038][T12749] do_syscall_64+0x14d/0xf80 [ 856.110055][T12749] ? trace_irq_disable+0x3b/0x150 [ 856.110080][T12749] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.110099][T12749] ? clear_bhb_loop+0x40/0x90 [ 856.110121][T12749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.110139][T12749] RIP: 0033:0x7f8ff5f9c799 [ 856.110161][T12749] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.110177][T12749] RSP: 002b:00007f8ff6e6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 856.110196][T12749] RAX: ffffffffffffffda RBX: 00007f8ff6215fa0 RCX: 00007f8ff5f9c799 [ 856.110208][T12749] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 856.110219][T12749] RBP: 00007f8ff6e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 856.110230][T12749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.110241][T12749] R13: 00007f8ff6216038 R14: 00007f8ff6215fa0 R15: 00007ffc2fe7f008 [ 856.110271][T12749] [ 856.717399][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12488'. [ 856.769530][T12768] bridge0: port 3(syz_tun) entered blocking state [ 856.792077][T12768] bridge0: port 3(syz_tun) entered disabled state [ 856.801687][T12768] syz_tun: entered allmulticast mode [ 856.809748][T12768] syz_tun: entered promiscuous mode [ 856.830042][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12489'. [ 856.848171][T31516] veth0_to_bond: left promiscuous mode [ 856.989322][T12776] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12492'. [ 857.079684][T12778] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.086890][T12778] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.094450][T12778] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.101544][T12778] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.115596][T12778] bridge0: left allmulticast mode [ 857.152419][T12790] netlink: 'syz.4.12496': attribute type 1 has an invalid length. [ 857.196328][T12790] 8021q: adding VLAN 0 to HW filter on device bond6 [ 857.212489][T12780] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12494'. [ 857.251424][T12790] bond6: (slave veth11): Enslaving as an active interface with a down link [ 857.262212][T12780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12494'. [ 857.317335][T12790] bond5: (slave veth0_to_bond): Releasing active interface [ 857.328594][T12790] veth0_to_bond: left promiscuous mode [ 857.345657][T12790] bond6: (slave veth0_to_bond): making interface the new active one [ 857.351219][T12801] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12498'. [ 857.355716][T12790] veth0_to_bond: entered promiscuous mode [ 857.369108][T12790] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 857.384929][T12801] openvswitch: netlink: Unknown nsh attribute 0 [ 857.507533][T12809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12502'. [ 857.901746][T12839] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 857.938020][T12840] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 857.940525][T12843] netlink: 'syz.4.12513': attribute type 9 has an invalid length. [ 858.332972][T12869] openvswitch: netlink: Message has 16 unknown bytes. [ 858.422381][T12871] IPv6: sit1: Disabled Multicast RS [ 858.430630][T12871] sit1: entered allmulticast mode [ 858.436739][T12875] netlink: 'syz.3.12527': attribute type 33 has an invalid length. [ 858.535045][T12875] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 858.549465][T12875] bond6 (unregistering): Released all slaves [ 858.960296][T12911] netlink: 'syz.0.12537': attribute type 21 has an invalid length. [ 859.125380][T12918] openvswitch: netlink: Unknown nsh attribute 0 [ 859.551390][T12941] openvswitch: netlink: Message has 16 unknown bytes. [ 859.781372][T12953] netlink: 'syz.0.12554': attribute type 23 has an invalid length. [ 860.105811][T12972] __nla_validate_parse: 10 callbacks suppressed [ 860.105829][T12972] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12562'. [ 860.110196][T12974] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 860.253551][T12979] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 860.288147][T12984] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.12566'. [ 860.335270][T12979] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 860.416970][T12991] gtp0: entered promiscuous mode [ 860.431709][T12991] gtp0: entered allmulticast mode [ 860.650969][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12579'. [ 860.836236][T13025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12582'. [ 860.861610][T13025] openvswitch: netlink: Message has 16 unknown bytes. [ 861.032681][T13039] netlink: 404 bytes leftover after parsing attributes in process `syz.4.12587'. [ 861.046583][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12587'. [ 861.056402][T13039] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12587'. [ 861.068504][T13039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12587'. [ 861.099682][T13043] IPVS: set_ctl: invalid protocol: 33 100.1.1.0:20002 [ 861.122674][T13033] netlink: 212176 bytes leftover after parsing attributes in process `syz.3.12585'. [ 861.137156][T13046] netlink: 'syz.1.12592': attribute type 1 has an invalid length. [ 861.212920][T13049] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12594'. [ 861.250481][T13050] netlink: 'syz.4.12594': attribute type 13 has an invalid length. [ 861.290980][T13049] netlink: 'syz.4.12594': attribute type 13 has an invalid length. [ 861.310106][T13050] netlink: 'syz.4.12594': attribute type 13 has an invalid length. [ 861.321297][T13049] netlink: 'syz.4.12594': attribute type 13 has an invalid length. [ 861.324868][T13059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 861.380436][T13064] x_tables: duplicate underflow at hook 2 [ 861.534051][T13081] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 861.557956][T13078] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 862.251323][T13128] validate_nla: 2 callbacks suppressed [ 862.251342][T13128] netlink: 'syz.2.12617': attribute type 1 has an invalid length. [ 862.352308][T13137] openvswitch: netlink: Unknown nsh attribute 0 [ 862.581574][T13150] netlink: 'syz.1.12624': attribute type 16 has an invalid length. [ 862.614564][T13150] netlink: 'syz.1.12624': attribute type 17 has an invalid length. [ 862.708351][T13150] bridge0: left allmulticast mode [ 862.720420][T13150] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.730659][T13150] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.746059][T13150] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 862.812476][T13157] bridge4: entered promiscuous mode [ 862.818041][T13157] bridge4: entered allmulticast mode [ 862.827659][T13157] team0: Port device bridge4 added [ 862.837685][T13166] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 862.880796][T13174] syzkaller0: entered promiscuous mode [ 862.912806][T13174] syzkaller0: entered allmulticast mode [ 862.998314][T13180] openvswitch: netlink: Unknown nsh attribute 0 [ 863.004093][T13182] netlink: 'syz.2.12632': attribute type 1 has an invalid length. [ 863.369684][T13211] netlink: 'syz.2.12644': attribute type 4 has an invalid length. [ 863.525142][T13222] netlink: 'syz.3.12649': attribute type 11 has an invalid length. [ 863.661883][T13235] netlink: 'syz.0.12654': attribute type 1 has an invalid length. [ 863.918567][T13251] nbd: must specify at least one socket [ 864.057777][T13255] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 864.399714][T13284] FAULT_INJECTION: forcing a failure. [ 864.399714][T13284] name failslab, interval 1, probability 0, space 0, times 0 [ 864.427507][T13282] tipc: Enabled bearer , priority 0 [ 864.441658][T13284] CPU: 1 UID: 0 PID: 13284 Comm: syz.4.12670 Not tainted syzkaller #0 PREEMPT(full) [ 864.441682][T13284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 864.441693][T13284] Call Trace: [ 864.441700][T13284] [ 864.441708][T13284] dump_stack_lvl+0xe8/0x150 [ 864.441737][T13284] should_fail_ex+0x412/0x560 [ 864.441763][T13284] should_failslab+0xa8/0x100 [ 864.441785][T13284] __kmalloc_noprof+0xe8/0x760 [ 864.441814][T13284] ? seg6_local_build_state+0x153/0xe00 [ 864.441840][T13284] seg6_local_build_state+0x153/0xe00 [ 864.441859][T13284] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 864.441883][T13284] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 864.441905][T13284] ? __pfx_seg6_local_build_state+0x10/0x10 [ 864.441935][T13284] ? lwtunnel_build_state+0xe2/0x4c0 [ 864.441962][T13284] lwtunnel_build_state+0x384/0x4c0 [ 864.441989][T13284] ? lwtunnel_build_state+0xe2/0x4c0 [ 864.442018][T13284] fib_nh_common_init+0x131/0x3d0 [ 864.442036][T13284] ? in6_dev_get+0x1a/0x290 [ 864.442061][T13284] ? __pfx_fib_nh_common_init+0x10/0x10 [ 864.442078][T13284] ? in6_dev_get+0x1a/0x290 [ 864.442104][T13284] fib6_nh_init+0x15de/0x1fd0 [ 864.442127][T13284] ? __pfx_stack_trace_save+0x10/0x10 [ 864.442159][T13284] ? __pfx_fib6_nh_init+0x10/0x10 [ 864.442180][T13284] ? __kasan_kmalloc+0x93/0xb0 [ 864.442196][T13284] ? __kmalloc_noprof+0x35c/0x760 [ 864.442211][T13284] ? fib6_info_alloc+0x30/0xf0 [ 864.442231][T13284] ? ip6_route_info_create+0x142/0x860 [ 864.442253][T13284] ? ip6_route_add+0x49/0x1b0 [ 864.442275][T13284] ? inet6_rtm_newroute+0x268/0x19e0 [ 864.442293][T13284] ? rtnetlink_rcv_msg+0x7d5/0xbe0 [ 864.442312][T13284] ? netlink_rcv_skb+0x232/0x4b0 [ 864.442329][T13284] ? netlink_unicast+0x80f/0x9b0 [ 864.442344][T13284] ? netlink_sendmsg+0x813/0xb40 [ 864.442363][T13284] ? ____sys_sendmsg+0xa68/0xad0 [ 864.442386][T13284] ? ___sys_sendmsg+0x2a5/0x360 [ 864.442407][T13284] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 864.442429][T13284] ? do_syscall_64+0x14d/0xf80 [ 864.442444][T13284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.442495][T13284] ? ip_fib_metrics_init+0x421/0x710 [ 864.442520][T13284] ? trace_kmalloc+0x2a/0x110 [ 864.442540][T13284] ip6_route_info_create_nh+0x16a/0xad0 [ 864.442569][T13284] ? __pfx_ip6_route_info_create_nh+0x10/0x10 [ 864.442595][T13284] ? ip6_route_info_create+0x508/0x860 [ 864.442623][T13284] ip6_route_add+0x6e/0x1b0 [ 864.442650][T13284] inet6_rtm_newroute+0x268/0x19e0 [ 864.442679][T13284] ? kasan_quarantine_put+0xbb/0x1f0 [ 864.442696][T13284] ? lockdep_hardirqs_on+0x7a/0x110 [ 864.442726][T13284] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 864.442747][T13284] ? kmem_cache_free+0x187/0x630 [ 864.442764][T13284] ? nlmon_xmit+0xb0/0x100 [ 864.442808][T13284] ? __lock_acquire+0x6b5/0x2cf0 [ 864.442837][T13284] ? __local_bh_enable_ip+0xd0/0x130 [ 864.442861][T13284] ? lockdep_hardirqs_on+0x7a/0x110 [ 864.442914][T13284] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 864.442935][T13284] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 864.442961][T13284] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 864.442983][T13284] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 864.443003][T13284] ? ref_tracker_free+0x693/0x840 [ 864.443024][T13284] ? __copy_skb_header+0xa3/0x4a0 [ 864.443051][T13284] ? __pfx_ref_tracker_free+0x10/0x10 [ 864.443083][T13284] netlink_rcv_skb+0x232/0x4b0 [ 864.443106][T13284] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 864.443131][T13284] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 864.443163][T13284] ? netlink_deliver_tap+0x2e/0x1b0 [ 864.443193][T13284] netlink_unicast+0x80f/0x9b0 [ 864.443221][T13284] ? __pfx_netlink_unicast+0x10/0x10 [ 864.443243][T13284] ? netlink_sendmsg+0x650/0xb40 [ 864.443263][T13284] ? skb_put+0x11b/0x210 [ 864.443290][T13284] netlink_sendmsg+0x813/0xb40 [ 864.443321][T13284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.443346][T13284] ? aa_sock_msg_perm+0xf1/0x1b0 [ 864.443370][T13284] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 864.443391][T13284] ? __pfx_netlink_sendmsg+0x10/0x10 [ 864.443412][T13284] ____sys_sendmsg+0xa68/0xad0 [ 864.443446][T13284] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.443481][T13284] ? import_iovec+0x73/0xa0 [ 864.443510][T13284] ___sys_sendmsg+0x2a5/0x360 [ 864.443541][T13284] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.443595][T13284] ? __fget_files+0x2a/0x420 [ 864.443619][T13284] ? __fget_files+0x3a0/0x420 [ 864.443653][T13284] __x64_sys_sendmsg+0x1bd/0x2a0 [ 864.443681][T13284] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 864.443716][T13284] ? __pfx_ksys_write+0x10/0x10 [ 864.443747][T13284] do_syscall_64+0x14d/0xf80 [ 864.443763][T13284] ? trace_irq_disable+0x3b/0x150 [ 864.443788][T13284] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.443812][T13284] ? clear_bhb_loop+0x40/0x90 [ 864.443835][T13284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.443853][T13284] RIP: 0033:0x7f8ff5f9c799 [ 864.443871][T13284] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 864.443887][T13284] RSP: 002b:00007f8ff6e6e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 864.443907][T13284] RAX: ffffffffffffffda RBX: 00007f8ff6215fa0 RCX: 00007f8ff5f9c799 [ 864.443921][T13284] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000005 [ 864.443933][T13284] RBP: 00007f8ff6e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 864.443945][T13284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 864.443956][T13284] R13: 00007f8ff6216038 R14: 00007f8ff6215fa0 R15: 00007ffc2fe7f008 [ 864.443986][T13284] [ 864.472150][T13282] syzkaller0: entered promiscuous mode [ 864.827515][T13304] openvswitch: netlink: Flow actions attr not present in new flow. [ 864.829299][T13282] syzkaller0: entered allmulticast mode [ 865.044270][T13293] netlink: 'syz.3.12675': attribute type 30 has an invalid length. [ 865.069972][T13301] tipc: Resetting bearer [ 865.078578][T13301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.087178][T13301] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 865.122369][T13293] __nla_validate_parse: 19 callbacks suppressed [ 865.122388][T13293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12675'. [ 865.171644][T13281] tipc: Resetting bearer [ 865.186835][T13293] netlink: 'syz.3.12675': attribute type 30 has an invalid length. [ 865.215808][T13293] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12675'. [ 865.249745][T13281] tipc: Disabling bearer [ 865.326040][T13315] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12680'. [ 865.335537][T31511] veth0_to_bond: left promiscuous mode [ 865.437941][T13321] netlink: 'syz.4.12680': attribute type 1 has an invalid length. [ 865.683366][T13332] delete_channel: no stack [ 865.832923][T13343] FAULT_INJECTION: forcing a failure. [ 865.832923][T13343] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 865.850023][T13343] CPU: 0 UID: 0 PID: 13343 Comm: syz.3.12690 Not tainted syzkaller #0 PREEMPT(full) [ 865.850048][T13343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 865.850059][T13343] Call Trace: [ 865.850068][T13343] [ 865.850076][T13343] dump_stack_lvl+0xe8/0x150 [ 865.850106][T13343] should_fail_ex+0x412/0x560 [ 865.850132][T13343] _copy_from_iter+0x1d3/0x1670 [ 865.850158][T13343] ? rcu_is_watching+0x15/0xb0 [ 865.850188][T13343] ? __pfx__copy_from_iter+0x10/0x10 [ 865.850218][T13343] ? netlink_sendmsg+0x650/0xb40 [ 865.850239][T13343] ? skb_put+0x11b/0x210 [ 865.850266][T13343] netlink_sendmsg+0x6c0/0xb40 [ 865.850296][T13343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.850323][T13343] ? aa_sock_msg_perm+0xf1/0x1b0 [ 865.850346][T13343] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 865.850367][T13343] ? __pfx_netlink_sendmsg+0x10/0x10 [ 865.850388][T13343] ____sys_sendmsg+0xa68/0xad0 [ 865.850422][T13343] ? __pfx_____sys_sendmsg+0x10/0x10 [ 865.850456][T13343] ? import_iovec+0x73/0xa0 [ 865.850483][T13343] ___sys_sendmsg+0x2a5/0x360 [ 865.850514][T13343] ? __pfx____sys_sendmsg+0x10/0x10 [ 865.850571][T13343] ? __fget_files+0x2a/0x420 [ 865.850595][T13343] ? __fget_files+0x3a0/0x420 [ 865.850628][T13343] __x64_sys_sendmsg+0x1bd/0x2a0 [ 865.850655][T13343] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 865.850690][T13343] ? __pfx_ksys_write+0x10/0x10 [ 865.850720][T13343] do_syscall_64+0x14d/0xf80 [ 865.850737][T13343] ? trace_irq_disable+0x3b/0x150 [ 865.850761][T13343] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.850779][T13343] ? clear_bhb_loop+0x40/0x90 [ 865.850801][T13343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 865.850818][T13343] RIP: 0033:0x7fb73359c799 [ 865.850835][T13343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 865.850850][T13343] RSP: 002b:00007fb734535028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 865.850873][T13343] RAX: ffffffffffffffda RBX: 00007fb733815fa0 RCX: 00007fb73359c799 [ 865.850886][T13343] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 865.850897][T13343] RBP: 00007fb734535090 R08: 0000000000000000 R09: 0000000000000000 [ 865.850915][T13343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 865.850926][T13343] R13: 00007fb733816038 R14: 00007fb733815fa0 R15: 00007ffe28c63d38 [ 865.850955][T13343] [ 866.101886][T13339] IPVS: set_ctl: invalid protocol: 108 127.0.0.1:20000 [ 866.285515][T13355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12696'. [ 866.297818][T13353] xt_connbytes: Forcing CT accounting to be enabled [ 866.430786][T13360] netlink: 'syz.4.12698': attribute type 33 has an invalid length. [ 866.509131][T13360] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 866.532741][T13360] bond7 (unregistering): Released all slaves [ 866.727413][T13384] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12707'. [ 866.743394][T13384] bond0: entered promiscuous mode [ 866.749518][T13384] bond_slave_0: entered promiscuous mode [ 866.756301][T13384] bond_slave_1: entered promiscuous mode [ 866.764122][T13384] gretap0: entered promiscuous mode [ 866.773266][T13384] bond0: left promiscuous mode [ 866.778381][T13384] bond_slave_0: left promiscuous mode [ 866.784128][T13384] bond_slave_1: left promiscuous mode [ 866.792697][T13384] gretap0: left promiscuous mode [ 866.806779][T13389] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 866.821096][T13389] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 866.897724][T13394] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 866.905080][T13394] IPv6: NLM_F_CREATE should be set when creating new route [ 866.944676][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12709'. [ 867.114085][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12713'. [ 867.124468][T13402] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12713'. [ 867.137061][T13404] netlink: 232 bytes leftover after parsing attributes in process `syz.2.12714'. [ 867.295706][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12719'. [ 867.429289][T13424] block nbd2: NBD_DISCONNECT [ 867.692248][T13447] netlink: 'syz.3.12725': attribute type 11 has an invalid length. [ 868.002843][T13456] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 868.015818][T13456] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 868.038701][T13456] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 868.047672][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.076781][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.099334][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.120692][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.145442][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.152351][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.161168][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.168494][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.176306][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.183544][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.191369][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.204024][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.213287][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.254534][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.271479][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.296458][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.316937][T13473] validate_nla: 3 callbacks suppressed [ 868.316953][T13473] netlink: 'syz.0.12735': attribute type 2 has an invalid length. [ 868.330708][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.344321][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.353925][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.358754][T13479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 868.364221][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.377648][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.384850][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.392078][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.415011][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.423386][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.433353][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.451631][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.466945][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.473744][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.480837][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.491651][T13481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 868.501660][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.509504][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.518924][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.555178][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.562145][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.568992][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.597821][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.598553][T13481] chnl_net:caif_netlink_parms(): no params data found [ 868.622785][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.634570][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.655851][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.677682][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.704314][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.744562][T13456] IPVS: set_ctl: invalid protocol: 59 1.0.6.45:20000 [ 868.780832][T31516] veth0_to_bond: left promiscuous mode [ 869.006172][T13505] netlink: 'syz.2.12746': attribute type 5 has an invalid length. [ 869.077373][T13510] x_tables: duplicate underflow at hook 2 [ 869.530028][T13542] netlink: 'syz.4.12759': attribute type 21 has an invalid length. [ 869.553844][T13544] veth1_to_bond: entered allmulticast mode [ 869.593638][T13544] syzkaller0: entered promiscuous mode [ 869.599336][T13544] syzkaller0: entered allmulticast mode [ 869.923584][T13552] veth1_to_bond: left allmulticast mode [ 869.965996][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 870.083058][T13559] nbd: couldn't find a device at index 1 [ 870.096800][T13563] syzkaller0: entered promiscuous mode [ 870.115931][T13563] syzkaller0: entered allmulticast mode [ 870.317816][T13577] __nla_validate_parse: 17 callbacks suppressed [ 870.317836][T13577] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12768'. [ 870.385129][T13582] netlink: 'syz.3.12771': attribute type 6 has an invalid length. [ 870.398574][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12768'. [ 870.408453][T13577] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12768'. [ 870.539674][T13593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12775'. [ 870.559007][T13593] openvswitch: netlink: Message has 16 unknown bytes. [ 870.647625][T13600] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12773'. [ 870.697750][T13599] netlink: 'syz.3.12776': attribute type 9 has an invalid length. [ 870.709396][T13603] netlink: 100 bytes leftover after parsing attributes in process `syz.0.12777'. [ 870.871424][T13618] syzkaller0: entered promiscuous mode [ 870.879454][T13618] syzkaller0: entered allmulticast mode [ 870.898713][T13618] netlink: 256 bytes leftover after parsing attributes in process `syz.3.12780'. [ 870.934996][T13618] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12780'. [ 871.058710][T13635] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12783'. [ 871.657807][T13675] netlink: 'syz.0.12799': attribute type 5 has an invalid length. [ 871.666701][T13675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12799'. [ 872.077074][T13705] netlink: 'syz.1.12811': attribute type 6 has an invalid length. [ 872.231027][T13721] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 872.238318][T13721] IPv6: NLM_F_CREATE should be set when creating new route [ 872.584131][T13752] openvswitch: netlink: Unknown nsh attribute 0 [ 872.654020][T13756] syzkaller0: entered promiscuous mode [ 872.663659][T13756] syzkaller0: entered allmulticast mode [ 872.961299][T13769] netlink: 'syz.2.12834': attribute type 1 has an invalid length. [ 873.046009][T13776] wg1: entered promiscuous mode [ 873.050905][T13776] wg1: entered allmulticast mode [ 873.743115][T13820] FAULT_INJECTION: forcing a failure. [ 873.743115][T13820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 873.760364][T13820] CPU: 1 UID: 0 PID: 13820 Comm: syz.4.12851 Not tainted syzkaller #0 PREEMPT(full) [ 873.760389][T13820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 873.760401][T13820] Call Trace: [ 873.760408][T13820] [ 873.760416][T13820] dump_stack_lvl+0xe8/0x150 [ 873.760446][T13820] should_fail_ex+0x412/0x560 [ 873.760472][T13820] strncpy_from_user+0x36/0x2b0 [ 873.760497][T13820] do_tcp_setsockopt+0x16f/0x2060 [ 873.760525][T13820] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 873.760550][T13820] ? __pfx_aa_sk_perm+0x10/0x10 [ 873.760573][T13820] ? __fget_files+0x2a/0x420 [ 873.760595][T13820] ? aa_sock_opt_perm+0xff/0x1a0 [ 873.760618][T13820] ? sock_common_setsockopt+0x36/0xc0 [ 873.760638][T13820] ? tcp_setsockopt+0x3d/0xe0 [ 873.760658][T13820] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 873.760681][T13820] do_sock_setsockopt+0x17c/0x1b0 [ 873.760727][T13820] __x64_sys_setsockopt+0x13d/0x1b0 [ 873.760756][T13820] do_syscall_64+0x14d/0xf80 [ 873.760772][T13820] ? trace_irq_disable+0x3b/0x150 [ 873.760797][T13820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.760815][T13820] ? clear_bhb_loop+0x40/0x90 [ 873.760838][T13820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 873.760856][T13820] RIP: 0033:0x7f8ff5f9c799 [ 873.760873][T13820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 873.760889][T13820] RSP: 002b:00007f8ff6e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 873.760908][T13820] RAX: ffffffffffffffda RBX: 00007f8ff6215fa0 RCX: 00007f8ff5f9c799 [ 873.760922][T13820] RDX: 000000000000000d RSI: 0000000000000006 RDI: 0000000000000003 [ 873.760933][T13820] RBP: 00007f8ff6e6e090 R08: 0000000000000003 R09: 0000000000000000 [ 873.760944][T13820] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000001 [ 873.760955][T13820] R13: 00007f8ff6216038 R14: 00007f8ff6215fa0 R15: 00007ffc2fe7f008 [ 873.760983][T13820] [ 873.816753][T13812] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 873.984540][T13828] netlink: 'syz.4.12856': attribute type 33 has an invalid length. [ 873.992617][T13812] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 874.005842][T13812] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 874.039107][T13829] bond6 (unregistering): Released all slaves [ 874.131543][T13828] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 874.166938][T13828] bond8 (unregistering): Released all slaves [ 874.195698][T13826] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 874.315162][T13844] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 874.322425][T13844] IPv6: NLM_F_CREATE should be set when creating new route [ 874.501469][T13859] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 874.697205][T13874] xt_hashlimit: max too large, truncated to 1048576 [ 875.000677][T13896] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 875.066318][T13901] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 875.083068][T31519] bridge_slave_0: left allmulticast mode [ 875.105439][T31519] bridge_slave_0: left promiscuous mode [ 875.116690][T31519] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.430024][T13919] netlink: 'syz.1.12887': attribute type 33 has an invalid length. [ 875.451902][T13920] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 875.686304][T31519] bond1 (unregistering): (slave gretap1): Releasing active interface [ 875.714750][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 875.722788][ C1] lec:lec_tx_timeout: lec0 [ 875.854107][T13929] __nla_validate_parse: 14 callbacks suppressed [ 875.854119][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12890'. [ 875.872287][T13929] openvswitch: netlink: Message has 16 unknown bytes. [ 875.932513][T31519] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 875.946485][T31519] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 875.957049][T31519] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 875.970466][T31519] bond0 (unregistering): Released all slaves [ 875.983011][T31519] bond1 (unregistering): Released all slaves [ 876.000267][T31519] bond2 (unregistering): Released all slaves [ 876.022683][T31519] bond3 (unregistering): (slave veth5): Releasing active interface [ 876.044213][T31519] bond3 (unregistering): Released all slaves [ 876.065572][T31519] bond4 (unregistering): (slave veth7): Releasing active interface [ 876.076326][T31519] bond4 (unregistering): Released all slaves [ 876.099164][T31519] bond5 (unregistering): Released all slaves [ 876.121659][T31519] bond6 (unregistering): Released all slaves [ 876.140681][T31519] bond7 (unregistering): Released all slaves [ 876.167898][T31519] bond8 (unregistering): (slave lo): Releasing backup interface [ 876.176330][T31519] bond8 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 876.189536][T31519] bond8 (unregistering): Released all slaves [ 876.212953][T31519] bond9 (unregistering): (slave veth9): Releasing active interface [ 876.223346][T31519] bond9 (unregistering): Released all slaves [ 876.238400][T31519] bond10 (unregistering): (slave veth11): Releasing active interface [ 876.247057][T31519] veth0_to_bond: entered promiscuous mode [ 876.256087][T31519] bond10 (unregistering): (slave veth0_to_bond): Releasing active interface [ 876.266556][T31519] bond10 (unregistering): Released all slaves [ 876.279516][T31519] bond11 (unregistering): Released all slaves [ 876.298304][T13919] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 876.380157][T13938] netlink: 212340 bytes leftover after parsing attributes in process `syz.1.12893'. [ 876.421095][T13938] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 876.471140][T31519] tipc: Disabling bearer [ 876.495689][T31519] tipc: Left network mode [ 876.500573][T13942] netlink: 14 bytes leftover after parsing attributes in process `syz.0.12895'. [ 876.826129][T13963] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 876.894217][T13967] netlink: 'syz.4.12903': attribute type 39 has an invalid length. [ 877.265892][T13993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 877.382646][T13993] netlink: 'syz.0.12910': attribute type 2 has an invalid length. [ 877.598325][T14006] erspan0: entered allmulticast mode [ 877.667013][T14006] openvswitch: netlink: Flow actions attr not present in new flow. [ 877.829957][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12921'. [ 877.872594][T14020] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12920'. [ 877.884935][T14019] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 877.952770][T14030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12919'. [ 878.131148][T31519] hsr_slave_0: left promiscuous mode [ 878.157672][T31519] hsr_slave_1: left promiscuous mode [ 878.164316][T31519] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 878.172905][T31519] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.193767][T31519] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 878.213524][T31519] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.231434][T31519] veth0_macvtap: left promiscuous mode [ 878.391576][T31519] pimreg (unregistering): left allmulticast mode [ 878.849037][T14068] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12935'. [ 878.874268][T14068] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 878.907830][T14075] netlink: 'syz.3.12938': attribute type 12 has an invalid length. [ 878.960055][T14075] netlink: 'syz.3.12938': attribute type 29 has an invalid length. [ 878.993353][T14075] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12938'. [ 879.027700][T14084] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12940'. [ 879.035174][T14075] netlink: 59 bytes leftover after parsing attributes in process `syz.3.12938'. [ 879.098025][T14089] syzkaller0: entered promiscuous mode [ 879.114633][T14089] syzkaller0: entered allmulticast mode [ 879.379362][T31519] IPVS: stop unused estimator thread 0... [ 881.861325][T14076] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 881.897501][T14110] __nla_validate_parse: 3 callbacks suppressed [ 881.897519][T14110] netlink: 224 bytes leftover after parsing attributes in process `syz.3.12947'. [ 882.148155][T14141] syzkaller0: entered promiscuous mode [ 882.153661][T14141] syzkaller0: entered allmulticast mode [ 882.272682][T14155] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12962'. [ 882.287522][T14155] net_ratelimit: 2 callbacks suppressed [ 882.287540][T14155] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 882.358945][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12964'. [ 882.396797][T14165] netlink: 132 bytes leftover after parsing attributes in process `syz.3.12964'. [ 882.409885][T14162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12964'. [ 882.465611][T14170] netlink: 'syz.4.12966': attribute type 2 has an invalid length. [ 882.507851][T14172] syzkaller0: entered promiscuous mode [ 882.514097][T14172] syzkaller0: entered allmulticast mode [ 882.658137][T14184] netlink: 'syz.4.12970': attribute type 10 has an invalid length. [ 882.803085][T14180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.828165][T14180] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 882.847006][T14194] netlink: 'syz.3.12972': attribute type 1 has an invalid length. [ 882.873618][T14194] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12972'. [ 882.921592][T14180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 882.932857][T14180] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.046265][T14180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.071975][T14180] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.198975][T14180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 883.213340][T14180] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 883.230882][T14212] netlink: 96 bytes leftover after parsing attributes in process `syz.1.12978'. [ 883.291507][T14199] syzkaller0: entered promiscuous mode [ 883.297924][T14199] syzkaller0: entered allmulticast mode [ 883.408933][T14221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12982'. [ 884.978551][T14230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12985'. [ 884.989859][T31514] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.008318][T31514] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.055205][T14230] openvswitch: netlink: Unknown nsh attribute 0 [ 885.062923][T31519] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.072888][T31519] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.157060][T31519] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.181125][T31519] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.217156][T14246] netlink: 'syz.4.12990': attribute type 33 has an invalid length. [ 885.237257][T31519] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 885.255993][T31519] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.265534][ T119] IPVS: starting estimator thread 0... [ 885.271934][T14247] netlink: 'syz.3.12988': attribute type 1 has an invalid length. [ 885.313374][T14246] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 885.336168][T14246] bond8 (unregistering): Released all slaves [ 885.364597][T14257] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12992'. [ 885.374020][T14249] IPVS: using max 31 ests per chain, 74400 per kthread [ 885.518114][T14264] syzkaller0: entered promiscuous mode [ 885.523687][T14264] syzkaller0: entered allmulticast mode [ 885.729170][T14278] netlink: 'syz.2.12998': attribute type 1 has an invalid length. [ 885.790025][T14283] netlink: 'syz.3.13000': attribute type 83 has an invalid length. [ 885.839593][T14290] syzkaller0: entered promiscuous mode [ 885.847485][T14290] syzkaller0: entered allmulticast mode [ 886.010223][T14300] netlink: 'syz.3.13006': attribute type 33 has an invalid length. [ 886.053368][T14300] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 886.083102][T14300] bond6 (unregistering): Released all slaves [ 886.277468][T14323] netlink: 'syz.3.13013': attribute type 4 has an invalid length. [ 886.305668][T14323] pimreg: entered allmulticast mode [ 886.391649][T14327] bond6: (slave bond_slave_1): Device is not our slave [ 886.399380][T14327] bond6: option active_slave: invalid value (bond_slave_1) [ 886.401211][T14330] netlink: 'syz.2.13016': attribute type 1 has an invalid length. [ 886.419947][T14327] bond6 (unregistering): Released all slaves [ 886.906440][T14358] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 886.920649][T14358] bond8 (unregistering): Released all slaves [ 887.080589][T14371] FAULT_INJECTION: forcing a failure. [ 887.080589][T14371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 887.081132][T14368] gre1: entered promiscuous mode [ 887.094705][T14371] CPU: 1 UID: 0 PID: 14371 Comm: syz.2.13028 Not tainted syzkaller #0 PREEMPT(full) [ 887.094729][T14371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.094740][T14371] Call Trace: [ 887.094747][T14371] [ 887.094755][T14371] dump_stack_lvl+0xe8/0x150 [ 887.094784][T14371] should_fail_ex+0x412/0x560 [ 887.094809][T14371] _copy_from_user+0x2d/0xb0 [ 887.094835][T14371] ___sys_sendmsg+0x1c6/0x360 [ 887.094865][T14371] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.094895][T14371] ? kstrtouint+0x6e/0xe0 [ 887.094936][T14371] ? __fget_files+0x2a/0x420 [ 887.094960][T14371] ? __fget_files+0x3a0/0x420 [ 887.094992][T14371] __sys_sendmmsg+0x27c/0x4e0 [ 887.095021][T14371] ? __pfx___sys_sendmmsg+0x10/0x10 [ 887.095044][T14371] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 887.095085][T14371] ? ksys_write+0x242/0x270 [ 887.095105][T14371] ? __pfx_ksys_write+0x10/0x10 [ 887.095135][T14371] __x64_sys_sendmmsg+0xa0/0xc0 [ 887.095162][T14371] do_syscall_64+0x14d/0xf80 [ 887.095178][T14371] ? trace_irq_disable+0x3b/0x150 [ 887.095203][T14371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.095220][T14371] ? clear_bhb_loop+0x40/0x90 [ 887.095241][T14371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.095259][T14371] RIP: 0033:0x7f7f4019c799 [ 887.095276][T14371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.095291][T14371] RSP: 002b:00007f7f410a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 887.095310][T14371] RAX: ffffffffffffffda RBX: 00007f7f40415fa0 RCX: 00007f7f4019c799 [ 887.095323][T14371] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 887.095335][T14371] RBP: 00007f7f410a8090 R08: 0000000000000000 R09: 0000000000000000 [ 887.095346][T14371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.095357][T14371] R13: 00007f7f40416038 R14: 00007f7f40415fa0 R15: 00007ffd99fcffe8 [ 887.095384][T14371] [ 887.134233][T14372] __nla_validate_parse: 7 callbacks suppressed [ 887.134250][T14372] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13030'. [ 887.136978][T14368] gre1: entered allmulticast mode [ 887.171413][T14372] openvswitch: netlink: Key type 15644 is out of range max 32 [ 887.498499][T14390] validate_nla: 2 callbacks suppressed [ 887.498512][T14390] netlink: 'syz.4.13038': attribute type 33 has an invalid length. [ 887.528291][T14390] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 887.540045][T14390] bond8 (unregistering): Released all slaves [ 887.826352][T14405] FAULT_INJECTION: forcing a failure. [ 887.826352][T14405] name failslab, interval 1, probability 0, space 0, times 0 [ 887.839754][T14405] CPU: 1 UID: 0 PID: 14405 Comm: syz.4.13042 Not tainted syzkaller #0 PREEMPT(full) [ 887.839777][T14405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 887.839788][T14405] Call Trace: [ 887.839796][T14405] [ 887.839804][T14405] dump_stack_lvl+0xe8/0x150 [ 887.839834][T14405] should_fail_ex+0x412/0x560 [ 887.839860][T14405] should_failslab+0xa8/0x100 [ 887.839884][T14405] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 887.839912][T14405] ? __alloc_skb+0x186/0x7d0 [ 887.839934][T14405] ? __alloc_skb+0x1d0/0x7d0 [ 887.839953][T14405] ? __local_bh_enable_ip+0xd0/0x130 [ 887.839980][T14405] __alloc_skb+0x1d0/0x7d0 [ 887.840014][T14405] netlink_sendmsg+0x5d4/0xb40 [ 887.840044][T14405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.840069][T14405] ? aa_sock_msg_perm+0xf1/0x1b0 [ 887.840092][T14405] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 887.840111][T14405] ? __pfx_netlink_sendmsg+0x10/0x10 [ 887.840133][T14405] ____sys_sendmsg+0xa68/0xad0 [ 887.840155][T14405] ? __lock_acquire+0x6b5/0x2cf0 [ 887.840185][T14405] ? __pfx_____sys_sendmsg+0x10/0x10 [ 887.840217][T14405] ? import_iovec+0x73/0xa0 [ 887.840243][T14405] ___sys_sendmsg+0x2a5/0x360 [ 887.840271][T14405] ? __pfx____sys_sendmsg+0x10/0x10 [ 887.840300][T14405] ? kstrtouint+0x6e/0xe0 [ 887.840340][T14405] ? __fget_files+0x2a/0x420 [ 887.840362][T14405] ? __fget_files+0x3a0/0x420 [ 887.840394][T14405] __sys_sendmmsg+0x27c/0x4e0 [ 887.840422][T14405] ? __pfx___sys_sendmmsg+0x10/0x10 [ 887.840445][T14405] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 887.840486][T14405] ? ksys_write+0x242/0x270 [ 887.840506][T14405] ? __pfx_ksys_write+0x10/0x10 [ 887.840527][T14405] __x64_sys_sendmmsg+0xa0/0xc0 [ 887.840548][T14405] do_syscall_64+0x14d/0xf80 [ 887.840561][T14405] ? trace_irq_disable+0x3b/0x150 [ 887.840579][T14405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.840593][T14405] ? clear_bhb_loop+0x40/0x90 [ 887.840609][T14405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 887.840623][T14405] RIP: 0033:0x7f8ff5f9c799 [ 887.840636][T14405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 887.840648][T14405] RSP: 002b:00007f8ff6e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 887.840663][T14405] RAX: ffffffffffffffda RBX: 00007f8ff6215fa0 RCX: 00007f8ff5f9c799 [ 887.840673][T14405] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 887.840683][T14405] RBP: 00007f8ff6e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 887.840692][T14405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 887.840700][T14405] R13: 00007f8ff6216038 R14: 00007f8ff6215fa0 R15: 00007ffc2fe7f008 [ 887.840724][T14405] [ 888.199414][T14408] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 888.200665][T14410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13044'. [ 888.270968][T14415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13044'. [ 888.291453][T14419] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.13047'. [ 888.383512][T14424] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13049'. [ 888.445309][T14424] syzkaller0: entered promiscuous mode [ 888.455626][T14424] syzkaller0: entered allmulticast mode [ 888.493312][T14432] FAULT_INJECTION: forcing a failure. [ 888.493312][T14432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 888.508292][T14432] CPU: 1 UID: 0 PID: 14432 Comm: syz.4.13053 Not tainted syzkaller #0 PREEMPT(full) [ 888.508313][T14432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 888.508323][T14432] Call Trace: [ 888.508329][T14432] [ 888.508336][T14432] dump_stack_lvl+0xe8/0x150 [ 888.508361][T14432] should_fail_ex+0x412/0x560 [ 888.508384][T14432] _copy_from_iter+0x1d3/0x1670 [ 888.508407][T14432] ? rcu_is_watching+0x15/0xb0 [ 888.508432][T14432] ? __pfx__copy_from_iter+0x10/0x10 [ 888.508459][T14432] ? netlink_sendmsg+0x650/0xb40 [ 888.508480][T14432] ? skb_put+0x11b/0x210 [ 888.508506][T14432] netlink_sendmsg+0x6c0/0xb40 [ 888.508536][T14432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.508561][T14432] ? aa_sock_msg_perm+0xf1/0x1b0 [ 888.508583][T14432] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 888.508603][T14432] ? __pfx_netlink_sendmsg+0x10/0x10 [ 888.508623][T14432] ____sys_sendmsg+0xa68/0xad0 [ 888.508646][T14432] ? __lock_acquire+0x6b5/0x2cf0 [ 888.508675][T14432] ? __pfx_____sys_sendmsg+0x10/0x10 [ 888.508708][T14432] ? import_iovec+0x73/0xa0 [ 888.508736][T14432] ___sys_sendmsg+0x2a5/0x360 [ 888.508766][T14432] ? __pfx____sys_sendmsg+0x10/0x10 [ 888.508795][T14432] ? kstrtouint+0x6e/0xe0 [ 888.508838][T14432] ? __fget_files+0x2a/0x420 [ 888.508860][T14432] ? __fget_files+0x3a0/0x420 [ 888.508889][T14432] __sys_sendmmsg+0x27c/0x4e0 [ 888.508914][T14432] ? __pfx___sys_sendmmsg+0x10/0x10 [ 888.508933][T14432] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 888.508969][T14432] ? ksys_write+0x242/0x270 [ 888.508987][T14432] ? __pfx_ksys_write+0x10/0x10 [ 888.509007][T14432] __x64_sys_sendmmsg+0xa0/0xc0 [ 888.509030][T14432] do_syscall_64+0x14d/0xf80 [ 888.509043][T14432] ? trace_irq_disable+0x3b/0x150 [ 888.509068][T14432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.509083][T14432] ? clear_bhb_loop+0x40/0x90 [ 888.509102][T14432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.509116][T14432] RIP: 0033:0x7f8ff5f9c799 [ 888.509130][T14432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.509143][T14432] RSP: 002b:00007f8ff6e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 888.509160][T14432] RAX: ffffffffffffffda RBX: 00007f8ff6215fa0 RCX: 00007f8ff5f9c799 [ 888.509171][T14432] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 888.509181][T14432] RBP: 00007f8ff6e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 888.509190][T14432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 888.509199][T14432] R13: 00007f8ff6216038 R14: 00007f8ff6215fa0 R15: 00007ffc2fe7f008 [ 888.509224][T14432] [ 888.861571][T14439] syzkaller0: entered promiscuous mode [ 888.867290][T14439] syzkaller0: entered allmulticast mode [ 888.892756][T14442] netlink: 'syz.3.13057': attribute type 10 has an invalid length. [ 888.931142][T14442] team0: Device ipvlan1 failed to register rx_handler [ 889.027688][T14448] netlink: 32 bytes leftover after parsing attributes in process `syz.3.13059'. [ 889.284280][T14467] netlink: 108 bytes leftover after parsing attributes in process `syz.4.13065'. [ 889.346860][T14472] netlink: 'syz.4.13067': attribute type 33 has an invalid length. [ 889.378205][T14472] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 889.391154][T14472] bond8 (unregistering): Released all slaves [ 889.510489][T14478] netlink: 'syz.0.13068': attribute type 2 has an invalid length. [ 889.519169][T14478] netlink: 119 bytes leftover after parsing attributes in process `syz.0.13068'. [ 889.767773][T14489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13073'. [ 889.893721][T14507] netlink: 'syz.4.13080': attribute type 1 has an invalid length. [ 889.952958][T14509] netlink: 'syz.3.13079': attribute type 33 has an invalid length. [ 889.957936][T14507] 8021q: adding VLAN 0 to HW filter on device bond8 [ 889.979021][T14513] vlan2: entered promiscuous mode [ 889.984146][T14513] bond8: entered promiscuous mode [ 889.996784][T14513] vlan2: entered allmulticast mode [ 890.001918][T14513] bond8: entered allmulticast mode [ 890.083915][T14509] bond6: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 890.097334][T14509] bond6 (unregistering): Released all slaves [ 890.140183][T14507] bond8: (slave bridge5): making interface the new active one [ 890.147913][T14522] xt_bpf: check failed: parse error [ 890.155122][T14507] bridge5: entered promiscuous mode [ 890.160549][T14507] bridge5: entered allmulticast mode [ 890.168063][T14507] bond8: (slave bridge5): Enslaving as an active interface with an up link [ 890.405443][T14542] FAULT_INJECTION: forcing a failure. [ 890.405443][T14542] name failslab, interval 1, probability 0, space 0, times 0 [ 890.433971][T14542] CPU: 0 UID: 0 PID: 14542 Comm: syz.4.13089 Not tainted syzkaller #0 PREEMPT(full) [ 890.433996][T14542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 890.434007][T14542] Call Trace: [ 890.434015][T14542] [ 890.434023][T14542] dump_stack_lvl+0xe8/0x150 [ 890.434053][T14542] should_fail_ex+0x412/0x560 [ 890.434080][T14542] should_failslab+0xa8/0x100 [ 890.434109][T14542] ? skb_clone+0x212/0x3a0 [ 890.434136][T14542] kmem_cache_alloc_noprof+0x87/0x650 [ 890.434164][T14542] ? __netlink_lookup+0xc6/0x8b0 [ 890.434194][T14542] skb_clone+0x212/0x3a0 [ 890.434223][T14542] __netlink_deliver_tap+0x404/0x850 [ 890.434256][T14542] ? netlink_deliver_tap+0x2e/0x1b0 [ 890.434280][T14542] netlink_deliver_tap+0x19c/0x1b0 [ 890.434303][T14542] netlink_unicast+0x7e3/0x9b0 [ 890.434333][T14542] ? __pfx_netlink_unicast+0x10/0x10 [ 890.434357][T14542] ? netlink_sendmsg+0x650/0xb40 [ 890.434376][T14542] ? skb_put+0x11b/0x210 [ 890.434401][T14542] netlink_sendmsg+0x813/0xb40 [ 890.434431][T14542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.434456][T14542] ? aa_sock_msg_perm+0xf1/0x1b0 [ 890.434479][T14542] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 890.434500][T14542] ? __pfx_netlink_sendmsg+0x10/0x10 [ 890.434519][T14542] ____sys_sendmsg+0xa68/0xad0 [ 890.434542][T14542] ? __lock_acquire+0x6b5/0x2cf0 [ 890.434570][T14542] ? __pfx_____sys_sendmsg+0x10/0x10 [ 890.434603][T14542] ? import_iovec+0x73/0xa0 [ 890.434632][T14542] ___sys_sendmsg+0x2a5/0x360 [ 890.434664][T14542] ? __pfx____sys_sendmsg+0x10/0x10 [ 890.434694][T14542] ? kstrtouint+0x6e/0xe0 [ 890.434737][T14542] ? __fget_files+0x2a/0x420 [ 890.434761][T14542] ? __fget_files+0x3a0/0x420 [ 890.434792][T14542] __sys_sendmmsg+0x27c/0x4e0 [ 890.434823][T14542] ? __pfx___sys_sendmmsg+0x10/0x10 [ 890.434846][T14542] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 890.434890][T14542] ? ksys_write+0x242/0x270 [ 890.434910][T14542] ? __pfx_ksys_write+0x10/0x10 [ 890.434935][T14542] __x64_sys_sendmmsg+0xa0/0xc0 [ 890.434960][T14542] do_syscall_64+0x14d/0xf80 [ 890.434977][T14542] ? trace_irq_disable+0x3b/0x150 [ 890.435002][T14542] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.435020][T14542] ? clear_bhb_loop+0x40/0x90 [ 890.435042][T14542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.435060][T14542] RIP: 0033:0x7f8ff5f9c799 [ 890.435076][T14542] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 890.435098][T14542] RSP: 002b:00007f8ff6e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 890.435118][T14542] RAX: ffffffffffffffda RBX: 00007f8ff6215fa0 RCX: 00007f8ff5f9c799 [ 890.435130][T14542] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 890.435142][T14542] RBP: 00007f8ff6e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 890.435154][T14542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.435165][T14542] R13: 00007f8ff6216038 R14: 00007f8ff6215fa0 R15: 00007ffc2fe7f008 [ 890.435193][T14542] [ 890.739109][T14551] syzkaller0: entered promiscuous mode [ 890.764488][T14551] syzkaller0: entered allmulticast mode [ 890.989197][T14570] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13097'. [ 891.160720][T14579] syzkaller0: entered promiscuous mode [ 891.202832][T14579] syzkaller0: entered allmulticast mode [ 891.217377][T14592] FAULT_INJECTION: forcing a failure. [ 891.217377][T14592] name failslab, interval 1, probability 0, space 0, times 0 [ 891.230158][T14592] CPU: 0 UID: 0 PID: 14592 Comm: syz.4.13105 Not tainted syzkaller #0 PREEMPT(full) [ 891.230181][T14592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.230192][T14592] Call Trace: [ 891.230199][T14592] [ 891.230207][T14592] dump_stack_lvl+0xe8/0x150 [ 891.230238][T14592] should_fail_ex+0x412/0x560 [ 891.230264][T14592] should_failslab+0xa8/0x100 [ 891.230288][T14592] __kmalloc_noprof+0xe8/0x760 [ 891.230308][T14592] ? fib6_info_alloc+0x30/0xf0 [ 891.230336][T14592] fib6_info_alloc+0x30/0xf0 [ 891.230357][T14592] ip6_route_info_create+0x142/0x860 [ 891.230380][T14592] ? inet6_rtm_newroute+0x391/0x19e0 [ 891.230405][T14592] inet6_rtm_newroute+0x55b/0x19e0 [ 891.230433][T14592] ? kasan_quarantine_put+0xbb/0x1f0 [ 891.230451][T14592] ? lockdep_hardirqs_on+0x7a/0x110 [ 891.230481][T14592] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 891.230501][T14592] ? kmem_cache_free+0x187/0x630 [ 891.230518][T14592] ? nlmon_xmit+0xb0/0x100 [ 891.230564][T14592] ? lockdep_hardirqs_on+0x7a/0x110 [ 891.230617][T14592] ? __pfx_inet6_rtm_newroute+0x10/0x10 [ 891.230639][T14592] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 891.230666][T14592] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 891.230688][T14592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 891.230707][T14592] ? ref_tracker_free+0x693/0x840 [ 891.230727][T14592] ? __copy_skb_header+0xa3/0x4a0 [ 891.230753][T14592] ? __pfx_ref_tracker_free+0x10/0x10 [ 891.230782][T14592] netlink_rcv_skb+0x232/0x4b0 [ 891.230805][T14592] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 891.230828][T14592] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 891.230860][T14592] ? netlink_deliver_tap+0x2e/0x1b0 [ 891.230889][T14592] netlink_unicast+0x80f/0x9b0 [ 891.230915][T14592] ? __pfx_netlink_unicast+0x10/0x10 [ 891.230934][T14592] ? netlink_sendmsg+0x650/0xb40 [ 891.230954][T14592] ? skb_put+0x11b/0x210 [ 891.230979][T14592] netlink_sendmsg+0x813/0xb40 [ 891.231015][T14592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.231041][T14592] ? aa_sock_msg_perm+0xf1/0x1b0 [ 891.231064][T14592] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 891.231085][T14592] ? __pfx_netlink_sendmsg+0x10/0x10 [ 891.231104][T14592] ____sys_sendmsg+0xa68/0xad0 [ 891.231128][T14592] ? __lock_acquire+0x6b5/0x2cf0 [ 891.231156][T14592] ? __pfx_____sys_sendmsg+0x10/0x10 [ 891.231188][T14592] ? import_iovec+0x73/0xa0 [ 891.231215][T14592] ___sys_sendmsg+0x2a5/0x360 [ 891.231243][T14592] ? __pfx____sys_sendmsg+0x10/0x10 [ 891.231272][T14592] ? kstrtouint+0x6e/0xe0 [ 891.231317][T14592] ? __fget_files+0x2a/0x420 [ 891.231339][T14592] ? __fget_files+0x3a0/0x420 [ 891.231370][T14592] __sys_sendmmsg+0x27c/0x4e0 [ 891.231399][T14592] ? __pfx___sys_sendmmsg+0x10/0x10 [ 891.231419][T14592] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 891.231453][T14592] ? ksys_write+0x242/0x270 [ 891.231468][T14592] ? __pfx_ksys_write+0x10/0x10 [ 891.231486][T14592] __x64_sys_sendmmsg+0xa0/0xc0 [ 891.231507][T14592] do_syscall_64+0x14d/0xf80 [ 891.231519][T14592] ? trace_irq_disable+0x3b/0x150 [ 891.231538][T14592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.231552][T14592] ? clear_bhb_loop+0x40/0x90 [ 891.231568][T14592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.231581][T14592] RIP: 0033:0x7f8ff5f9c799 [ 891.231596][T14592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.231608][T14592] RSP: 002b:00007f8ff6e6e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 891.231623][T14592] RAX: ffffffffffffffda RBX: 00007f8ff6215fa0 RCX: 00007f8ff5f9c799 [ 891.231634][T14592] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 891.231643][T14592] RBP: 00007f8ff6e6e090 R08: 0000000000000000 R09: 0000000000000000 [ 891.231652][T14592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.231660][T14592] R13: 00007f8ff6216038 R14: 00007f8ff6215fa0 R15: 00007ffc2fe7f008 [ 891.231681][T14592] [ 891.776027][T14596] syz_tun: left promiscuous mode [ 891.801472][T14596] bridge0: port 3(syz_tun) entered disabled state [ 891.860295][T14596] bridge_slave_0: left allmulticast mode [ 891.882665][T14596] bridge_slave_0: left promiscuous mode [ 891.904084][T14596] bridge0: port 1(bridge_slave_0) entered disabled state [ 891.946022][T14596] bridge_slave_1: left allmulticast mode [ 891.951816][T14596] bridge_slave_1: left promiscuous mode [ 891.971590][T14596] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.994717][T14596] bond5: (slave veth0_to_bond): Releasing active interface [ 892.041306][T14596] bond0: (slave bond_slave_0): Releasing backup interface [ 892.055236][T14596] bond_slave_0: left promiscuous mode [ 892.067462][T14596] bond0: (slave bond_slave_1): Releasing backup interface [ 892.076382][T14596] bond_slave_1: left promiscuous mode [ 892.083876][T14596] team0: Port device team_slave_0 removed [ 892.091765][T14596] team0: Port device team_slave_1 removed [ 892.097950][T14596] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.108190][T14596] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.116818][T14596] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 892.142858][T14607] tipc: Enabling of bearer rejected, failed to enable media [ 892.163614][T14611] bridge6: entered promiscuous mode [ 892.203989][T14611] bridge6: entered allmulticast mode [ 892.248184][T14619] syzkaller0: entered promiscuous mode [ 892.253681][T14619] syzkaller0: entered allmulticast mode [ 892.303626][T14627] __nla_validate_parse: 5 callbacks suppressed [ 892.303642][T14627] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13117'. [ 892.389067][T14633] SET target dimension over the limit! [ 892.398878][T14633] netlink: 'syz.2.13119': attribute type 1 has an invalid length. [ 892.400941][T14627] team1: entered promiscuous mode [ 892.412513][T14633] netlink: 224 bytes leftover after parsing attributes in process `syz.2.13119'. [ 892.423273][T14627] team1: entered allmulticast mode [ 892.505043][T14638] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 892.536959][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13122'. [ 892.624023][T14648] x_tables: duplicate underflow at hook 1 [ 892.633185][T14650] netlink: 'syz.3.13126': attribute type 10 has an invalid length. [ 892.646835][T14650] bridge0: entered promiscuous mode [ 892.653097][T14650] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 892.838577][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 892.857796][T14665] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13132'. [ 892.996136][T14674] xt_l2tp: invalid flags combination: 8 [ 893.245541][T14687] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13141'. [ 893.371449][T14698] netlink: 'syz.3.13146': attribute type 1 has an invalid length. [ 893.380478][T14698] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13146'. [ 893.854779][T14732] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 893.959061][T14736] syz.0.13160: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 893.991025][T14736] CPU: 0 UID: 0 PID: 14736 Comm: syz.0.13160 Not tainted syzkaller #0 PREEMPT(full) [ 893.991055][T14736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 893.991069][T14736] Call Trace: [ 893.991078][T14736] [ 893.991087][T14736] dump_stack_lvl+0xe8/0x150 [ 893.991123][T14736] warn_alloc+0x249/0x340 [ 893.991147][T14736] ? stack_trace_save+0xa9/0x100 [ 893.991173][T14736] ? __pfx_warn_alloc+0x10/0x10 [ 893.991203][T14736] ? kasan_save_track+0x4f/0x80 [ 893.991223][T14736] ? kasan_save_track+0x3e/0x80 [ 893.991241][T14736] ? __kasan_kmalloc+0x93/0xb0 [ 893.991261][T14736] ? __kmalloc_cache_noprof+0x31c/0x660 [ 893.991281][T14736] ? xskq_create+0x56/0x170 [ 893.991310][T14736] ? xsk_setsockopt+0x54c/0x990 [ 893.991335][T14736] ? do_sock_setsockopt+0x17c/0x1b0 [ 893.991363][T14736] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 893.991391][T14736] ? do_syscall_64+0x14d/0xf80 [ 893.991414][T14736] __vmalloc_node_range_noprof+0x132/0x1730 [ 893.991469][T14736] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 893.991498][T14736] ? __kasan_kmalloc+0x93/0xb0 [ 893.991526][T14736] vmalloc_user_noprof+0xad/0xe0 [ 893.991548][T14736] ? xskq_create+0xbf/0x170 [ 893.991584][T14736] xskq_create+0xbf/0x170 [ 893.991617][T14736] xsk_init_queue+0x8a/0xe0 [ 893.991649][T14736] xsk_setsockopt+0x54c/0x990 [ 893.991680][T14736] ? __pfx_xsk_setsockopt+0x10/0x10 [ 893.991708][T14736] ? __pfx_aa_sk_perm+0x10/0x10 [ 893.991736][T14736] ? aa_sock_opt_perm+0xff/0x1a0 [ 893.991765][T14736] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 893.991787][T14736] ? __pfx_xsk_setsockopt+0x10/0x10 [ 893.991816][T14736] do_sock_setsockopt+0x17c/0x1b0 [ 893.991850][T14736] __x64_sys_setsockopt+0x13d/0x1b0 [ 893.991885][T14736] do_syscall_64+0x14d/0xf80 [ 893.991904][T14736] ? trace_irq_disable+0x3b/0x150 [ 893.991934][T14736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.991956][T14736] ? clear_bhb_loop+0x40/0x90 [ 893.991981][T14736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 893.992002][T14736] RIP: 0033:0x7f9f4f99c799 [ 893.992022][T14736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 893.992040][T14736] RSP: 002b:00007f9f5083f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 893.992064][T14736] RAX: ffffffffffffffda RBX: 00007f9f4fc15fa0 RCX: 00007f9f4f99c799 [ 893.992080][T14736] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 893.992093][T14736] RBP: 00007f9f4fa32bd9 R08: 0000000000000004 R09: 0000000000000000 [ 893.992107][T14736] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 893.992121][T14736] R13: 00007f9f4fc16038 R14: 00007f9f4fc15fa0 R15: 00007ffc0f34ef88 [ 893.992155][T14736] [ 893.992163][T14736] Mem-Info: [ 894.159361][T14746] netlink: 'syz.4.13163': attribute type 1 has an invalid length. [ 894.163234][T14736] active_anon:8136 inactive_anon:0 isolated_anon:0 [ 894.163234][T14736] active_file:3292 inactive_file:40996 isolated_file:0 [ 894.163234][T14736] unevictable:768 dirty:185 writeback:0 [ 894.163234][T14736] slab_reclaimable:14822 slab_unreclaimable:139186 [ 894.163234][T14736] mapped:30136 shmem:3195 pagetables:1469 [ 894.163234][T14736] sec_pagetables:0 bounce:0 [ 894.163234][T14736] kernel_misc_reclaimable:0 [ 894.163234][T14736] free:1260786 free_pcp:23651 free_cma:0 [ 894.352708][T14736] Node 0 active_anon:25344kB inactive_anon:0kB active_file:13168kB inactive_file:163780kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:22240kB dirty:740kB writeback:0kB shmem:4044kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17504kB pagetables:5748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 894.385420][T14736] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98304kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 894.400938][T14746] 8021q: adding VLAN 0 to HW filter on device bond9 [ 894.423125][T14736] Node 0 DMA free:15152kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:208kB local_pcp:128kB free_cma:0kB [ 894.491188][T14736] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 894.497388][T14736] Node 0 DMA32 free:1361508kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB free_highatomic:0KB active_anon:26944kB inactive_anon:0kB active_file:13168kB inactive_file:163780kB unevictable:1536kB writepending:740kB zspages:0kB present:3129332kB managed:2552820kB mlocked:0kB bounce:0kB free_pcp:29652kB local_pcp:11580kB free_cma:0kB [ 894.531860][T14736] lowmem_reserve[]: 0 0 0 0 0 [ 894.536971][T14736] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 894.571964][T14736] lowmem_reserve[]: 0 0 0 0 0 [ 894.581090][T14736] Node 1 Normal free:3673684kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:63648kB local_pcp:30988kB free_cma:0kB [ 894.615850][T14736] lowmem_reserve[]: 0 0 0 0 0 [ 894.620676][T14736] Node 0 DMA: 0*4kB 2*8kB (U) 2*16kB (U) 0*32kB 2*64kB (U) 1*128kB (U) 2*256kB (U) 2*512kB (U) 1*1024kB (U) 2*2048kB (UM) 2*4096kB (U) = 15152kB [ 894.640665][T14748] bond9: (slave veth13): Enslaving as an active interface with a down link [ 894.646266][T14736] Node 0 DMA32: 8175*4kB (UME) 8874*8kB (UME) 4586*16kB (UM) 313*32kB (UM) 99*64kB (UM) 84*128kB (UME) 545*256kB (UME) 510*512kB (UME) 391*1024kB (UME) 174*2048kB (UM) 0*4096kB = 1361548kB [ 894.677226][T14750] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 894.691153][T14736] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 894.703803][T14750] bond9: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 894.727458][T14736] Node 1 Normal: 9*4kB (U) 12*8kB (UME) 23*16kB (UME) 19*32kB (UME) 18*64kB (UME) 19*128kB (UME) 14*256kB (UME) 13*512kB (UME) 9*1024kB (UM) 12*2048kB (UE) 885*4096kB (UM) = 3673684kB [ 894.754669][T14736] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.775883][T14736] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 894.790141][T14736] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 894.818820][T14736] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 894.833042][T14736] 48513 total pagecache pages [ 894.839781][T14736] 1 pages in swap cache [ 894.843946][T14736] Free swap = 124992kB [ 894.848503][T14736] Total swap = 124996kB [ 894.852723][T14736] 2097051 pages RAM [ 894.861006][T14736] 0 pages HighMem/MovableOnly [ 894.904706][T14736] 427010 pages reserved [ 894.908895][T14736] 0 pages cma reserved [ 894.983655][T14771] netlink: 'syz.4.13172': attribute type 1 has an invalid length. [ 895.096428][T14768] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 895.206759][T14789] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13176'. [ 895.226551][T14792] set match dimension is over the limit! [ 895.243505][T14795] set match dimension is over the limit! [ 895.265055][T14794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13175'. [ 895.268450][T14797] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13178'. [ 895.287660][T14799] netlink: 256 bytes leftover after parsing attributes in process `syz.4.13178'. [ 895.298870][T14794] openvswitch: netlink: Message has 16 unknown bytes. [ 895.523948][T14810] hsr_slave_0: left promiscuous mode [ 895.531958][T14810] hsr_slave_1: left promiscuous mode [ 895.541426][T14808] netlink: 'syz.3.13180': attribute type 3 has an invalid length. [ 895.549574][T14808] netlink: 'syz.3.13180': attribute type 1 has an invalid length. [ 895.550108][T14812] openvswitch: netlink: IPv4 tun info is not correct [ 895.986138][T14843] netlink: 'syz.0.13192': attribute type 20 has an invalid length. [ 896.101722][T14850] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 897.634460][ T5737] Bluetooth: hci5: command 0x0406 tx timeout [ 898.675443][T14822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 898.826533][T14872] __nla_validate_parse: 8 callbacks suppressed [ 898.826552][T14872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13202'. [ 898.996493][T14887] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.13206'. [ 899.006181][T14887] openvswitch: netlink: Port 167772160 exceeds max allowable 65535 [ 899.037313][T14888] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13208'. [ 899.188451][T14900] netlink: 'syz.2.13213': attribute type 21 has an invalid length. [ 899.205823][T14900] netlink: 168 bytes leftover after parsing attributes in process `syz.2.13213'. [ 899.241886][T14903] bridge0: port 3(veth0_to_bridge) entered blocking state [ 899.265875][T14903] bridge0: port 3(veth0_to_bridge) entered disabled state [ 899.286867][T14903] veth0_to_bridge: entered allmulticast mode [ 899.319803][T14903] veth0_to_bridge: entered promiscuous mode [ 899.330704][T14903] bridge0: port 3(veth0_to_bridge) entered blocking state [ 899.338117][T14903] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 899.355013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.368981][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.381941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.394214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.400763][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13219'. [ 899.406786][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.428039][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.440477][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.452834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.465363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 899.480879][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13219'. [ 899.535579][T14922] netlink: 212340 bytes leftover after parsing attributes in process `syz.2.13222'. [ 899.744729][T14929] netlink: 'syz.0.13224': attribute type 10 has an invalid length. [ 902.751229][T14950] netlink: 'syz.4.13230': attribute type 13 has an invalid length. [ 902.759453][ T5832] Bluetooth: hci3: command 0x0406 tx timeout [ 903.225392][T14939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13227'. [ 903.273418][T14954] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 903.314938][T14954] syzkaller0: entered promiscuous mode [ 903.349018][T14954] syzkaller0: entered allmulticast mode [ 903.492068][T14961] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 903.499380][T14961] IPv6: NLM_F_CREATE should be set when creating new route [ 903.648576][T14968] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13235'. [ 903.877801][T14975] Unsupported ieee802154 address type: 0 [ 904.014633][ C0] net_ratelimit: 13637 callbacks suppressed [ 904.014651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.033133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.045673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.058158][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.070573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.083053][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.095450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.108152][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.120737][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.133222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 904.334373][ C0] sched: DL replenish lagged too much [ 905.242054][T14997] netlink: 'syz.2.13244': attribute type 13 has an invalid length. [ 905.264283][T14997] lo: entered promiscuous mode [ 905.283215][T15007] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.13247'. [ 905.312383][T14997] lo: entered allmulticast mode [ 905.360920][T14997] bond0: entered promiscuous mode [ 905.415307][T14997] rose0: entered promiscuous mode [ 905.428115][T14997] bond0: entered allmulticast mode [ 905.458167][T14997] rose0: entered allmulticast mode [ 905.478788][T14997] dummy0: entered promiscuous mode [ 905.505418][T14997] dummy0: entered allmulticast mode [ 905.526332][T14997] eql: remember to turn off Van-Jacobson compression on your slave devices [ 905.556264][T14997] eql: entered promiscuous mode [ 905.569033][T14997] eql: entered allmulticast mode [ 905.592065][T14997] ifb0: entered promiscuous mode [ 905.603818][T14997] ifb0: entered allmulticast mode [ 905.631219][T14997] ifb1: entered promiscuous mode [ 905.637163][T14997] ifb1: entered allmulticast mode [ 905.656137][T14997] virtio_net virtio1 eth0: entered promiscuous mode [ 905.663055][T14997] virtio_net virtio1 eth0: entered allmulticast mode [ 905.683571][T14997] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 905.691748][T14997] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 905.711605][T14997] hwsim0: entered promiscuous mode [ 905.718748][T14997] hwsim0: entered allmulticast mode [ 905.728649][T14997] teql0: entered promiscuous mode [ 905.733828][T14997] teql0: entered allmulticast mode [ 906.155076][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13255'. [ 906.187939][T15027] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13255'. [ 906.774762][T15039] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13259'. [ 906.794765][T15039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.873797][T15039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 906.981738][T15046] FAULT_INJECTION: forcing a failure. [ 906.981738][T15046] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.017212][T15046] CPU: 1 UID: 0 PID: 15046 Comm: syz.2.13261 Not tainted syzkaller #0 PREEMPT(full) [ 907.017237][T15046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 907.017248][T15046] Call Trace: [ 907.017255][T15046] [ 907.017263][T15046] dump_stack_lvl+0xe8/0x150 [ 907.017294][T15046] should_fail_ex+0x412/0x560 [ 907.017319][T15046] _copy_from_user+0x2d/0xb0 [ 907.017346][T15046] ___sys_sendmsg+0x1c6/0x360 [ 907.017381][T15046] ? __pfx____sys_sendmsg+0x10/0x10 [ 907.017441][T15046] ? __fget_files+0x2a/0x420 [ 907.017464][T15046] ? __fget_files+0x3a0/0x420 [ 907.017498][T15046] __x64_sys_sendmsg+0x1bd/0x2a0 [ 907.017526][T15046] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 907.017561][T15046] ? __pfx_ksys_write+0x10/0x10 [ 907.017590][T15046] do_syscall_64+0x14d/0xf80 [ 907.017607][T15046] ? trace_irq_disable+0x3b/0x150 [ 907.017628][T15046] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.017646][T15046] ? clear_bhb_loop+0x40/0x90 [ 907.017668][T15046] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.017685][T15046] RIP: 0033:0x7f7f4019c799 [ 907.017703][T15046] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.017719][T15046] RSP: 002b:00007f7f410a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 907.017739][T15046] RAX: ffffffffffffffda RBX: 00007f7f40415fa0 RCX: 00007f7f4019c799 [ 907.017752][T15046] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 907.017763][T15046] RBP: 00007f7f410a8090 R08: 0000000000000000 R09: 0000000000000000 [ 907.017774][T15046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 907.017784][T15046] R13: 00007f7f40416038 R14: 00007f7f40415fa0 R15: 00007ffd99fcffe8 [ 907.017814][T15046] [ 909.024563][ C0] net_ratelimit: 16570 callbacks suppressed [ 909.024579][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.024582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.025042][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.030763][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.042913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.054770][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.066894][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.078620][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.090756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 909.102494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.034415][ C1] net_ratelimit: 63764 callbacks suppressed [ 914.034435][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.034725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.040446][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.052774][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.064261][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.076517][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.088174][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.100660][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.111966][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.124360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.044372][ C1] net_ratelimit: 67547 callbacks suppressed [ 919.044394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.044465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.050456][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.062750][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.074423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.086666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.098170][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.110529][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.122012][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 919.134167][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.054364][ C1] net_ratelimit: 69099 callbacks suppressed [ 924.054385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.054449][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.060412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.072743][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.084266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.096542][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.108028][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.120234][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.131947][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 924.144426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.064407][ C1] net_ratelimit: 71365 callbacks suppressed [ 929.064427][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.064443][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.070421][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.082895][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.094283][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.106527][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.118132][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.130400][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.142058][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 929.154384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.074412][ C1] net_ratelimit: 72076 callbacks suppressed [ 934.074432][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.074505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.080431][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.092546][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.104288][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.116780][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.128131][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.140361][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.151975][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 934.164260][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.094803][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 939.084415][ C1] net_ratelimit: 72093 callbacks suppressed [ 939.084436][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.084437][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.084852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.090448][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.102659][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.114309][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.126600][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.138152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.150286][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 939.161939][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.716164][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5620 ms [ 943.724193][ C1] lec:lec_tx_timeout: lec0 [ 944.094380][ C1] net_ratelimit: 72369 callbacks suppressed [ 944.094402][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.094522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.100420][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.112729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.124271][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.136590][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.148208][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.160448][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.171968][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 944.184381][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 947.512268][T30122] lec:lec_start_xmit: lec0:No lecd attached [ 949.104342][ C1] net_ratelimit: 70728 callbacks suppressed [ 949.104363][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.104474][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.110369][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.122692][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.134304][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.146540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.158078][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.170985][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.181919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 949.194081][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 952.676553][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5160 ms [ 952.684603][ C1] lec:lec_tx_timeout: lec0 [ 954.114391][ C1] net_ratelimit: 70057 callbacks suppressed [ 954.114412][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.114489][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.120416][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.132678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.144627][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.156979][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.168491][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.180793][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.192245][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 954.204493][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.124406][ C0] net_ratelimit: 71679 callbacks suppressed [ 959.124427][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.124635][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.130647][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.142418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.155364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.166203][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.178557][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.190137][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.202328][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 959.213983][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.134358][ C1] net_ratelimit: 71145 callbacks suppressed [ 964.134380][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.134869][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.140395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.152746][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.164436][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.176615][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.188270][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.200540][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.212113][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 964.224390][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.144378][ C1] net_ratelimit: 70652 callbacks suppressed [ 969.144399][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.144606][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.150405][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.162756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.174377][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.186595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.198219][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.211792][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.222080][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 969.234408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.154394][ C1] net_ratelimit: 72648 callbacks suppressed [ 974.154416][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.154671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.160421][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.172669][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.184277][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.196617][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.208130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.220418][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.231891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 974.244134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.164337][ C1] net_ratelimit: 71862 callbacks suppressed [ 979.164358][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.164549][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.170366][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.182670][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.194219][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.206503][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.217978][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.230233][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.241908][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 979.254383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.174360][ C1] net_ratelimit: 71668 callbacks suppressed [ 984.174369][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.174380][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.174464][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.180815][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.192265][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.204406][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.216167][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.228702][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.240030][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 984.252338][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.184364][ C1] net_ratelimit: 72808 callbacks suppressed [ 989.184385][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.184594][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.190396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.202735][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.214259][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.226558][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.238026][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.250256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.261966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 989.274480][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.194359][ C1] net_ratelimit: 72975 callbacks suppressed [ 994.194381][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.194655][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.200404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.212712][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.224244][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.236471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.248020][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.260277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.271957][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 994.284130][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.204337][ C1] net_ratelimit: 73268 callbacks suppressed [ 999.204357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.204402][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.210396][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.223279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.234217][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.246477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.258053][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.270459][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.281990][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 999.294244][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1002.590540][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 1004.214366][ C1] net_ratelimit: 74547 callbacks suppressed [ 1004.214387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.214529][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.220404][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.232385][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.244246][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.256241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.268099][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.280345][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.292032][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1004.304524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1007.717702][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5120 ms [ 1007.725750][ C1] lec:lec_tx_timeout: lec0 [ 1009.224369][ C1] net_ratelimit: 74997 callbacks suppressed [ 1009.224390][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.224554][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.230394][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.242873][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.254248][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.266491][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.278104][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.290404][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.302047][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1009.314255][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.234381][ C1] net_ratelimit: 75310 callbacks suppressed [ 1014.234391][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.234401][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.234481][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.240394][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.252284][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.264268][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.276130][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.288362][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.299976][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1014.312471][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.244460][ C0] net_ratelimit: 75049 callbacks suppressed [ 1019.244481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.244882][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.250813][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.262395][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.274738][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.286257][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.298154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.310022][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.322112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1019.333966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.254336][ C1] net_ratelimit: 74236 callbacks suppressed [ 1024.254357][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.254690][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.260364][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.272761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.284333][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.296558][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.308255][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.320593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.332099][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1024.344384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.264334][ C1] net_ratelimit: 74816 callbacks suppressed [ 1029.264355][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.264550][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.270375][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.282352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.294224][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.306241][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.318084][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.330340][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.342059][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1029.356482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1030.976384][ T5832] Bluetooth: hci1: command 0x0406 tx timeout [ 1034.274362][ C1] net_ratelimit: 71367 callbacks suppressed [ 1034.274383][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.274644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.280386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.292281][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.304474][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.316271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.328110][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.340313][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.352252][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1034.364569][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.284393][ C1] net_ratelimit: 33074 callbacks suppressed [ 1039.284414][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.284696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.290415][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.302674][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.314561][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.326515][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.338056][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.349958][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.362151][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1039.375078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.294610][ C1] net_ratelimit: 32757 callbacks suppressed [ 1044.294631][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.294666][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.300645][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.312872][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.324844][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.336882][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.348387][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.360678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.372471][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1044.384128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.304591][ C0] net_ratelimit: 32946 callbacks suppressed [ 1049.304610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.304656][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.310926][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.322595][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.334893][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.346736][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.358760][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.370261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.382158][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1049.394386][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.314603][ C1] net_ratelimit: 32427 callbacks suppressed [ 1054.314624][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.314725][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.320625][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:95:a6:83:6e:69, vlan:0) [ 1054.332524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.344409][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1054.356492][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.368342][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.380495][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.392492][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1054.404826][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1058.514280][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1058.521251][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15049/1:b..l P9452/1:b..l [ 1058.530918][ C1] rcu: (detected by 1, t=10503 jiffies, g=189493, q=183645 ncpus=2) [ 1058.538996][ C1] task:syz-executor state:R running task stack:23904 pid:9452 tgid:9452 ppid:5808 task_flags:0x40050c flags:0x00080002 [ 1058.553667][ C1] Call Trace: [ 1058.556959][ C1] [ 1058.559897][ C1] __schedule+0x1585/0x5340 [ 1058.564417][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1058.569393][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1058.574425][ C1] ? __pfx___schedule+0x10/0x10 [ 1058.579301][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 1058.584691][ C1] preempt_schedule_common+0x82/0xd0 [ 1058.589996][ C1] preempt_schedule_thunk+0x16/0x30 [ 1058.595211][ C1] _raw_spin_unlock+0x3f/0x50 [ 1058.599898][ C1] unmap_page_range+0x3b71/0x48f0 [ 1058.604976][ C1] ? __pfx_unmap_page_range+0x10/0x10 [ 1058.610365][ C1] ? mas_find+0xb0e/0xd30 [ 1058.614705][ C1] ? unmap_vmas+0x1c4/0x6a0 [ 1058.619219][ C1] unmap_vmas+0x48f/0x6a0 [ 1058.623570][ C1] ? __pfx_unmap_vmas+0x10/0x10 [ 1058.628454][ C1] exit_mmap+0x280/0xa10 [ 1058.632723][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 1058.637525][ C1] ? __pfx_exit_aio+0x10/0x10 [ 1058.642225][ C1] ? uprobe_clear_state+0x27c/0x290 [ 1058.647436][ C1] __mmput+0x118/0x430 [ 1058.651518][ C1] exit_mm+0x168/0x220 [ 1058.655600][ C1] do_exit+0x62e/0x2320 [ 1058.659770][ C1] ? __pfx_do_exit+0x10/0x10 [ 1058.664363][ C1] ? cgroup1_freezing+0x20/0x350 [ 1058.669314][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1058.674353][ C1] do_group_exit+0x21b/0x2d0 [ 1058.678952][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1058.684163][ C1] get_signal+0x1284/0x1330 [ 1058.688698][ C1] arch_do_signal_or_restart+0xbc/0x830 [ 1058.694253][ C1] ? __pfx___x64_sys_wait4+0x10/0x10 [ 1058.699541][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1058.704753][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1058.710935][ C1] exit_to_user_mode_loop+0x86/0x480 [ 1058.716229][ C1] ? rcu_is_watching+0x15/0xb0 [ 1058.721009][ C1] do_syscall_64+0x32d/0xf80 [ 1058.725600][ C1] ? trace_irq_disable+0x3b/0x150 [ 1058.730628][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.736702][ C1] ? clear_bhb_loop+0x40/0x90 [ 1058.741388][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.747302][ C1] RIP: 0033:0x7f9f4f957917 [ 1058.751722][ C1] RSP: 002b:00007ffc0f34f470 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 1058.760139][ C1] RAX: fffffffffffffe00 RBX: 000055556267c500 RCX: 00007f9f4f957917 [ 1058.768112][ C1] RDX: 0000000040000000 RSI: 00007ffc0f34f4cc RDI: ffffffffffffffff [ 1058.776090][ C1] RBP: 00007ffc0f34f4cc R08: 0000000000000000 R09: 0000000000000000 [ 1058.784063][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 1058.792039][ C1] R13: 0000000000000003 R14: 00007ffc0f34f728 R15: 0000000000000000 [ 1058.800035][ C1] [ 1058.803059][ C1] task:modprobe state:R running task stack:23904 pid:15049 tgid:15049 ppid:31516 task_flags:0x400000 flags:0x00080000 [ 1058.816554][ C1] Call Trace: [ 1058.819840][ C1] [ 1058.822781][ C1] __schedule+0x1585/0x5340 [ 1058.827301][ C1] ? __schedule+0x159b/0x5340 [ 1058.832008][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1058.836979][ C1] ? __pfx___schedule+0x10/0x10 [ 1058.841858][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1058.846894][ C1] irqentry_exit+0x599/0x620 [ 1058.851493][ C1] ? trace_irq_disable+0x3b/0x150 [ 1058.856533][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1058.862524][ C1] RIP: 0010:rcu_is_watching+0x67/0xb0 [ 1058.867911][ C1] Code: 89 f7 e8 4c 0b 85 00 48 c7 c3 58 f9 1c 93 49 03 1e 48 89 d8 48 c1 e8 03 42 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d 59 1a 71 11 <74> 11 83 e0 04 c1 e8 02 5b 41 5e 41 5f c3 cc cc cc cc cc e8 41 08 [ 1058.887520][ C1] RSP: 0018:ffffc9000dbfef60 EFLAGS: 00000286 [ 1058.893595][ C1] RAX: 00000000002090ec RBX: ffff8880b8633958 RCX: 0000000080000001 [ 1058.901573][ C1] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffffffff8c27a9a0 [ 1058.909556][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1058.917531][ C1] R10: ffffc9000dbff118 R11: ffffffff81b0b100 R12: 0000000000000002 [ 1058.925505][ C1] R13: ffffffff8e7602e0 R14: ffffffff8e1ab790 R15: dffffc0000000000 [ 1058.933491][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1058.939665][ C1] ? __kmalloc_noprof+0x316/0x760 [ 1058.944699][ C1] lock_acquire+0x57/0x2e0 [ 1058.949123][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1058.954223][ C1] ? __kmalloc_noprof+0x316/0x760 [ 1058.959225][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1058.964315][ C1] unwind_next_frame+0xc2/0x23c0 [ 1058.969228][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1058.974317][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 1058.979409][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 1058.984412][ C1] ? __kmalloc_noprof+0x316/0x760 [ 1058.989413][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1058.995541][ C1] arch_stack_walk+0x11b/0x150 [ 1059.000283][ C1] ? __kmalloc_noprof+0x316/0x760 [ 1059.005282][ C1] stack_trace_save+0xa9/0x100 [ 1059.010030][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1059.015392][ C1] save_stack+0x122/0x230 [ 1059.019703][ C1] ? __pfx_save_stack+0x10/0x10 [ 1059.024540][ C1] ? __free_frozen_pages+0xc2b/0xdb0 [ 1059.029808][ C1] ? __slab_free+0x263/0x2b0 [ 1059.034632][ C1] ? qlist_free_all+0x97/0x100 [ 1059.039370][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1059.044974][ C1] ? __kasan_slab_alloc+0x22/0x80 [ 1059.049978][ C1] ? __kmalloc_noprof+0x316/0x760 [ 1059.054983][ C1] ? page_ext_put+0x97/0xc0 [ 1059.059462][ C1] __reset_page_owner+0x71/0x1f0 [ 1059.064374][ C1] __free_frozen_pages+0xc2b/0xdb0 [ 1059.069466][ C1] __slab_free+0x263/0x2b0 [ 1059.073857][ C1] ? qlist_free_all+0x8c/0x100 [ 1059.078594][ C1] qlist_free_all+0x97/0x100 [ 1059.083157][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1059.088592][ C1] __kasan_slab_alloc+0x22/0x80 [ 1059.093415][ C1] __kmalloc_noprof+0x316/0x760 [ 1059.098240][ C1] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1059.103937][ C1] ? __kmalloc_noprof+0x1b8/0x760 [ 1059.108936][ C1] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1059.114468][ C1] tomoyo_check_open_permission+0x229/0x470 [ 1059.120336][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 1059.126376][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1059.132783][ C1] security_file_open+0xa9/0x240 [ 1059.137698][ C1] do_dentry_open+0x384/0x14e0 [ 1059.142443][ C1] ? vfs_open+0x31/0x340 [ 1059.146667][ C1] vfs_open+0x3b/0x340 [ 1059.150716][ C1] ? path_openat+0x2df0/0x3860 [ 1059.155456][ C1] path_openat+0x2e08/0x3860 [ 1059.160025][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1059.165373][ C1] ? stack_depot_save_flags+0x33/0x810 [ 1059.170810][ C1] ? __pfx_path_openat+0x10/0x10 [ 1059.175718][ C1] ? __x64_sys_openat+0x138/0x170 [ 1059.180717][ C1] ? do_syscall_64+0x14d/0xf80 [ 1059.185452][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.191494][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1059.196410][ C1] do_file_open+0x23e/0x4a0 [ 1059.200889][ C1] ? __pfx_do_file_open+0x10/0x10 [ 1059.205896][ C1] ? _raw_spin_unlock+0x28/0x50 [ 1059.210724][ C1] ? alloc_fd+0x64b/0x6c0 [ 1059.215032][ C1] do_sys_openat2+0x113/0x200 [ 1059.219686][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 1059.224860][ C1] ? fput_close_sync+0x1f8/0x240 [ 1059.229774][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 1059.235039][ C1] __x64_sys_openat+0x138/0x170 [ 1059.239868][ C1] do_syscall_64+0x14d/0xf80 [ 1059.244428][ C1] ? trace_irq_disable+0x3b/0x150 [ 1059.249428][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.255466][ C1] ? clear_bhb_loop+0x40/0x90 [ 1059.260117][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.265981][ C1] RIP: 0033:0x7f037fe9b0ba [ 1059.270372][ C1] RSP: 002b:00007ffea206d868 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 1059.278757][ C1] RAX: ffffffffffffffda RBX: 00007ffea206d8e0 RCX: 00007f037fe9b0ba [ 1059.286700][ C1] RDX: 0000000000080000 RSI: 00007ffea206d8e0 RDI: 00000000ffffff9c [ 1059.294643][ C1] RBP: 00007ffea206d8d0 R08: 00007ffea206dad7 R09: 0000000000000000 [ 1059.302587][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000018 [ 1059.310530][ C1] R13: 00007f037fe6f000 R14: 00007ffea206daf0 R15: 0000000000000000 [ 1059.318484][ C1] [ 1059.321503][ C1] rcu: rcu_preempt kthread starved for 9097 jiffies! g189493 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1059.328497][ C0] net_ratelimit: 36506 callbacks suppressed [ 1059.328514][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.332682][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1059.339142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.350511][ C1] rcu: RCU grace-period kthread stack dump: [ 1059.350523][ C1] task:rcu_preempt state:R running task stack:27664 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1059.350579][ C1] Call Trace: [ 1059.350587][ C1] [ 1059.350601][ C1] __schedule+0x1585/0x5340 [ 1059.350657][ C1] ? __pfx___schedule+0x10/0x10 [ 1059.350692][ C1] ? schedule+0x90/0x360 [ 1059.350721][ C1] schedule+0x164/0x360 [ 1059.350748][ C1] schedule_timeout+0x158/0x2c0 [ 1059.350776][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1059.350800][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1059.350831][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1059.350858][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1059.350883][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1059.350916][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1059.361394][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.372818][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1059.372845][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1059.379216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.392156][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1059.395900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.398365][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1059.402925][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.407660][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1059.407689][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1059.412080][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.416041][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1059.416072][ C1] kthread+0x388/0x470 [ 1059.421271][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.426241][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1059.426263][ C1] ? __pfx_kthread+0x10/0x10 [ 1059.432211][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.437695][ C1] ret_from_fork+0x51e/0xb90 [ 1059.437725][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1059.443779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1059.448071][ C1] ? __switch_to+0xc7d/0x1450 [ 1059.448099][ C1] ? __pfx_kthread+0x10/0x10 [ 1059.618054][ C1] ret_from_fork_asm+0x1a/0x30 [ 1059.622854][ C1] [ 1059.625877][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1059.632205][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1059.637411][ C0] NMI backtrace for cpu 0 [ 1059.637426][ C0] CPU: 0 UID: 0 PID: 3184 Comm: kworker/R-mld Not tainted syzkaller #0 PREEMPT(full) [ 1059.637444][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1059.637455][ C0] Workqueue: mld mld_query_work [ 1059.637479][ C0] RIP: 0010:check_preemption_disabled+0x1d/0xe0 [ 1059.637498][ C0] Code: 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 57 43 6e 07 65 8b 0d 4c 43 6e 07 f7 c1 ff ff ff 7f 74 0c 5b <41> 5e 41 5f 5d c3 cc cc cc cc cc 9c 59 f7 c1 00 02 00 00 74 ea 65 [ 1059.637512][ C0] RSP: 0018:ffffc90000006ab0 EFLAGS: 00000206 [ 1059.637524][ C0] RAX: 0000000000000000 RBX: ffff88804af57450 RCX: 0000000080000303 [ 1059.637536][ C0] RDX: 0000000000000000 RSI: ffffffff8c27a9e0 RDI: ffffffff8c27a9a0 [ 1059.637546][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1059.637555][ C0] R10: 00000000000000a1 R11: 0000000000000100 R12: 0000000000000000 [ 1059.637565][ C0] R13: ffff88804af57468 R14: 0000000000000000 R15: 0000000000000001 [ 1059.637575][ C0] FS: 0000000000000000(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 1059.637588][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1059.637599][ C0] CR2: 00007ffc2fe7ef40 CR3: 0000000079bbc000 CR4: 00000000003526f0 [ 1059.637613][ C0] Call Trace: [ 1059.637619][ C0] [ 1059.637627][ C0] rcu_is_watching+0x15/0xb0 [ 1059.637649][ C0] lock_acquire+0x57/0x2e0 [ 1059.637670][ C0] ? igmp6_event_query+0xfb/0x370 [ 1059.637689][ C0] _raw_spin_lock_bh+0x36/0x50 [ 1059.637709][ C0] ? igmp6_event_query+0xfb/0x370 [ 1059.637727][ C0] igmp6_event_query+0xfb/0x370 [ 1059.637747][ C0] icmpv6_rcv+0x132c/0x1cc0 [ 1059.637765][ C0] ? ipv6_chk_mcast_addr+0x77f/0x860 [ 1059.637785][ C0] ? __pfx_icmpv6_rcv+0x10/0x10 [ 1059.637800][ C0] ip6_protocol_deliver_rcu+0xe2d/0x1600 [ 1059.637836][ C0] ip6_input_finish+0x191/0x370 [ 1059.637852][ C0] NF_HOOK+0x336/0x3c0 [ 1059.637874][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1059.637888][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1059.637908][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1059.637930][ C0] ? __pfx_ip6_input_finish+0x10/0x10 [ 1059.637945][ C0] ? ipv6_chk_mcast_addr+0x2e/0x860 [ 1059.637967][ C0] ip6_input+0x16a/0x270 [ 1059.637979][ C0] ? ip6_input+0x23/0x270 [ 1059.637993][ C0] ip6_mc_input+0x655/0xbd0 [ 1059.638010][ C0] ? __pfx_ip6_mc_input+0x10/0x10 [ 1059.638027][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 1059.638049][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1059.638070][ C0] ip_sabotage_in+0x1e1/0x270 [ 1059.638086][ C0] ? __pfx_ip_sabotage_in+0x10/0x10 [ 1059.638104][ C0] nf_hook_slow+0xc5/0x220 [ 1059.638126][ C0] NF_HOOK+0x21f/0x3c0 [ 1059.638146][ C0] ? skb_orphan+0xaf/0xd0 [ 1059.638159][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1059.638180][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1059.638205][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1059.638228][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1059.638252][ C0] ? netif_receive_skb+0x102/0xc50 [ 1059.638269][ C0] netif_receive_skb+0x278/0xc50 [ 1059.638288][ C0] ? __pfx_netif_receive_skb+0x10/0x10 [ 1059.638306][ C0] ? br_netif_receive_skb+0x126/0x190 [ 1059.638326][ C0] NF_HOOK+0xa4/0x3a0 [ 1059.638342][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1059.638360][ C0] ? NF_HOOK+0xfa/0x3a0 [ 1059.638375][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1059.638393][ C0] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 1059.638413][ C0] ? br_pass_frame_up+0x275/0x420 [ 1059.638432][ C0] br_handle_frame_finish+0x14b2/0x1b40 [ 1059.638449][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 1059.638474][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1059.638496][ C0] ? ip6t_do_table+0xe3/0x1560 [ 1059.638517][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1059.638535][ C0] ? nf_hook_slow+0x176/0x220 [ 1059.638555][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1059.638572][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1059.638593][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1059.638611][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1059.638628][ C0] ? nf_nat_ipv6_in+0x203/0x2c0 [ 1059.638650][ C0] br_nf_pre_routing_finish_ipv6+0xa3a/0xd70 [ 1059.638668][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1059.638692][ C0] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 1059.638710][ C0] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 1059.638728][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1059.638748][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1059.638766][ C0] ? br_nf_pre_routing+0x720/0x1470 [ 1059.638786][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1059.638802][ C0] br_handle_frame+0x1277/0x1510 [ 1059.638824][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1059.638843][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1059.638860][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1059.638885][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1059.638901][ C0] __netif_receive_skb_core+0x98f/0x31a0 [ 1059.638921][ C0] ? ip6_input+0x226/0x270 [ 1059.638936][ C0] ? ip6_mc_input+0x655/0xbd0 [ 1059.638953][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1059.638973][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1059.638990][ C0] ? ip6_rcv_finish+0x29e/0x2e0 [ 1059.639012][ C0] ? NF_HOOK+0x336/0x3c0 [ 1059.639038][ C0] ? lock_acquire+0xf0/0x2e0 [ 1059.639059][ C0] ? process_backlog+0x3eb/0x1950 [ 1059.639076][ C0] ? process_backlog+0x3eb/0x1950 [ 1059.639094][ C0] ? process_backlog+0x3eb/0x1950 [ 1059.639112][ C0] process_backlog+0x76d/0x1950 [ 1059.639140][ C0] __napi_poll+0xae/0x340 [ 1059.639156][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1059.639175][ C0] net_rx_action+0x627/0xf70 [ 1059.639197][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1059.639224][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1059.639251][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 1059.639271][ C0] handle_softirqs+0x22a/0x870 [ 1059.639291][ C0] ? do_softirq+0x76/0xd0 [ 1059.639312][ C0] ? mld_query_work+0xa73/0x36e0 [ 1059.639331][ C0] do_softirq+0x76/0xd0 [ 1059.639348][ C0] [ 1059.639354][ C0] [ 1059.639360][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1059.639378][ C0] mld_query_work+0xa73/0x36e0 [ 1059.639404][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1059.639420][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1059.639436][ C0] ? __pfx_mld_query_work+0x10/0x10 [ 1059.639462][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1059.639481][ C0] ? process_scheduled_works+0xa25/0x1830 [ 1059.639500][ C0] process_scheduled_works+0xb02/0x1830 [ 1059.639532][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1059.639549][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1059.639572][ C0] rescuer_thread+0x824/0x1120 [ 1059.639598][ C0] ? rescuer_thread+0xbb/0x1120 [ 1059.639627][ C0] kthread+0x388/0x470 [ 1059.639641][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1059.639660][ C0] ? __pfx_kthread+0x10/0x10 [ 1059.639675][ C0] ret_from_fork+0x51e/0xb90 [ 1059.639695][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1059.639713][ C0] ? __switch_to+0xc7d/0x1450 [ 1059.639732][ C0] ? __pfx_kthread+0x10/0x10 [ 1059.639747][ C0] ret_from_fork_asm+0x1a/0x30 [ 1059.639777][ C0] [ 1064.334425][ C0] net_ratelimit: 37393 callbacks suppressed [ 1064.334446][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.334804][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:95:a6:83:6e:69, vlan:0) [ 1064.340759][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.352329][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1064.364631][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.376277][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.388107][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.400264][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.412048][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1064.423982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ee:95:a6:83:6e:69, vlan:0)