last executing test programs: 27.349520155s ago: executing program 2 (id=3534): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000800800", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) (fail_nth: 3) 27.20636483s ago: executing program 2 (id=3535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) unshare(0x22020400) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r5, &(0x7f0000001980)={0x27, 0x0, 0x1, 0x2}, 0x10) 26.728021771s ago: executing program 2 (id=3539): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x7c, &(0x7f0000000280)=ANY=[@ANYBLOB="bbb9bbbbbbbb0000e9ffffff86dd6076b2af000a2f01fc000000000000000000000000000000ff0200000000000000000000080000010000ce2000469078f7ff824a773ccbed1b6a6d7ae9c443d44e103fce97e0a3ca497b2b8841f0f47ea3d763d99303b1ea18e76d2b37338e3e7b67a2c29941000000000000"], 0x0) 26.700886871s ago: executing program 0 (id=3540): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300490004000000040000000ab20000000000006b294bca7ed34dd15ea11d17d5dd8b5da7347823b27034673ef336027a9769d63c004359034822dd89cb7b3368255ae46e552cc4a4f86297f590e6bb696809e238297b018f6c3b5d60dcd463fe"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d800800"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x38, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x6, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x4804) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 26.592040477s ago: executing program 4 (id=3543): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd80, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0xd46, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [], "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"}}}}}}}, 0x0) 26.472488622s ago: executing program 2 (id=3545): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) close(0x3) r3 = socket(0x10, 0x803, 0x0) write(r3, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=@gettfilter={0x34, 0x2e, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x1ffe5, 0x2}, {0x7, 0xffe0}, {0x1, 0x10}}, [{0x8, 0xb, 0x81}, {0x8, 0xb, 0xffff0001}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x80) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) setsockopt$inet6_int(r5, 0x29, 0x4e, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x87, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8000}, 0x1c) r6 = socket(0x10, 0x3, 0x0) r7 = epoll_create(0x7fffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r9, 0x29, 0x2, 0x0, &(0x7f00000000c0)) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xd9, @dev={0xfe, 0x80, '\x00', 0x35}, 0x5}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000a80)={r10, 0x18, "132bf2b2631e4a669e5ab545f4df3af85ad7e43ec2b12936"}, &(0x7f0000000180)=0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f0000000740)={0x0, ""/256, 0x0, 0x0, 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000340)={r8}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="14d42ecf13c48ba69da360adf18668b018ce3ab122f93453ac524d0f3551de21d6c218c7d58de3d453ee5397bd8fc329b72b9abfe3f5573463db08264b13cc6601c1f2cc4c1acbafaf01b264979767edb330617a8b6b19792e9545a65b81314cb543e66ac4a8119e5105b4dbb684e8750b4762ce2cc79bec1b774c2464e26572e9eac7c46a181a93cbdc55b666537cd878a60842958928d0b56dd054463c0fe0357c173611d1739c", @ANYRES64=r11, @ANYRESDEC=r12], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000000380)={"6ab494c9df01e8d3a21ad4f713592ae5", 0x0, 0x0, {0x90fc, 0xb}, {0xf, 0x8001}, 0x81, [0x1, 0x2, 0x2, 0x291, 0x5ddf, 0x7, 0x4, 0x1, 0x0, 0xffffffff, 0x2, 0x8, 0xbd, 0x1, 0x7, 0x3801]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000480)={"bc316f8ef9570501255ed3a0d943f97d", r12, r13, {0x8001, 0x10001}, {0x629, 0x2}, 0x7f, [0x400000000000, 0x3, 0x7fff, 0x4f9f06d0, 0x1, 0xe0, 0xb, 0x7f, 0x4, 0xfff, 0x5, 0x8000, 0x0, 0x80, 0x7, 0x1]}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x70bd26, 0x25dffbfb, {0x0, 0x0, 0x0, 0x0, 0x155a, 0x4c901}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ACTIVE_SLAVE={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008000}, 0x24048044) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xfff2}}}, 0x24}}, 0x0) 26.452479348s ago: executing program 4 (id=3546): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000007c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x1}, @empty, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) socket$packet(0x11, 0x2, 0x300) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="03030800030016000c0045f50028006500000411"], 0x32) 26.361421814s ago: executing program 1 (id=3547): r0 = socket(0x11, 0x3, 0x0) setsockopt(r0, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) sendmsg(r0, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r1, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000800800", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 26.203249593s ago: executing program 1 (id=3549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) unshare(0x22020400) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xd}], 0x1, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$nfc_raw(r5, &(0x7f0000001980)={0x27, 0x0, 0x1, 0x2}, 0x10) 26.038431518s ago: executing program 0 (id=3550): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000080000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x34, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x29, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r2, r1, 0x25, 0x0, @val=@perf_event={0x17}}, 0x18) syz_emit_ethernet(0x11dc0, &(0x7f0000006340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x23, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xf, 0x0, @opaque="cc30e06ad1b756"}}}}}, 0x0) 25.819196756s ago: executing program 3 (id=3552): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, &(0x7f0000000140)="0e0412b60f0c0df0f2747782bb714a766118ff5aa329fa94da4960", 0xfdef) 25.741354591s ago: executing program 3 (id=3553): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd80, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0xd46, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [], "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"}}}}}}}, 0x0) 25.565178646s ago: executing program 4 (id=3554): syz_emit_ethernet(0xfdef, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @redirect={0x8, 0x0, 0x0, @loopback, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast1}}}}}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) unshare(0x2a060400) getsockopt$inet_mreqsrc(r0, 0x0, 0x28, 0x0, 0x0) 25.509562861s ago: executing program 1 (id=3555): socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000850000007d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="190000000400000004"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{r2}, &(0x7f0000000240), &(0x7f0000000340)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000008c0)={r3, r1, 0x25, 0x2, @val=@tracing={0x0, 0x2e5b}}, 0x20) syz_emit_ethernet(0x7c, &(0x7f0000000280)=ANY=[@ANYBLOB="bbb9bbbbbbbb0000e9ffffff86dd6076b2af000a2f01fc000000000000000000000000000000ff0200000000000000000000080000010000ce2000469078f7ff824a773ccbed1b6a6d7ae9c443d44e103fce97e0a3ca497b2b8841f0f47ea3d763d99303b1ea18e76d2b37338e3e7b67a2c29941000000000000"], 0x0) 25.24675239s ago: executing program 3 (id=3556): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd80, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0xd46, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [], "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"}}}}}}}, 0x0) 25.215141444s ago: executing program 0 (id=3557): r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x60000800) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0xe642}, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000680)={r1, 0xfc01}, 0x8) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x50}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x34, 0x0, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0x13, 0x400, @l2={'ib', 0x3a, 'geneve0\x00'}}}}, [""]}, 0x34}}, 0x2001) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000001d80)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001d40)={&(0x7f0000000800)={0x12b4, 0x0, 0x5, 0x5, 0x0, 0x0, {0x2, 0x0, 0x5}, [{{0x254, 0x1, {{0x0, 0x10001}, 0x2, 0x3, 0x401, 0x3, 0x19, 'syz1\x00', "30bf5bea48e749ec71419289f4c5061810fafba150520ae7a7c63a64bba620cc", "731175beef0f2b9cc53936d56eecca0a50a52f178272b50950ce5c119f70e597", [{0x7, 0x5, {0x3, 0x2}}, {0x0, 0xd, {0x0, 0xca}}, {0x6, 0x8f4f, {0x0, 0x9}}, {0xfbff, 0x3, {0x3, 0x2}}, {0x401, 0x8, {0x3, 0x2}}, {0x1, 0x40, {0x2, 0x5}}, {0x9, 0xe96, {0x2, 0xfffffffb}}, {0x7, 0x7f, {0x1, 0x43}}, {0x4, 0x7ff, {0x3, 0x4}}, {0x0, 0xf930, {0x3, 0x3}}, {0x1, 0x8, {0x3}}, {0x50, 0x2a, {0x0, 0xffff7594}}, {0x7, 0xac, {0x3, 0x2}}, {0x9, 0x5, {0x3, 0xc324bf9}}, {0x4, 0x5, {0x1, 0x81b}}, {0x2, 0x9, {0x1, 0x6}}, {0x1, 0x5, {0x2, 0x59e4}}, {0x4, 0xa, {0x3, 0xd}}, {0x80, 0x6, {0x0, 0x7f}}, {0x3, 0x101, {0x2, 0x9}}, {0x40, 0xc, {0x2, 0x84}}, {0x7, 0x0, {0x0, 0x3}}, {0x0, 0x38e, {0x1, 0x9}}, {0x5, 0xfff9, {0x2}}, {0xff, 0x5, {0x2, 0x6}}, {0x6, 0x7, {0x2, 0x7fff}}, {0x2, 0xe, {0x0, 0x100}}, {0x200, 0x4, {0x1, 0x6}}, {0x9, 0x80cf, {0x1, 0x7}}, {0x3, 0x100}, {0x6, 0x3ff, {0x3, 0x3}}, {0x80, 0x3, {0x1, 0x7}}, {0x3, 0xc, {0x1, 0x10000}}, {0x4, 0x0, {0x1, 0x6fad6218}}, {0x4, 0x2, {0x0, 0xfffffffb}}, {0x0, 0x9, {0x1, 0x1}}, {0x3, 0x40, {0x1, 0x6}}, {0x101, 0x8, {0x3, 0x4}}, {0x9, 0x6, {0x1, 0x2}}, {0x80, 0x40, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x2, 0x81, 0x81, 0xda7, 0x25, 'syz1\x00', "ce8ee0fff1695cd15dd16752ccdf0019a0956cb2be5c2345dbaa1a1b19f018ee", "324eb1ac466094da4cb14ce51573d995e26a86412b3ef0b2a44f6d2335ec01c6", [{0x3f35, 0xfffd, {0x0, 0x40}}, {0x5, 0x0, {0x3, 0x1}}, {0xcff, 0xfffc, {0x3, 0x9}}, {0x3, 0x0, {0x0, 0xad}}, {0x8001, 0xf, {0x3, 0xb}}, {0x60, 0x400, {0x1, 0xdc8a}}, {0x5, 0x7, {0x0, 0x8000}}, {0x5, 0x3ff, {0x3, 0x2}}, {0x4, 0x18, {0x2, 0x3}}, {0x3, 0x7000, {0x3, 0xfffffff5}}, {0x200, 0xd, {0x1, 0x2}}, {0x0, 0xcf, {0x0, 0xb8d}}, {0x9, 0x8, {0x1, 0x4}}, {0xc, 0x81, {0x3, 0x299}}, {0xef1, 0x6c7, {0x0, 0xd9}}, {0x5, 0xca, {0x3, 0x5}}, {0x9, 0x3, {0x2}}, {0x8, 0x7, {0x2, 0x4}}, {0x2, 0x8, {0x1, 0x5a6a}}, {0xd, 0x9, {0x3, 0x6}}, {0x4, 0x4663, {0x7111affac04d9117, 0x7fff}}, {0x58, 0x7, {0x2, 0x9}}, {0x7ff, 0x10, {0x2, 0x800}}, {0x6, 0xfff3, {0x2, 0x1}}, {0x1, 0x8, {0x0, 0x5}}, {0x2, 0x1, {0x2}}, {0x8, 0x800, {0x0, 0x80000000}}, {0x919, 0x7, {0x1, 0x7f}}, {0xb87, 0xfff3, {0x1, 0x3}}, {0x40, 0x6, {0x1, 0xffffffff}}, {0xe, 0x5, {0x0, 0xa09}}, {0x5, 0x5, {0x0, 0x547cd59e}}, {0x3, 0x2, {0x0, 0x6}}, {0x7, 0x3, {0xb06a6a83167c6b8b, 0x88e1}}, {0xe65f, 0x7, {0x0, 0xf0000000}}, {0x48ec, 0x6, {0x2, 0x7f}}, {0x7f, 0x1ff, {0x1, 0x7}}, {0x8020, 0x3800, {0x0, 0x8}}, {0x0, 0x1, {0x0, 0xa}}, {0x5b44, 0x5, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x7fff}, 0x3, 0x6, 0x9, 0x8, 0x27, 'syz0\x00', "2665350491d670b2a0f88c29f686ca58e3c652e6d7934fc06fd74b52382fc01a", "b964ecaf153b90725d035e87bcd0a0c87e30117053f14a4cfd4315b8061078c8", [{0x8, 0x6}, {0x4, 0x4, {0x2, 0x2}}, {0x8, 0x1ff, {0x1, 0x7}}, {0x6, 0x8, {0x3, 0x6}}, {0x0, 0xffff, {0x1}}, {0x4, 0x6d75, {0x3, 0x6}}, {0x4, 0x4, {0x0, 0xffff4f66}}, {0x8ebf, 0x0, {0x2, 0xfffffffd}}, {0x4, 0x7, {0x3, 0x1}}, {0x7, 0x1, {0x2, 0x9}}, {0x4, 0xe, {0x1, 0x1}}, {0x8, 0x1000, {0x2, 0x10}}, {0x9, 0x7f, {0x3, 0xe28}}, {0xb, 0x7, {0x1, 0x1000}}, {0x8, 0x8, {0x2, 0x8}}, {0x0, 0x1e51, {0x3, 0x8}}, {0x9c4d, 0x46c8, {0x3, 0x3}}, {0x6, 0x7, {0x0, 0x5}}, {0x5, 0xfffe, {0x0, 0x1}}, {0x6, 0x3, {0x0, 0x10}}, {0x8, 0x7, {0x1, 0x9}}, {0x4, 0x40, {0x2, 0x2}}, {0xfffc, 0x8001, {0x0, 0x80000001}}, {0x6, 0x7fff, {0x0, 0x8}}, {0x5, 0x1000, {0x0, 0x200}}, {0xcfeb, 0x80, {0x3, 0x9}}, {0x6, 0x6, {0x2, 0x40}}, {0x80, 0x4, {0x0, 0x3ff}}, {0x9, 0xa, {0x0, 0x1ff}}, {0x7, 0x0, {0x1, 0x1}}, {0x1050, 0x8, {0x1, 0x2}}, {0x99dc, 0x3ff, {0x0, 0x40}}, {0x7, 0x0, {0x3, 0xffffffff}}, {0x0, 0x10, {0x2}}, {0x3, 0x0, {0x3, 0x80000001}}, {0x5, 0x9, {0x3}}, {0x40, 0x7fff, {0x3, 0x1}}, {0x3, 0x79, {0x2, 0x7}}, {0x9, 0x7fff, {0x2, 0x18000}}, {0x401, 0x1, {0x2, 0xfffffffe}}]}}}, {{0x254, 0x1, {{0x3, 0x6144a812}, 0x6, 0x2, 0x1ff, 0x4, 0x27, 'syz0\x00', "81afbe80b9717fc7eb35560c6480a2ea900aca4677b58231b1753bb83cf5f08f", "3a92315f821d1dde51855e11c6144e257d1dbe8f3dfb75c7736813ee38cb004e", [{0x3, 0x81, {0x3, 0xff}}, {0xe88, 0xf, {0x1, 0x40}}, {0x3ff, 0x5000, {0x2, 0x7fffffff}}, {0xfff, 0x4, {0x1, 0x6}}, {0x6, 0x0, {0x1, 0x5dce}}, {0x200, 0x2, {0x2, 0x5}}, {0x4, 0x10, {0x3, 0x4}}, {0x101, 0x1, {0x2, 0x7ff}}, {0x6, 0x1, {0x0, 0x8}}, {0xfffd, 0x2, {0x1, 0x200}}, {0xecc, 0x6, {0x2, 0xe80}}, {0x1, 0x5, {0x1, 0x101}}, {0x8, 0x1ff, {0x2}}, {0x7, 0x10, {0x2, 0x2}}, {0x45a1, 0x1, {0x2, 0x37}}, {0xb4, 0xee, {0x0, 0xfffffffa}}, {0xbd8, 0xfff, {0x3, 0x60000000}}, {0x8, 0x3, {0x3, 0x8}}, {0x1, 0xf, {0x3, 0x1}}, {0x3, 0x400, {0x0, 0x2}}, {0x8b, 0xbd9, {0x0, 0x50}}, {0x7, 0x8, {0x2, 0x5}}, {0x9, 0x9, {0x3, 0x36}}, {0x8000, 0xfffc, {0x3}}, {0x6, 0x57, {0x1, 0x1}}, {0x7f, 0x8, {0x3, 0x1ff}}, {0x9, 0x8, {0x3, 0x8}}, {0x4, 0xfffb, {0x0, 0x8d5}}, {0x8fa, 0x3, {0x3, 0x1ff}}, {0x5, 0x101, {0x1, 0xd}}, {0x1b, 0xffff, {0x1, 0x80f}}, {0x7, 0x2, {0x0, 0x9}}, {0x9f95, 0x7, {0x1, 0x2}}, {0xc328, 0xecda}, {0x3, 0x2f, {0x3, 0x9}}, {0x9, 0x5, {0x0, 0x80}}, {0x401, 0x8, {0x0, 0x3}}, {0x8, 0x6, {0x3, 0x2}}, {0x6, 0x7, {0x3, 0x6}}, {0x8001, 0x6, {0x2, 0x80000001}}]}}}, {{0x254, 0x1, {{0x2, 0x6f5ee8c9}, 0x0, 0x9, 0xb, 0x6, 0x1f, 'syz1\x00', "970b995cf453961ac7268294a5c6dea4ee52a42abaa6522b0c7153a8f43da0dd", "952ee4aa2427a887128a9b3fc0a1321321ed49195c44a2d982659b1428fa2c67", [{0x40, 0x8, {0x3, 0x5}}, {0x6, 0x7ff, {0x0, 0x8}}, {0x5a, 0x3ff, {0x3, 0xa9b8}}, {0x1, 0x1, {0x3, 0x8}}, {0xb3e, 0x2, {0x2, 0x4}}, {0x2, 0xb6, {0x3, 0x4}}, {0x6, 0x6, {0x0, 0xa}}, {0x9, 0xfffd, {0x1, 0x8}}, {0x8, 0x1ff, {0x0, 0x8}}, {0x0, 0x8, {0x1, 0xfffffff9}}, {0x8, 0x3, {0x3, 0x8000}}, {0x1ff, 0x3, {0x0, 0x4}}, {0xffff, 0x101, {0x2, 0x8}}, {0x5, 0x6c47, {0x2, 0x8}}, {0x1000, 0x2, {0x0, 0x400}}, {0x0, 0x800, {0x0, 0x9}}, {0x200, 0x6b98, {0x2, 0x1}}, {0xd, 0x0, {0x1, 0x8000}}, {0x2, 0xe, {0x0, 0x7}}, {0x4, 0x4, {0x1, 0x5}}, {0x10, 0x0, {0x3}}, {0xfff9, 0xe, {0x0, 0x480f}}, {0x9, 0x1, {0x1, 0x782}}, {0x7, 0x3, {0x0, 0x401}}, {0xfff9, 0x2, {0x1}}, {0x8, 0x8, {0x1, 0x68}}, {0x30, 0x5, {0x3, 0x6}}, {0x400, 0x2, {0x2, 0x2}}, {0x7, 0x9, {0x3, 0x23}}, {0x9, 0x9d10, {0x2, 0x7}}, {0x6, 0x386, {0x3, 0xe32712}}, {0x55, 0x2, {0x3, 0x3}}, {0x7, 0x800, {0x1, 0xfffffff8}}, {0x6, 0x9, {0x0, 0x7ff}}, {0x400, 0x4, {0x2, 0x7}}, {0xa, 0x8282, {0x0, 0x1}}, {0x2, 0x6, {0x3, 0x4}}, {0x9, 0x5, {0x3, 0x8000}}, {0xf49, 0x100, {0xf87da994e02bc80, 0x1}}, {0x0, 0x4, {0x1, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x6e1}, 0x6, 0xa8, 0x2, 0x6, 0x16, 'syz0\x00', "5866f2d9602544ac54486fa192f4100a0fe07904126602818e03ca7644720e69", "6cb140e5a3807d2096702fcb0f7801d97752c19100b255f94c3770e83a2ea259", [{0x4c73, 0x90, {0x2}}, {0xfff7, 0x0, {0x3, 0x1}}, {0x4, 0x7e3, {0x2, 0xd}}, {0x9, 0x3, {0x0, 0x2}}, {0x5, 0x7fff, {0x3, 0x2}}, {0x0, 0x4, {0x1, 0x7}}, {0x6, 0x1ff, {0x3, 0x3}}, {0x7, 0x6, {0x3, 0x80}}, {0x9, 0x4, {0x0, 0x79ff}}, {0x2, 0x2, {0x1, 0x3}}, {0x9, 0x17, {0x1, 0x2}}, {0xa195, 0x7ff, {0x2, 0x5}}, {0xfffe, 0x5, {0x0, 0x9}}, {0x5, 0x8, {0x0, 0xfffffff9}}, {0x9, 0x6, {0x1, 0x40}}, {0xa0e0, 0x4, {0x1, 0x345500}}, {0x2, 0x211, {0x0, 0x8}}, {0x5, 0x0, {0x3, 0xfffff108}}, {0x2, 0x9, {0x1, 0x48d}}, {0x5, 0x8, {0x0, 0x8053}}, {0x4, 0x8, {0x1, 0x80}}, {0x7bfa, 0x6, {0x2, 0x7f}}, {0xfffc, 0x10bb, {0x2, 0x1}}, {0x3, 0x8d2, {0x1, 0x3}}, {0x1, 0x0, {0x3, 0x7}}, {0x8, 0x2ec3, {0x1, 0x208}}, {0xa, 0x1, {0x3, 0x10001}}, {0x82, 0xb, {0x2, 0xa}}, {0xa4, 0x5, {0x3, 0xfffffc00}}, {0x34d8, 0x0, {0x0, 0xff}}, {0x400, 0x7c, {0x3, 0x8}}, {0x7ff, 0x5, {0x1, 0x9}}, {0x0, 0x3e6, {0x1, 0x390}}, {0x4, 0x999e, {0x0, 0x3}}, {0x8, 0x0, {0x3, 0x9}}, {0x55, 0x36e6, {0x0, 0xb}}, {0x5, 0x8, {0x2, 0x7}}, {0x8, 0x800, {0x2, 0xe}}, {0x3, 0xfeff, {0x2, 0x3}}, {0x8, 0x2, {0x1, 0xf916}}]}}}, {{0x254, 0x1, {{0x3, 0x6}, 0x2, 0x8, 0x75c, 0x5, 0x9, 'syz0\x00', "959ea09904a55c1e3a832b83c0791c8af5dddcdbc973b8bf2c91a1871c012039", "2773d95c51924b2f5eb57f4bfa05566061073438fe0927475749455eb66cb7ad", [{0x8, 0x1, {0x3, 0x9b4a}}, {0x800, 0x1, {0x3}}, {0x9, 0x0, {0x3}}, {0x4, 0x8, {0x0, 0x2}}, {0x8, 0x3, {0x1, 0x44b}}, {0xe6a, 0x6, {0x1, 0x1}}, {0xfffa, 0xfffc, {0x1, 0x9}}, {0xc290, 0x401, {0x1, 0x3}}, {0x1000, 0x64, {0x1, 0x1ee}}, {0x1, 0xfff8, {0x1, 0x81}}, {0xb, 0xa2a2, {0x0, 0x5}}, {0x5, 0x6, {0x2, 0x10000}}, {0x0, 0xfffe, {0x2, 0xb}}, {0x8001, 0x4, {0x2, 0x4}}, {0x5, 0x3, {0x1, 0xdd6b}}, {0x3, 0x5, {0x1, 0x198}}, {0x1000, 0x7, {0x1, 0x6}}, {0x1, 0x904, {0x0, 0x1}}, {0x5, 0x3, {0x1, 0x9}}, {0x9, 0xe, {0x0, 0xa}}, {0x6, 0xfff9, {0x3, 0x10}}, {0x1ff, 0x3, {0x0, 0x6}}, {0x1f, 0x6, {0x3, 0x4}}, {0x200, 0xffff, {0x1, 0x7}}, {0x7ff, 0x4, {0x1, 0x400}}, {0xe, 0x379, {0x1, 0x4173}}, {0xff7f, 0x8a, {0x0, 0x1}}, {0x3000, 0x6, {0x2, 0xffff0000}}, {0x1000, 0x1ff, {0x0, 0x7}}, {0x0, 0x5, {0x2, 0x1}}, {0x6, 0x6, {0x2}}, {0x100, 0x1, {0x3, 0x3}}, {0x2, 0x40, {0x3, 0x40b}}, {0x5, 0x9, {0x2, 0x7}}, {0x1, 0x9, {0x3, 0xf}}, {0x1, 0x6, {0x3, 0x7fffffff}}, {0x8e09, 0x7, {0x1}}, {0x9, 0x8001, {0x3, 0x9}}, {0x8, 0x7, {0x1}}, {0x1000, 0x7, {0x3, 0x1}}]}}}, {{0x254, 0x1, {{0x0, 0x3}, 0xff, 0x6, 0xc, 0x0, 0x1d, 'syz0\x00', "4c485fff77731ea9801f28ee5641d49146d3e89c0038ad36324366c18980614d", "c57ece9f699dc35ba49b55b2cc04277a934df8b37c17e03a47d231a4dcfdf56e", [{0x8, 0xe, {0x3, 0x7}}, {0x8, 0xfffe, {0x1, 0x1}}, {0x101, 0x73, {0xb53bcecdd54e5da6, 0x8}}, {0xe9ae, 0x3, {0x1, 0x6}}, {0x1400, 0x3, {0x2, 0x13}}, {0xa5d, 0x1, {0x2, 0xe5d}}, {0xdb2, 0x1ff, {0x2, 0x101}}, {0x2, 0x6, {0x2, 0x4490}}, {0x1000, 0x7d, {0x3, 0xe05}}, {0x1, 0x9, {0x2, 0x4}}, {0x7, 0x10, {0x3, 0x2}}, {0x0, 0x2, {0x3, 0x9}}, {0x356, 0x3, {0x1, 0x6}}, {0x8511, 0x3, {0x1, 0x401}}, {0xfffe, 0x3, {0x3, 0xfffffeff}}, {0x3, 0x4, {0x3, 0x99}}, {0x32, 0x9, {0x2, 0x2}}, {0x4, 0x5b, {0x1, 0x1}}, {0x401, 0x5d8, {0x2, 0x8}}, {0x4, 0x6, {0x1, 0x6}}, {0x8, 0x0, {0x0, 0x3ff}}, {0x3, 0xc473, {0x2, 0x4}}, {0x2, 0x8000, {0x2, 0x9}}, {0x3, 0x1ff, {0x1, 0x5}}, {0x9, 0x2, {0x0, 0x2}}, {0x7f, 0x9, {0x1, 0x2}}, {0xff, 0xff80, {0x3, 0x6}}, {0x2, 0x6, {0x2, 0x401}}, {0x2, 0x998, {0x1, 0x6}}, {0x400, 0x0, {0x3, 0x776}}, {0x5, 0x6, {0x2, 0x7}}, {0x58, 0x2, {0x3, 0xc55d}}, {0x7, 0xfffa, {0x3}}, {0x2, 0x486, {0x3, 0x6}}, {0x6, 0x1000, {0x2, 0x4}}, {0x1, 0x0, {0x1, 0x3}}, {0xa26c, 0x6, {0x0, 0x3ff}}, {0x401, 0x6, {0x3, 0x9}}, {0x6, 0x46, {0x1, 0x2}}, {0x7f, 0x0, {0x0, 0xfffff801}}]}}}]}, 0x12b4}}, 0x20000000) r3 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MAC_ACL(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001dc0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001f40)={&(0x7f0000001e40)={0xbc, r3, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_ACL_POLICY={0x8}, @NL80211_ATTR_MAC_ADDRS={0x40, 0xa6, 0x0, 0x1, [{0xa}, {0xa}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x28, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xbc}, 0x1, 0x0, 0x0, 0x24040015}, 0x4800) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000020c0)={&(0x7f0000002000)={0x94, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x4c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x732}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffd8f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x244}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fffffff}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) r4 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002780)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002740)={&(0x7f00000021c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x4}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x1}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}]}, @NFT_MSG_NEWRULE={0xfc, 0x6, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_USERDATA={0x37, 0x7, 0x1, 0x0, "ea6d8256aa6e1882d53a5bc01b35e7a7ad4542c1b272889b1a3a8faccbda8db5c3b882ec733a1f79f1e68c1406b92713bd6f2f"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT={0xc, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x73}]}, @NFTA_RULE_USERDATA={0x6d, 0x7, 0x1, 0x0, "1fe24f903bb7c512201bc9d794a093e4023267581f2e0e9ee11cb8f409fc21a8f4aa8be534db622d85c3626037a49fd2af05ab64219b5909d3d7f7978d331b3dd8d71856bd088895fe41845cc0e664d94c3548f0a633188a767dc950fc680a61eebc2c9ae9612cdcc5"}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0xd4, 0x2, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_USERDATA={0x36, 0x6, "115eb408a9ed28942a0021637bd591958e428308ac920c7df4103e00d805f8ba0b5662f54ad84dcc5aff515b81e8fecd9845"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x7c, 0x6, "56965e295c3ce8c5528973332f73aee5c46aad51870acf10a36c43dc826f5f5289d1a2524609af180f74657f49bd671a84f88782f780a2b34b2b58ab1b884b08c7e8c19e4448b8bfd1dcfb4d3593a593c40dd5f168f2a7daf24b479a55da8fb74c11e338dd577c7feb7ab7576f194e9a1bc9e90201780977"}]}, @NFT_MSG_DELFLOWTABLE={0x80, 0x18, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x58, 0x18, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_NEWTABLE={0xd0, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x9c, 0x6, "6d702b0a6fd0b80033cef294efba5c196ca6d46d20720639c51f05b207162ba7307759740a9de96685abaa494808c07ab9a92106237d5dffafcd1bab7ff8c42ecfdf04feef684c67e1e8bdc190b04f9b1d461c2348bf7b3aa369dd892dbe40d7370c725a54cff4e6d828659bba2e8f4d523c4e7f23c38aa06d569a8bdab2e534e0789e473db75c858ad6a2ea31b38dd6d3065eb38e63d22a"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x3e8}, 0x1, 0x0, 0x0, 0x10}, 0x20008800) accept4$x25(r4, &(0x7f00000027c0)={0x9, @remote}, &(0x7f0000002800)=0x12, 0x0) sendmsg$TIPC_NL_KEY_FLUSH(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002c80)={&(0x7f00000028c0)={0x3a4, 0x0, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0xe4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xf6f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0x30, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}]}, @TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa68}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7fff}]}]}, @TIPC_NLA_BEARER={0xf0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0xd, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0xc, @private0, 0x7}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x519e}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0xfffffffc, @mcast2, 0x3c}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x400, @private1, 0x4}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'ip6tnl0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4f2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xa}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MEDIA={0xb8, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x817}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x40, r3, 0x200, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x6, 0x38}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x9a}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x8, 0xbd, [0x8, 0x28f4]}]}, 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4810) openat$tun(0xffffffffffffff9c, &(0x7f0000002f40), 0x20000, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000002f80)={{0x2, 0x4e20, @multicast2}, {0x306, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, 0x22, {0x2, 0x4e21, @loopback}, 'ipvlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000003040)={'sit0\x00', &(0x7f0000003000)={@private1, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x7, 0xf}}) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000003080), 0x2, 0x0) 25.201917095s ago: executing program 2 (id=3558): socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="d7f9e9c3c85efc7beeae72576320", @ANYRESDEC], 0x5d) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}}, 0x1c) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c02000100000000000040000280ffffff05000500fffb00000a"], 0x80}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x3000, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 25.018095809s ago: executing program 4 (id=3559): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYRES32=0x0], 0xf0}}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0xffffff06, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1, 0x0, 0x0, 0x0, 0xfffd, 0xa}, {@in=@dev, 0x4000000, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x3}, {}, 0x0, 0x0, 0x2, 0x4, 0x4, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x154}, 0x1, 0x0, 0x0, 0x24004040}, 0x8000) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r2, 0x1) 25.001584827s ago: executing program 1 (id=3560): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0300490004000000040000000ab20000000000006b294bca7ed34dd15ea11d17d5dd8b5da7347823b27034673ef336027a9769d63c004359034822dd89cb7b3368255ae46e552cc4a4f86297f590e6bb696809e238297b018f6c3b5d60dcd463fe"], 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000076001f03000000000000000008000000ffffffff0c000d800800"], 0x24}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[], 0x4c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=@delchain={0x38, 0x64, 0xf31, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0x6, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x8, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}]}}]}, 0x38}}, 0x4804) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) 24.84503425s ago: executing program 3 (id=3561): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0xa, 0x0, &(0x7f0000001880)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x3, 0xfffffffc}, 0x70bd2a, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="3801000018000100feffffff0001000000000000000000000000ffffe0000002fc0100000000000000000000000000010001071c4e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac14142500000000000000000000000000000000000000009201000000000000a39b000000000000ffff0000000000001c250800000000000500000000000000fcffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000fefffffffffffffffafffffffcffffff00000000800000000035000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$ETHTOOL_MSG_WOL_GET(r1, 0x0, 0x8010) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000200)={@multicast, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0xfffd, 0x0, 0x4, 0x11, 0x0, @loopback, @multicast1}, {0x4e24, 0x17c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x400002e1) 24.721895709s ago: executing program 0 (id=3562): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) connect$unix(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000000)=[{r3, 0xa43c}, {r2, 0x4221}], 0x2, 0x0, 0x0, 0x0) recvmmsg$unix(r2, &(0x7f0000003c40), 0x0, 0x10000, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'ipvlan0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x1], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x8010) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x3, @local}, {0x1, @remote}, 0x4a, {0x2, 0x0, @remote}, 'veth1_to_bridge\x00'}) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @dev}, {0x0, @local}, 0x4a, {0x2, 0x0, @multicast2}, 'syz_tun\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008000) socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="b80000001900010000000000fddbdf25e00000010000000000000000000000002001000000000000000000000000000000000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000fcffffffffffffff0000000000000000000000000000000000020000000000001600680000000000000000000000000000000000000000000300000000000000feffffffffffffff00000000000000000400000000000000010000000000000000000000000000005ba64a0248b3dd719205fccfceae52458abc040a08ab487ca5bcf4a4d67e8582"], 0xb8}, 0x1, 0x0, 0x0, 0x37a5fce0bcf595dd}, 0x0) 24.616690632s ago: executing program 1 (id=3563): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, 0x0, 0x0) 24.516547709s ago: executing program 3 (id=3564): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newqdisc={0x68, 0x14, 0xf0b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x5, 0xa}, {0xd}, {0x4, 0xa}}, [@TCA_STAB={0x44, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x40, 0xfc, 0x200, 0x400a, 0x0, 0xfffffffd, 0x4}}, {0x4}}, {{0x1c, 0x1, {0x2, 0x4, 0x8, 0x409, 0x0, 0x8, 0x2}}, {0x4}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x24008814}, 0x20000040) r2 = socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r4, &(0x7f0000000240)="94", 0x1) vmsplice(r5, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c72326d1df18804a9ea20f9ece48f784d8ca2318e3d2b316666b5dfb7295c4915989d5bcb120e8fedaa97b93a137c256ce4", 0x20013644}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r3, r5, 0x2, 0x100000000000003) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0xe9, 0x8, 0x2}, 0x50) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r6, &(0x7f00000007c0), &(0x7f00000000c0)=@udp=r7, 0x1}, 0x20) writev(r2, &(0x7f00000001c0)=[{&(0x7f0000000400)="3900000013000347effffffffffffffff70000000100000045000000250000ec190b9503fdfc1f000200000000000006040000000000f93132", 0x39}], 0x1) 24.407354591s ago: executing program 1 (id=3565): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$unix(0x1, 0x3, 0x0) getsockopt$CAN_RAW_JOIN_FILTERS(r3, 0x65, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r7 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r7, r9, 0x25, 0x2, @void}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) r10 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES16=r10, @ANYBLOB="0100ae216700"], 0x18}, 0x1, 0x0, 0x0, 0x24000840}, 0x4000084) write$tun(r5, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0x3}]}}}}}}, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000002a80)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r12, 0x0, r13, 0x0, 0xf3a, 0x0) splice(r3, 0x0, r13, 0x0, 0x80, 0x8) vmsplice(r3, &(0x7f0000008ac0)=[{&(0x7f0000007a80)='u', 0x1}], 0x1, 0x0) write(r11, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xe}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) 24.393129581s ago: executing program 4 (id=3566): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xba7e}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xd80, &(0x7f0000001cc0)={@multicast, @remote, @val={@void, {0x8100, 0x6, 0x1, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x4, 0x6, '?5\b', 0xd46, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @remote, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0xb, 0x6, "821276", 0x5, 0x2c, 0x1, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, [], "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"}}}}}}}, 0x0) 23.596994429s ago: executing program 2 (id=3567): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000380)=@delqdisc={0x434, 0x25, 0x100, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff2}, {0xa, 0xd}, {0x47276c24c47c1f2a, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x3, 0xfffffff8, 0x4, 0x40, 0x0, 0x0, 0x5, 0x7fff, 0x4, 0x1, 0x6, 0x1c8, 0x7, 0x0, 0x5, 0x0, 0x8, 0x9, 0x9, 0x9, 0xf5, 0x200, 0x1, 0x5, 0x2000006, 0xffc, 0x67ae, 0x1, 0x80, 0x10000, 0x0, 0x6, 0xff, 0x4, 0x6, 0x9, 0xe6c1, 0x2, 0x65, 0x6, 0x5, 0x71, 0x1f146d7e, 0x80000001, 0x89, 0xe9, 0x80000001, 0x2, 0xff, 0x8, 0xffff8dc2, 0x400, 0x0, 0x2, 0xffff, 0x10001, 0x3ff, 0x0, 0x8, 0x5, 0x0, 0x5, 0x8, 0x5, 0x4, 0x401, 0x5, 0x8, 0x4ad1, 0x3, 0x25ae, 0x1, 0xfff, 0x6, 0xe, 0xffffffff, 0x7, 0x5, 0x10001, 0xfff, 0x8, 0xf, 0x0, 0x4, 0x626cfd3e, 0x0, 0x247, 0x2, 0xfffffffe, 0x4, 0xc6, 0x8, 0x7, 0xfffffffa, 0xfffffffc, 0x4, 0x1, 0x3, 0x0, 0x7, 0x2, 0xffff8000, 0xe13, 0x8, 0x7, 0xc, 0xfdc1, 0x7ff, 0x4, 0xfffffff0, 0x4, 0x7fff, 0x5036, 0x1, 0x1f1f, 0x7, 0x665195e5, 0xfe3, 0x7, 0x5, 0x8, 0x7, 0x4, 0x800, 0x101, 0x400, 0x7ff, 0x6, 0xd, 0x9, 0x7, 0xc5, 0x99, 0x4, 0x2e9, 0x4, 0x3, 0x401, 0xfffffffe, 0x7, 0x80000000, 0x3, 0x0, 0x4, 0x37, 0x4, 0x31, 0x2, 0x2, 0x3, 0x6, 0x3, 0x690c, 0x368d, 0x9, 0x2, 0xe, 0x8, 0x770b, 0x5597, 0x3, 0x4, 0x7fff, 0x62, 0xf6, 0x5, 0x0, 0x7fffffff, 0x9, 0x9, 0x2, 0x100, 0x6, 0x101, 0x5, 0x2, 0x3, 0x30e, 0xfc8d, 0x8, 0x3ff, 0x3, 0xaeb3, 0x3, 0x5, 0x9, 0xfc, 0x8000, 0x1, 0x7, 0x20000, 0x4, 0x0, 0x9f85, 0x65, 0x0, 0x0, 0x2, 0x4, 0x6, 0x7, 0xd92, 0x40, 0xfff, 0xe1, 0x8, 0x426, 0x5, 0x9, 0x1, 0x1000, 0x9, 0x36ae765f, 0x401, 0x9, 0x200000, 0x3, 0x4, 0x5, 0x0, 0x89, 0x5, 0x80000000, 0x9c4, 0x1, 0x41632842, 0x3, 0x10, 0x2, 0x8001, 0x5, 0x100, 0x8, 0x9, 0xfe64, 0xd, 0x1c2, 0x2, 0x6, 0x2, 0x80000001, 0xa, 0x6, 0xfffffffc, 0x5, 0x100003, 0x7f, 0x8001, 0x5, 0x3, 0x6, 0x2, 0x10002, 0x5, 0xb, 0x1b]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x44814}, 0x8010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'ip6gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x4000000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x51, 0x3, 0x7}, @TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x4}]}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000280)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x0, 0x5, {{0x5, 0x4, 0x0, 0x2, 0x14, 0x66, 0x0, 0x2, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000300)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'syztnl1\x00', &(0x7f0000001080)={'gretap0\x00', 0x0, 0x8, 0x1, 0x5, 0x6, {{0x2d, 0x4, 0x3, 0x6, 0xb4, 0x65, 0x0, 0x2, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x39}, {[@timestamp_prespec={0x44, 0x1c, 0xdc, 0x3, 0xd, [{@rand_addr=0x64010101, 0xfdffe2e4}, {@empty, 0x1}, {@private=0xa010100, 0x9}]}, @cipso={0x86, 0x4e, 0xffffffffffffffff, [{0x2, 0x12, "9029086dbc1a7606ffb59fc977457dcf"}, {0x1, 0x2}, {0x7, 0xb, "0643618ad0ebbe9e1d"}, {0x6, 0xe, "ec5536f17b1c732342a2f067"}, {0x2, 0x9, "3a334a50cb23dc"}, {0x6, 0xd, "920c1a511c91903bbc8b98"}, {0x0, 0x5, "256af2"}]}, @lsrr={0x83, 0x1f, 0x37, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @rand_addr=0x64010102, @empty, @multicast2, @loopback]}, @timestamp_prespec={0x44, 0x14, 0xe8, 0x3, 0x1, [{@local, 0xffd}, {@local, 0x10000}]}]}}}}}) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r6) getsockname$packet(r6, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010003704000080000000000000000000", @ANYRES32=r7, @ANYBLOB="c324050000000000240012800b00010067656e65766500001400028005000c0001"], 0x44}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1c0000200000010000deff0008000000", @ANYRES32=r7, @ANYBLOB="ac1414aaffffffff000000001400000000000000000000000700"/36], 0x38}, 0x200000e0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@gettfilter={0x5c, 0x2e, 0x300, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xf, 0xa}, {0xfff3, 0x3}, {0xfff2, 0x10}}, [{0x8, 0xb, 0x7f}, {0x8, 0xb, 0x4}, {0x8, 0xb, 0x7}, {0x8, 0xb, 0xa2}, {0x8, 0xb, 0x7ff}, {0x8, 0xb, 0xebc}, {0x8, 0xb, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000980)={'ip6gre0\x00', &(0x7f0000000900)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x0, 0x9, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x7800, 0x80, 0xe, 0xe}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000a40)={'syztnl0\x00', &(0x7f00000009c0)={'syztnl2\x00', 0x0, 0x40, 0x10, 0x6f, 0x3, {{0x15, 0x4, 0x3, 0x6, 0x54, 0x64, 0x0, 0x8, 0x2f, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x34, 0x66, 0x1, 0x1, [{@multicast2, 0x9}, {@remote, 0x6}, {@loopback, 0xfffffeff}, {@remote, 0x4}, {@empty}, {@multicast2, 0x401}]}, @noop, @rr={0x7, 0xb, 0x82, [@private=0xa010100, @broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000ac0)={'tunl0\x00', &(0x7f0000000a80)={'syztnl1\x00', 0x0, 0x8000, 0x7800, 0x6, 0x19c7, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x68, 0x0, 0x8, 0x4, 0x0, @empty, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000b00)={0x0, @loopback, @broadcast}, &(0x7f0000000b40)=0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000b80)=0x0, &(0x7f0000000bc0)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000000), 0xc, &(0x7f0000000f40)={&(0x7f00000012c0)=ANY=[@ANYBLOB="68020000", @ANYRES16=0x0, @ANYBLOB="00042dbd7000ffdbdf25090000007c000180140002006d6163766c616e300000000000000000080003000200000008000100", @ANYRES32=r13, @ANYBLOB="1400020073797a6b616c6c65723000000000000008000300000000001400020076657468315f746f5f687372000000001400020076657468305f746f5f7465616d000000080003000500000008000100", @ANYRES32=0x0, @ANYBLOB="0c00018008000100", @ANYRES32=0x0, @ANYBLOB="68000180080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="140002006873723000000000000000000000000008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="140002006d61637674617030000000000000000008000300030000001400020070696d36726567300000000000000000480001800800030002000000080003000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="080003000300000014000200766574683000000000000000000000003400018008000100", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="0800030001000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="0800010e7b209514de962000", @ANYRES32=0x0, @ANYBLOB="0c00018008000300010000002c00018008000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="080003000100000008000100", @ANYRES32=r13, @ANYBLOB="5000018008000100", @ANYRES32=r14, @ANYBLOB="14000200697036746e6c300000000000000000001400020064756d6d793000000000000000000000140002006272696467655f736c6176655f30000008000300020000006000018008000100", @ANYRES32=r15, @ANYBLOB="080003000200000008000100", @ANYRES32=r16, @ANYBLOB="1400020076657468305f746f5f6272696467650014000200776732000000000000000000000000000800030000000000140002006261746164765f736c6176655f310000"], 0x268}, 0x1, 0x0, 0x0, 0x400c0}, 0x40) ppoll(&(0x7f0000000140)=[{}, {}, {0xffffffffffffffff, 0x1}, {r6, 0x6000}, {0xffffffffffffffff, 0x4}], 0x5, 0x0, 0x0, 0x0) 23.452830231s ago: executing program 0 (id=3568): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x138, 0x10, 0x633, 0x70bd2c, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x5, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x3a}, {@in=@multicast2, 0xfffffffd, 0x32}, @in=@local, {0x1, 0x3, 0x9, 0x9, 0x2, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x5f, 0xa}, {0x1}, 0x100, 0x0, 0x2, 0x0, 0x0, 0x23}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r1, &(0x7f0000000140)="0e0412b60f0c0df0f2747782bb714a766118ff5aa329fa94da4900", 0xfdef) (fail_nth: 7) 23.151698197s ago: executing program 3 (id=3569): r0 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x80000000}, 0xc, &(0x7f0000000fc0)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x8041) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@alu={0x7, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffff0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 22.929794358s ago: executing program 4 (id=3570): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20008014}, 0x40040d0) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000200)='9', 0x1, 0x20008080, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r2, 0x0, 0xc000) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(0xffffffffffffffff, 0x8915, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) sendmmsg(r0, &(0x7f0000004380)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}}], 0x34000, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window], 0x5) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 0 (id=3571): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) close(0x3) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000020900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002402000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001000000000000"], 0xa4}}, 0x0) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x7fffffff) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000084000000020000000a000008"], 0x20, 0x880}, 0x8050) close(0x3) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x84}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0x10, 0x0, 0x0, {}, [{0x22, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x16}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x4004010) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000dd000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x60, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) socket$inet(0x2, 0x2, 0x1) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, 0x0, &(0x7f0000000240)) (async) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0xffe7}], 0x11, &(0x7f0000000040)=[@ip_tos_int={{0x14, 0x0, 0x7, 0x40000000}}], 0x18}, 0x804) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a28000000000a010300000000000000000100000008000240000000020900010073797a310000000054000000030a01020000000000000000010000000900030073797a300000000028000480080002402000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000014000000110001000000000000"], 0xa4}}, 0x0) (async) socket(0xa, 0x5, 0x0) (async) listen(r3, 0x7fffffff) (async) sendmsg$inet_sctp(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="200000000000000084000000020000000a000008"], 0x20, 0x880}, 0x8050) (async) close(0x3) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x84}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2}, 0x50) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000140), &(0x7f0000000180)=r4}, 0x20) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=@newtaction={0x48, 0x30, 0x10, 0x0, 0x0, {}, [{0x22, 0x1, [@m_skbmod={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x16}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x4004010) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000630000dd000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x60, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) (async) kernel console output (not intermixed with test programs): __pfx_tun_get_user+0x10/0x10 [ 312.768706][T14569] ? __lock_acquire+0x6df/0x2e50 [ 312.768736][T14569] ? ref_tracker_alloc+0x341/0x4b0 [ 312.768761][T14569] ? lock_acquire+0x115/0x350 [ 312.768779][T14569] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 312.768807][T14569] ? lock_acquire+0x115/0x350 [ 312.768824][T14569] ? tun_get+0x1c/0x2f0 [ 312.768851][T14569] ? tun_get+0x1c/0x2f0 [ 312.768874][T14569] ? tun_get+0x1c/0x2f0 [ 312.768899][T14569] tun_chr_write_iter+0x113/0x200 [ 312.768919][T14569] vfs_write+0x612/0xba0 [ 312.768949][T14569] ? __pfx_vfs_write+0x10/0x10 [ 312.768982][T14569] ? __fget_files+0x2a/0x420 [ 312.769012][T14569] ksys_write+0x150/0x270 [ 312.769038][T14569] ? __pfx_ksys_write+0x10/0x10 [ 312.769072][T14569] do_syscall_64+0x166/0x520 [ 312.769095][T14569] ? trace_irq_disable+0x3b/0x140 [ 312.769111][T14569] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.769130][T14569] ? clear_bhb_loop+0x70/0xc0 [ 312.769151][T14569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.769169][T14569] RIP: 0033:0x7fe3aa55e98e [ 312.769186][T14569] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 312.769202][T14569] RSP: 002b:00007fe3ab37ffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 312.769221][T14569] RAX: ffffffffffffffda RBX: 00007fe3ab3806c0 RCX: 00007fe3aa55e98e [ 312.769235][T14569] RDX: 0000000000000072 RSI: 0000200000000180 RDI: 00000000000000c8 [ 312.769246][T14569] RBP: 00007fe3ab380090 R08: 0000000000000000 R09: 0000000000000000 [ 312.769258][T14569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.769268][T14569] R13: 00007fe3aa826038 R14: 00007fe3aa825fa0 R15: 00007ffc39e9e018 [ 312.769296][T14569] [ 312.802825][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 312.805828][T14396] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 312.925553][T14396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 313.191423][T14578] syzkaller0: entered promiscuous mode [ 313.191472][T14578] syzkaller0: entered allmulticast mode [ 313.532517][T14396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.536161][T14597] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 313.549625][T14596] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3032'. [ 313.550713][ T5617] Bluetooth: hci4: command tx timeout [ 313.624554][T14396] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.662127][ T1223] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.662256][ T1223] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.706275][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.706439][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.626474][ T5617] Bluetooth: hci4: command tx timeout [ 316.879685][T14396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.964493][T14396] veth0_vlan: entered promiscuous mode [ 316.974927][T14396] veth1_vlan: entered promiscuous mode [ 317.008690][T14396] veth0_macvtap: entered promiscuous mode [ 317.033562][T14396] veth1_macvtap: entered promiscuous mode [ 317.059946][T14396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.069925][T14396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.081828][T14630] ip_tables: iptables: counters copy to user failed while replacing table [ 317.120372][ T38] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.120438][ T38] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.120489][ T38] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.120525][ T38] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.154386][ T1305] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.312214][T14612] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 318.455981][T14642] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3041'. [ 318.472957][T14642] netlink: 'syz.3.3041': attribute type 2 has an invalid length. [ 318.495826][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.495878][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.546697][T14643] netlink: 480 bytes leftover after parsing attributes in process `syz.1.3040'. [ 318.546811][T14643] netlink: 480 bytes leftover after parsing attributes in process `syz.1.3040'. [ 318.691889][T14643] syzkaller1: entered promiscuous mode [ 318.691947][T14643] syzkaller1: entered allmulticast mode [ 318.713709][T14648] syzkaller0: entered allmulticast mode [ 318.738309][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.738353][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.759098][T14645] syzkaller0: mtu less than device minimum [ 319.009308][T14655] FAULT_INJECTION: forcing a failure. [ 319.009308][T14655] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.023309][T14655] CPU: 1 UID: 0 PID: 14655 Comm: syz.2.2973 Not tainted syzkaller #0 PREEMPT(full) [ 319.023334][T14655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.023346][T14655] Call Trace: [ 319.023353][T14655] [ 319.023361][T14655] dump_stack_lvl+0xe8/0x150 [ 319.023391][T14655] should_fail_ex+0x410/0x560 [ 319.023432][T14655] _copy_from_user+0x2d/0xb0 [ 319.023451][T14655] ___sys_sendmsg+0x1c6/0x360 [ 319.023468][T14655] ? __lock_acquire+0x6df/0x2e50 [ 319.023491][T14655] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.023541][T14655] ? __fget_files+0x2a/0x420 [ 319.023563][T14655] ? __fget_files+0x3a2/0x420 [ 319.023592][T14655] __x64_sys_sendmsg+0x1b1/0x290 [ 319.023614][T14655] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.023652][T14655] do_syscall_64+0x166/0x520 [ 319.023674][T14655] ? trace_irq_disable+0x3b/0x140 [ 319.023690][T14655] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.023708][T14655] ? clear_bhb_loop+0x70/0xc0 [ 319.023728][T14655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.023745][T14655] RIP: 0033:0x7fe63179e159 [ 319.023763][T14655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.023778][T14655] RSP: 002b:00007fe63273b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.023798][T14655] RAX: ffffffffffffffda RBX: 00007fe631a25fa0 RCX: 00007fe63179e159 [ 319.023811][T14655] RDX: 0000000000044000 RSI: 0000200000000100 RDI: 0000000000000004 [ 319.023821][T14655] RBP: 00007fe63273b090 R08: 0000000000000000 R09: 0000000000000000 [ 319.023833][T14655] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.023844][T14655] R13: 00007fe631a26038 R14: 00007fe631a25fa0 R15: 00007ffe8df91748 [ 319.023872][T14655] [ 319.271794][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3044'. [ 319.328462][T14662] FAULT_INJECTION: forcing a failure. [ 319.328462][T14662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.328509][T14662] CPU: 0 UID: 0 PID: 14662 Comm: syz.3.3046 Not tainted syzkaller #0 PREEMPT(full) [ 319.328530][T14662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.328540][T14662] Call Trace: [ 319.328547][T14662] [ 319.328555][T14662] dump_stack_lvl+0xe8/0x150 [ 319.328586][T14662] should_fail_ex+0x410/0x560 [ 319.328617][T14662] _copy_from_user+0x2d/0xb0 [ 319.328636][T14662] kstrtouint_from_user+0xd6/0x180 [ 319.328663][T14662] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 319.328696][T14662] ? lock_acquire+0x115/0x350 [ 319.328719][T14662] proc_fail_nth_write+0x8e/0x210 [ 319.328746][T14662] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.328781][T14662] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 319.328807][T14662] vfs_write+0x296/0xba0 [ 319.328840][T14662] ? __pfx_vfs_write+0x10/0x10 [ 319.328866][T14662] ? __fget_files+0x2a/0x420 [ 319.328901][T14662] ? __fget_files+0x3a2/0x420 [ 319.328923][T14662] ? __fget_files+0x2a/0x420 [ 319.328955][T14662] ksys_write+0x150/0x270 [ 319.328985][T14662] ? __pfx_ksys_write+0x10/0x10 [ 319.329021][T14662] do_syscall_64+0x166/0x520 [ 319.329045][T14662] ? trace_irq_disable+0x3b/0x140 [ 319.329062][T14662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.329081][T14662] ? clear_bhb_loop+0x70/0xc0 [ 319.329104][T14662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.329122][T14662] RIP: 0033:0x7fac9755e98e [ 319.329140][T14662] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 319.329156][T14662] RSP: 002b:00007fac957f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 319.329175][T14662] RAX: ffffffffffffffda RBX: 00007fac957f66c0 RCX: 00007fac9755e98e [ 319.329188][T14662] RDX: 0000000000000001 RSI: 00007fac957f60a0 RDI: 0000000000000008 [ 319.329200][T14662] RBP: 00007fac957f6090 R08: 0000000000000000 R09: 0000000000000000 [ 319.329211][T14662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.329222][T14662] R13: 00007fac97826038 R14: 00007fac97825fa0 R15: 00007ffe80d610a8 [ 319.329253][T14662] [ 319.689783][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 319.700369][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 319.709934][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 319.722723][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 319.733337][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 319.793786][T14672] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3050'. [ 319.872307][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3050'. [ 319.886124][T14682] netlink: 'syz.3.3050': attribute type 1 has an invalid length. [ 320.114137][T14691] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.3053'. [ 320.269418][T14696] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3055'. [ 320.279021][T14696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3055'. [ 320.285504][T14698] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3056'. [ 320.302340][T14698] netlink: 'syz.4.3056': attribute type 2 has an invalid length. [ 320.353951][ T2479] block nbd2: Possible stuck request ffff888026ae5080: control (read@0,1024B). Runtime 90 seconds [ 320.354004][ T2479] block nbd2: Possible stuck request ffff888026ae5240: control (read@1024,1024B). Runtime 90 seconds [ 320.354045][ T2479] block nbd2: Possible stuck request ffff888026ae5400: control (read@2048,1024B). Runtime 90 seconds [ 320.354072][ T2479] block nbd2: Possible stuck request ffff888026ae55c0: control (read@3072,1024B). Runtime 90 seconds [ 320.459839][T14703] netlink: 'syz.2.3055': attribute type 4 has an invalid length. [ 320.511416][T14696] netlink: 'syz.2.3055': attribute type 4 has an invalid length. [ 321.309125][T14673] lo speed is unknown, defaulting to 1000 [ 321.786529][ T52] Bluetooth: hci2: command tx timeout [ 322.053489][T14759] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 322.210366][ T1223] dvmrp0: left allmulticast mode [ 322.385547][ T1223] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 322.432537][ T1223] bond0 (unregistering): Released all slaves [ 322.449567][ T1223] bond1 (unregistering): Released all slaves [ 322.470948][ T1223] bond2 (unregistering): Released all slaves [ 322.490661][ T1223] team0: Port device bond3 removed [ 322.502635][ T1223] bond3 (unregistering): Released all slaves [ 322.634067][ T1223] tipc: Left network mode [ 322.769791][T14673] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.769966][T14673] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.770107][T14673] bridge_slave_0: entered allmulticast mode [ 322.772351][T14673] bridge_slave_0: entered promiscuous mode [ 322.775242][T14673] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.775343][T14673] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.775764][T14673] bridge_slave_1: entered allmulticast mode [ 322.777766][T14673] bridge_slave_1: entered promiscuous mode [ 322.881918][T14673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.890957][T14673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.934453][T14673] team0: Port device team_slave_0 added [ 322.943780][T14673] team0: Port device team_slave_1 added [ 322.990403][T14673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.990445][T14673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.990467][T14673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.992219][T14673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.992232][T14673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 322.992254][T14673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.038899][T14673] hsr_slave_0: entered promiscuous mode [ 323.039907][T14673] hsr_slave_1: entered promiscuous mode [ 323.040647][T14673] debugfs: 'hsr0' already exists in 'hsr' [ 323.040665][T14673] Cannot create hsr debugfs directory [ 323.230486][ T1223] hsr_slave_0: left promiscuous mode [ 323.235987][ T1223] hsr_slave_1: left promiscuous mode [ 323.866765][ T52] Bluetooth: hci2: command tx timeout [ 324.585022][T14745] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 324.586789][T14757] netlink: 'syz.0.3074': attribute type 2 has an invalid length. [ 324.645838][T14673] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 324.692134][T14673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 324.701966][T14673] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 324.735761][T14673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 324.746653][T14673] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 324.782050][T14673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 324.792158][T14673] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 324.814468][T14673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 324.826551][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 325.169254][T14673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.193842][T14673] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.231359][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.231481][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.265220][ T1223] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.265345][ T1223] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.591983][T14809] __nla_validate_parse: 4 callbacks suppressed [ 325.592043][T14809] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3082'. [ 325.614926][T14809] RDS: rds_bind could not find a transport for ::ffff:10.1.1.2, load rds_tcp or rds_rdma? [ 325.708894][T14809] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 325.946442][ T52] Bluetooth: hci2: command tx timeout [ 326.014763][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3087'. [ 326.022530][T14826] netlink: 'syz.2.3087': attribute type 2 has an invalid length. [ 326.025968][T14824] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3086'. [ 326.234966][T14837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3089'. [ 326.687771][T14849] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3093'. [ 326.894581][T14673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.069229][T14862] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3096'. [ 327.069282][T14862] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3096'. [ 327.145264][T14868] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3096'. [ 327.145308][T14868] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3096'. [ 327.255935][T14875] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3099'. [ 327.420328][T14673] veth0_vlan: entered promiscuous mode [ 327.451268][T14673] veth1_vlan: entered promiscuous mode [ 327.535352][T14673] veth0_macvtap: entered promiscuous mode [ 327.567394][T14866] syzkaller0: mtu less than device minimum [ 327.575681][T14673] veth1_macvtap: entered promiscuous mode [ 327.611593][T14673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.650602][T14673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.776822][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.816511][ T6679] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.827466][ T6679] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.867602][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.909252][ T116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.909291][ T116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.985013][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.985055][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.013319][T14895] netlink: 'syz.0.3105': attribute type 4 has an invalid length. [ 328.026197][T14895] netlink: 'syz.0.3105': attribute type 4 has an invalid length. [ 328.029682][ T52] Bluetooth: hci2: command tx timeout [ 328.191976][T14902] netlink: 'syz.4.3107': attribute type 2 has an invalid length. [ 328.645196][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.661453][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.674873][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.684052][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.691849][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.121844][T14921] netlink: 'syz.1.3113': attribute type 1 has an invalid length. [ 329.157380][T14921] gretap0: entered promiscuous mode [ 329.412849][T14909] lo speed is unknown, defaulting to 1000 [ 329.673176][T14943] FAULT_INJECTION: forcing a failure. [ 329.673176][T14943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.673230][T14943] CPU: 1 UID: 0 PID: 14943 Comm: syz.2.3122 Not tainted syzkaller #0 PREEMPT(full) [ 329.673250][T14943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 329.673260][T14943] Call Trace: [ 329.673265][T14943] [ 329.673272][T14943] dump_stack_lvl+0xe8/0x150 [ 329.673300][T14943] should_fail_ex+0x410/0x560 [ 329.673329][T14943] _copy_from_user+0x2d/0xb0 [ 329.673348][T14943] __copy_msghdr+0x390/0x590 [ 329.673370][T14943] ___sys_sendmsg+0x213/0x360 [ 329.673387][T14943] ? __lock_acquire+0x6df/0x2e50 [ 329.673409][T14943] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.673458][T14943] ? __fget_files+0x2a/0x420 [ 329.673480][T14943] ? __fget_files+0x3a2/0x420 [ 329.673511][T14943] __x64_sys_sendmsg+0x1b1/0x290 [ 329.673531][T14943] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 329.673569][T14943] do_syscall_64+0x166/0x520 [ 329.673592][T14943] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.673610][T14943] ? clear_bhb_loop+0x70/0xc0 [ 329.673632][T14943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.673650][T14943] RIP: 0033:0x7fe63179e159 [ 329.673667][T14943] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.673683][T14943] RSP: 002b:00007fe63273b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.673711][T14943] RAX: ffffffffffffffda RBX: 00007fe631a25fa0 RCX: 00007fe63179e159 [ 329.673724][T14943] RDX: 0000000000044000 RSI: 0000200000000100 RDI: 0000000000000003 [ 329.673736][T14943] RBP: 00007fe63273b090 R08: 0000000000000000 R09: 0000000000000000 [ 329.673747][T14943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.673758][T14943] R13: 00007fe631a26038 R14: 00007fe631a25fa0 R15: 00007ffe8df91748 [ 329.673787][T14943] [ 329.730238][T14945] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 329.965772][T14951] netlink: 'syz.1.3124': attribute type 2 has an invalid length. [ 330.000903][T14956] netlink: 'syz.2.3126': attribute type 17 has an invalid length. [ 330.232069][T14965] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 330.260242][T14909] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.271112][T14909] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.278626][T14909] bridge_slave_0: entered allmulticast mode [ 330.296137][T14909] bridge_slave_0: entered promiscuous mode [ 330.312219][T14909] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.320764][T14909] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.320994][T14909] bridge_slave_1: entered allmulticast mode [ 330.341880][T14909] bridge_slave_1: entered promiscuous mode [ 330.434631][T14909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.453302][T14909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.525481][T14909] team0: Port device team_slave_0 added [ 330.538895][T14909] team0: Port device team_slave_1 added [ 330.586227][T14909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 330.586268][T14909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.617467][T14909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 330.619927][T14909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 330.619942][T14909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 330.619966][T14909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.736045][T14909] hsr_slave_0: entered promiscuous mode [ 330.742793][T14909] hsr_slave_1: entered promiscuous mode [ 330.743468][T14909] debugfs: 'hsr0' already exists in 'hsr' [ 330.743486][T14909] Cannot create hsr debugfs directory [ 330.758226][ T5617] Bluetooth: hci0: command tx timeout [ 330.941065][ T38] IPVS: starting estimator thread 0... [ 331.044446][T14981] IPVS: using max 44 ests per chain, 105600 per kthread [ 331.081591][ T31] audit: type=1800 audit(1788487648.690:2): pid=14983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3135" name=B702 dev="tmpfs" ino=150 res=0 errno=0 [ 331.233377][T14990] __nla_validate_parse: 11 callbacks suppressed [ 331.233437][T14990] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3138'. [ 331.571571][T15002] FAULT_INJECTION: forcing a failure. [ 331.571571][T15002] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.571640][T15002] CPU: 0 UID: 0 PID: 15002 Comm: syz.1.3142 Not tainted syzkaller #0 PREEMPT(full) [ 331.571663][T15002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 331.571675][T15002] Call Trace: [ 331.571682][T15002] [ 331.571690][T15002] dump_stack_lvl+0xe8/0x150 [ 331.571721][T15002] should_fail_ex+0x410/0x560 [ 331.571754][T15002] _copy_to_user+0x31/0xb0 [ 331.571775][T15002] simple_read_from_buffer+0xe1/0x170 [ 331.571806][T15002] proc_fail_nth_read+0x1bb/0x230 [ 331.571832][T15002] ? common_file_perm+0x20e/0x2b0 [ 331.571863][T15002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.571893][T15002] ? rw_verify_area+0x24a/0x4c0 [ 331.571920][T15002] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 331.571944][T15002] vfs_read+0x213/0xa80 [ 331.571971][T15002] ? __pfx___mutex_lock+0x10/0x10 [ 331.571995][T15002] ? __pfx_vfs_read+0x10/0x10 [ 331.572022][T15002] ? __fget_files+0x2a/0x420 [ 331.572049][T15002] ? __fget_files+0x3a2/0x420 [ 331.572070][T15002] ? __fget_files+0x2a/0x420 [ 331.572100][T15002] ksys_read+0x150/0x270 [ 331.572125][T15002] ? __pfx_ksys_read+0x10/0x10 [ 331.572156][T15002] do_syscall_64+0x166/0x520 [ 331.572180][T15002] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.572208][T15002] ? clear_bhb_loop+0x70/0xc0 [ 331.572230][T15002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.572248][T15002] RIP: 0033:0x7f98cb35e98e [ 331.572269][T15002] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 331.572285][T15002] RSP: 002b:00007f98cc2b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 331.572305][T15002] RAX: ffffffffffffffda RBX: 00007f98cc2b26c0 RCX: 00007f98cb35e98e [ 331.572319][T15002] RDX: 000000000000000f RSI: 00007f98cc2b20a0 RDI: 0000000000000006 [ 331.572332][T15002] RBP: 00007f98cc2b2090 R08: 0000000000000000 R09: 0000000000000000 [ 331.572344][T15002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.572356][T15002] R13: 00007f98cb626038 R14: 00007f98cb625fa0 R15: 00007ffc0989e298 [ 331.572386][T15002] [ 331.652972][T15004] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3141'. [ 332.070006][T15014] bond1: entered promiscuous mode [ 332.077360][T15014] bond1: entered allmulticast mode [ 332.083090][T15014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 332.127685][T15023] netlink: 204 bytes leftover after parsing attributes in process `syz.4.3148'. [ 332.295015][T15026] FAULT_INJECTION: forcing a failure. [ 332.295015][T15026] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 332.308671][T15026] CPU: 1 UID: 0 PID: 15026 Comm: syz.4.3150 Not tainted syzkaller #0 PREEMPT(full) [ 332.308695][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.308704][T15026] Call Trace: [ 332.308711][T15026] [ 332.308718][T15026] dump_stack_lvl+0xe8/0x150 [ 332.308748][T15026] should_fail_ex+0x410/0x560 [ 332.308775][T15026] _copy_from_iter+0x1d3/0x1660 [ 332.308802][T15026] ? __alloc_skb+0x27a/0x7a0 [ 332.308827][T15026] ? __alloc_skb+0x27a/0x7a0 [ 332.308853][T15026] ? __alloc_skb+0x27a/0x7a0 [ 332.308877][T15026] ? __pfx__copy_from_iter+0x10/0x10 [ 332.308899][T15026] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 332.308924][T15026] ? __alloc_skb+0x27a/0x7a0 [ 332.308945][T15026] ? __alloc_skb+0x27a/0x7a0 [ 332.308975][T15026] ? netlink_sendmsg+0x650/0xb40 [ 332.308994][T15026] ? skb_put+0x112/0x210 [ 332.309022][T15026] netlink_sendmsg+0x6c0/0xb40 [ 332.309051][T15026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.309078][T15026] ? apparmor_socket_sendmsg+0x98/0x360 [ 332.309114][T15026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.309132][T15026] sock_sendmsg_nosec+0x13a/0x180 [ 332.309156][T15026] ____sys_sendmsg+0x54e/0x850 [ 332.309178][T15026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.309204][T15026] ? import_iovec+0x73/0xa0 [ 332.309233][T15026] ___sys_sendmsg+0x2a5/0x360 [ 332.309249][T15026] ? __lock_acquire+0x6df/0x2e50 [ 332.309272][T15026] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.309294][T15026] ? kstrtouint+0x6e/0xe0 [ 332.309339][T15026] ? __fget_files+0x2a/0x420 [ 332.309360][T15026] ? __fget_files+0x3a2/0x420 [ 332.309391][T15026] __sys_sendmmsg+0x273/0x4d0 [ 332.309414][T15026] ? __pfx___sys_sendmmsg+0x10/0x10 [ 332.309440][T15026] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 332.309477][T15026] ? ksys_write+0x242/0x270 [ 332.309505][T15026] ? __pfx_ksys_write+0x10/0x10 [ 332.309534][T15026] __x64_sys_sendmmsg+0xa0/0xc0 [ 332.309555][T15026] do_syscall_64+0x166/0x520 [ 332.309578][T15026] ? trace_irq_disable+0x3b/0x140 [ 332.309595][T15026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.309613][T15026] ? clear_bhb_loop+0x70/0xc0 [ 332.309635][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.309653][T15026] RIP: 0033:0x7fe3aa59e159 [ 332.309671][T15026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.309686][T15026] RSP: 002b:00007fe3ab380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 332.309706][T15026] RAX: ffffffffffffffda RBX: 00007fe3aa825fa0 RCX: 00007fe3aa59e159 [ 332.309720][T15026] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 332.309732][T15026] RBP: 00007fe3ab380090 R08: 0000000000000000 R09: 0000000000000000 [ 332.309744][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.309754][T15026] R13: 00007fe3aa826038 R14: 00007fe3aa825fa0 R15: 00007ffc39e9e018 [ 332.309784][T15026] [ 332.645557][T14909] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 332.673923][T14909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 332.685208][T14909] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 332.705098][T14909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 332.708764][T14909] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 332.742245][T14909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 332.743383][T14909] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 332.765801][T14909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.827394][ T5617] Bluetooth: hci0: command tx timeout [ 332.971936][T14909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.991471][T15045] FAULT_INJECTION: forcing a failure. [ 332.991471][T15045] name failslab, interval 1, probability 0, space 0, times 0 [ 332.991523][T15045] CPU: 0 UID: 0 PID: 15045 Comm: syz.2.3152 Not tainted syzkaller #0 PREEMPT(full) [ 332.991542][T15045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 332.991551][T15045] Call Trace: [ 332.991557][T15045] [ 332.991564][T15045] dump_stack_lvl+0xe8/0x150 [ 332.991592][T15045] should_fail_ex+0x410/0x560 [ 332.991621][T15045] ? __alloc_skb+0x1db/0x7a0 [ 332.991646][T15045] should_failslab+0xa8/0x100 [ 332.991677][T15045] ? __alloc_skb+0x1db/0x7a0 [ 332.991697][T15045] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 332.991723][T15045] ? __alloc_skb+0x18d/0x7a0 [ 332.991747][T15045] ? __alloc_skb+0x1db/0x7a0 [ 332.991777][T15045] __alloc_skb+0x1db/0x7a0 [ 332.991803][T15045] netlink_sendmsg+0x5d4/0xb40 [ 332.991828][T15045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.991855][T15045] ? apparmor_socket_sendmsg+0x98/0x360 [ 332.991881][T15045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 332.991901][T15045] sock_sendmsg_nosec+0x13a/0x180 [ 332.991926][T15045] ____sys_sendmsg+0x54e/0x850 [ 332.991949][T15045] ? __pfx_____sys_sendmsg+0x10/0x10 [ 332.991975][T15045] ? import_iovec+0x73/0xa0 [ 332.992005][T15045] ___sys_sendmsg+0x2a5/0x360 [ 332.992021][T15045] ? __lock_acquire+0x6df/0x2e50 [ 332.992043][T15045] ? __pfx____sys_sendmsg+0x10/0x10 [ 332.992091][T15045] ? __fget_files+0x2a/0x420 [ 332.992113][T15045] ? __fget_files+0x3a2/0x420 [ 332.992144][T15045] __x64_sys_sendmsg+0x1b1/0x290 [ 332.992163][T15045] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 332.992200][T15045] do_syscall_64+0x166/0x520 [ 332.992222][T15045] ? trace_irq_disable+0x3b/0x140 [ 332.992239][T15045] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.992256][T15045] ? clear_bhb_loop+0x70/0xc0 [ 332.992278][T15045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 332.992295][T15045] RIP: 0033:0x7fe63179e159 [ 332.992312][T15045] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 332.992327][T15045] RSP: 002b:00007fe63273b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 332.992346][T15045] RAX: ffffffffffffffda RBX: 00007fe631a25fa0 RCX: 00007fe63179e159 [ 332.992359][T15045] RDX: 0000000000000000 RSI: 00002000000010c0 RDI: 0000000000000004 [ 332.992371][T15045] RBP: 00007fe63273b090 R08: 0000000000000000 R09: 0000000000000000 [ 332.992382][T15045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 332.992392][T15045] R13: 00007fe631a26038 R14: 00007fe631a25fa0 R15: 00007ffe8df91748 [ 332.992421][T15045] [ 333.080127][T14909] 8021q: adding VLAN 0 to HW filter on device team0 [ 333.113692][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.113793][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.160356][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.160479][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 334.400589][T15090] netlink: 83 bytes leftover after parsing attributes in process `syz.3.3165'. [ 334.681818][T14909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.801725][T14909] veth0_vlan: entered promiscuous mode [ 334.833254][T14909] veth1_vlan: entered promiscuous mode [ 334.907017][ T5617] Bluetooth: hci0: command tx timeout [ 335.045763][T15102] bond1: entered promiscuous mode [ 335.045823][T15102] bond1: entered allmulticast mode [ 335.046237][T15102] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.079057][T14909] veth0_macvtap: entered promiscuous mode [ 335.102882][T14909] veth1_macvtap: entered promiscuous mode [ 335.142002][T14909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 335.151602][T14909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 335.257622][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.257690][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.257717][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.257743][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 335.464387][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.464436][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.565611][ T116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.574314][ T116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.721241][T15119] netlink: 83 bytes leftover after parsing attributes in process `syz.1.3175'. [ 335.910632][T15122] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 336.051168][ T52] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 336.063367][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 336.075477][T15122] bond2 (unregistering): Released all slaves [ 336.082717][ T52] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 336.091054][ T52] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.105005][ T52] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.557703][T15139] syzkaller1: entered promiscuous mode [ 336.557747][T15139] syzkaller1: entered allmulticast mode [ 336.809722][T15146] openvswitch: netlink: IP tunnel dst address not specified [ 336.845972][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3180'. [ 336.894914][T15130] lo speed is unknown, defaulting to 1000 [ 337.000551][ T52] Bluetooth: hci0: command tx timeout [ 337.341448][T15165] netlink: 83 bytes leftover after parsing attributes in process `syz.0.3186'. [ 337.352448][T15160] x_tables: duplicate underflow at hook 3 [ 337.354797][T15160] IPVS: set_ctl: invalid protocol: 135 172.30.1.2:20004 [ 337.701053][T15176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3189'. [ 337.701795][T15176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3189'. [ 337.802880][T15181] FAULT_INJECTION: forcing a failure. [ 337.802880][T15181] name failslab, interval 1, probability 0, space 0, times 0 [ 337.818616][T15181] CPU: 1 UID: 0 PID: 15181 Comm: syz.4.3191 Not tainted syzkaller #0 PREEMPT(full) [ 337.818650][T15181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 337.818662][T15181] Call Trace: [ 337.818669][T15181] [ 337.818677][T15181] dump_stack_lvl+0xe8/0x150 [ 337.818706][T15181] should_fail_ex+0x410/0x560 [ 337.818734][T15181] should_failslab+0xa8/0x100 [ 337.818755][T15181] __kvmalloc_node_noprof+0x176/0x820 [ 337.818777][T15181] ? page_pool_create_percpu+0x2ef/0xc70 [ 337.818800][T15181] ? page_pool_create_percpu+0x2ef/0xc70 [ 337.818829][T15181] page_pool_create_percpu+0x2ef/0xc70 [ 337.818856][T15181] bpf_test_run_xdp_live+0x23a/0x1c20 [ 337.818882][T15181] ? __pfx_stack_trace_save+0x10/0x10 [ 337.818907][T15181] ? __lock_acquire+0x6df/0x2e50 [ 337.818928][T15181] ? stack_depot_save_flags+0x33/0x7f0 [ 337.818956][T15181] ? kasan_save_track+0x4f/0x80 [ 337.818973][T15181] ? kasan_save_track+0x3e/0x80 [ 337.818987][T15181] ? __kasan_kmalloc+0x93/0xb0 [ 337.819004][T15181] ? __kmalloc_noprof+0x36b/0x720 [ 337.819032][T15181] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 337.819052][T15181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.819102][T15181] ? lock_acquire+0x115/0x350 [ 337.819132][T15181] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 337.819157][T15181] ? _copy_from_user+0x94/0xb0 [ 337.819174][T15181] ? bpf_test_init+0x113/0x150 [ 337.819191][T15181] ? xdp_convert_md_to_buff+0x5b/0x330 [ 337.819213][T15181] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 337.819249][T15181] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 337.819274][T15181] ? __fget_files+0x2a/0x420 [ 337.819303][T15181] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 337.819325][T15181] bpf_prog_test_run+0x2c5/0x340 [ 337.819350][T15181] __sys_bpf+0xa22/0xd90 [ 337.819377][T15181] ? __pfx___sys_bpf+0x10/0x10 [ 337.819406][T15181] ? __fget_files+0x2a/0x420 [ 337.819443][T15181] ? ksys_write+0x242/0x270 [ 337.819471][T15181] ? __pfx_ksys_write+0x10/0x10 [ 337.819501][T15181] __x64_sys_bpf+0xba/0xd0 [ 337.819521][T15181] do_syscall_64+0x166/0x520 [ 337.819548][T15181] ? trace_irq_disable+0x3b/0x140 [ 337.819564][T15181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.819582][T15181] ? clear_bhb_loop+0x70/0xc0 [ 337.819603][T15181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.819621][T15181] RIP: 0033:0x7fe3aa59e159 [ 337.819638][T15181] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.819663][T15181] RSP: 002b:00007fe3ab380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 337.819683][T15181] RAX: ffffffffffffffda RBX: 00007fe3aa825fa0 RCX: 00007fe3aa59e159 [ 337.819696][T15181] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a [ 337.819707][T15181] RBP: 00007fe3ab380090 R08: 0000000000000000 R09: 0000000000000000 [ 337.819717][T15181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 337.819727][T15181] R13: 00007fe3aa826038 R14: 00007fe3aa825fa0 R15: 00007ffc39e9e018 [ 337.819757][T15181] [ 337.889578][T15181] page_pool_create_percpu() gave up with errno -12 [ 338.189979][ T52] Bluetooth: hci1: command tx timeout [ 338.203177][T15130] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.203448][T15130] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.203590][T15130] bridge_slave_0: entered allmulticast mode [ 338.205248][T15130] bridge_slave_0: entered promiscuous mode [ 338.210871][T15130] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.211014][T15130] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.211170][T15130] bridge_slave_1: entered allmulticast mode [ 338.214643][T15130] bridge_slave_1: entered promiscuous mode [ 338.373071][T15130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.402565][T15130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.500568][T15130] team0: Port device team_slave_0 added [ 338.512487][T15130] team0: Port device team_slave_1 added [ 338.707262][T15130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.716753][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.742855][T15130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.755802][T15130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.764532][T15130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 338.795971][T15130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.842132][T15214] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3202'. [ 338.890183][T15214] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3202'. [ 338.899169][T15130] hsr_slave_0: entered promiscuous mode [ 338.900257][T15130] hsr_slave_1: entered promiscuous mode [ 338.900979][T15130] debugfs: 'hsr0' already exists in 'hsr' [ 338.900997][T15130] Cannot create hsr debugfs directory [ 338.902800][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3204'. [ 339.505118][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3209'. [ 339.570850][T15130] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.804550][T15130] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.851956][T15234] syzkaller1: entered promiscuous mode [ 339.851984][T15234] syzkaller1: entered allmulticast mode [ 339.959767][T15130] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.308406][T15243] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 340.890851][T15253] Bluetooth: MGMT ver 1.23 [ 341.844751][T15264] netlink: 'syz.1.3220': attribute type 1 has an invalid length. [ 341.917541][T15130] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.021258][T15268] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3222'. [ 342.064162][T15243] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.339950][T15243] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.521616][T15243] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.733114][T15283] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3227'. [ 342.928019][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3227'. [ 342.928062][T15283] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3227'. [ 342.954832][T15285] netlink: 'syz.4.3227': attribute type 3 has an invalid length. [ 342.955081][T15285] netlink: 'syz.4.3227': attribute type 3 has an invalid length. [ 343.084781][T15130] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 343.105807][T15130] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.113361][T15130] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 343.143304][T15130] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.296497][ T6679] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.299825][T15130] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 343.332924][T15130] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.338409][T15130] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 343.368960][T15130] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.560239][T15305] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3232'. [ 343.586407][ T116] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.586518][ T116] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.662338][ T116] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.844789][T15313] netlink: 'syz.1.3234': attribute type 31 has an invalid length. [ 343.881862][T15130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.952240][T15318] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 344.003456][T15130] 8021q: adding VLAN 0 to HW filter on device team0 [ 344.033916][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.034014][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 344.065251][ T116] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.065379][ T116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 344.158166][T15130] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.209900][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3242'. [ 344.464701][T15344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3244'. [ 344.479803][T15346] Bluetooth: hci0: unsupported parameter 5135 [ 344.479865][T15346] Bluetooth: hci0: unsupported parameter 8192 [ 344.479878][T15346] Bluetooth: hci0: unsupported parameter 5135 [ 344.479889][T15346] Bluetooth: hci0: unsupported parameter 8192 [ 344.571661][T15350] xt_LOG: prefix is not null-terminated [ 344.715036][T15353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3250'. [ 344.843464][T15362] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3249'. [ 345.278561][T15130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.441107][T15384] netlink: 'syz.2.3258': attribute type 39 has an invalid length. [ 345.488693][T15130] veth0_vlan: entered promiscuous mode [ 345.514299][T15130] veth1_vlan: entered promiscuous mode [ 345.574119][T15130] veth0_macvtap: entered promiscuous mode [ 345.588499][T15130] veth1_macvtap: entered promiscuous mode [ 345.630738][T15130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.656639][T15130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.774583][T15403] syz.4.3265: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 345.774732][T15403] CPU: 1 UID: 0 PID: 15403 Comm: syz.4.3265 Not tainted syzkaller #0 PREEMPT(full) [ 345.774754][T15403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.774765][T15403] Call Trace: [ 345.774773][T15403] [ 345.774781][T15403] dump_stack_lvl+0xe8/0x150 [ 345.774811][T15403] warn_alloc+0x24d/0x270 [ 345.774842][T15403] ? kasan_save_track+0x4f/0x80 [ 345.774857][T15403] ? kasan_save_track+0x3e/0x80 [ 345.774878][T15403] ? __pfx_warn_alloc+0x10/0x10 [ 345.774903][T15403] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 345.774931][T15403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.774969][T15403] __vmalloc_node_range_noprof+0x127/0x1540 [ 345.775016][T15403] ? rcu_is_watching+0x16/0xb0 [ 345.775042][T15403] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 345.775067][T15403] ? __kmalloc_cache_noprof+0x321/0x600 [ 345.775092][T15403] ? __kmalloc_cache_noprof+0x14d/0x600 [ 345.775111][T15403] ? xskq_create+0x56/0x220 [ 345.775135][T15403] xskq_create+0x148/0x220 [ 345.775152][T15403] ? xsk_init_queue+0x8a/0xe0 [ 345.775174][T15403] xsk_init_queue+0x8a/0xe0 [ 345.775197][T15403] xsk_setsockopt+0x52a/0x960 [ 345.775220][T15403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 345.775242][T15403] ? __pfx_aa_sk_perm+0x10/0x10 [ 345.775279][T15403] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 345.775304][T15403] ? __pfx_xsk_setsockopt+0x10/0x10 [ 345.775327][T15403] do_sock_setsockopt+0x17c/0x1b0 [ 345.775362][T15403] __x64_sys_setsockopt+0x13d/0x1b0 [ 345.775397][T15403] do_syscall_64+0x166/0x520 [ 345.775424][T15403] ? trace_irq_disable+0x3b/0x140 [ 345.775443][T15403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.775462][T15403] ? clear_bhb_loop+0x70/0xc0 [ 345.775486][T15403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.775505][T15403] RIP: 0033:0x7fe3aa59e159 [ 345.775522][T15403] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.775542][T15403] RSP: 002b:00007fe3ab380028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 345.775568][T15403] RAX: ffffffffffffffda RBX: 00007fe3aa825fa0 RCX: 00007fe3aa59e159 [ 345.775580][T15403] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 345.775597][T15403] RBP: 00007fe3aa635024 R08: 0000000000000004 R09: 0000000000000000 [ 345.775610][T15403] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.775623][T15403] R13: 00007fe3aa826038 R14: 00007fe3aa825fa0 R15: 00007ffc39e9e018 [ 345.775654][T15403] [ 345.775690][T15403] Mem-Info: [ 345.775703][T15403] active_anon:5818 inactive_anon:0 isolated_anon:0 [ 345.775703][T15403] active_file:16 inactive_file:43593 isolated_file:0 [ 345.775703][T15403] unevictable:0 dirty:354 writeback:0 [ 345.775703][T15403] slab_reclaimable:11178 slab_unreclaimable:112712 [ 345.775703][T15403] mapped:30000 shmem:521 pagetables:1241 [ 345.775703][T15403] sec_pagetables:0 bounce:0 [ 345.775703][T15403] kernel_misc_reclaimable:0 [ 345.775703][T15403] free:1305509 free_pcp:15361 free_cma:0 [ 345.775757][T15403] Node 0 active_anon:23272kB inactive_anon:0kB active_file:64kB inactive_file:174164kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120000kB dirty:1412kB writeback:0kB shmem:2084kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14432kB pagetables:4836kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 345.775830][T15403] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 345.775885][T15403] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.775952][T15403] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 345.776007][T15403] Node 0 DMA32 free:1275620kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23272kB inactive_anon:0kB active_file:64kB inactive_file:174164kB unevictable:0kB writepending:1412kB zspages:0kB present:3129332kB managed:2546820kB mlocked:0kB bounce:0kB free_pcp:61444kB local_pcp:19468kB free_cma:0kB [ 345.799140][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.800004][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.800036][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.800066][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.882320][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.882340][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.917626][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.917647][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.922730][T15403] lowmem_reserve[]: 0 0 0 0 0 [ 345.922773][T15403] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.922827][T15403] lowmem_reserve[]: 0 0 0 0 0 [ 345.922860][T15403] Node 1 Normal free:3931056kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 345.922914][T15403] lowmem_reserve[]: 0 0 0 0 0 [ 345.922946][T15403] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 345.923057][T15403] Node 0 DMA32: 2761*4kB (UME) 1016*8kB (UME) 482*16kB (UME) 295*32kB (UME) 138*64kB (UME) 79*128kB (UME) 34*256kB (UM) 6*512kB (UM) 5*1024kB (UME) 3*2048kB (UME) 293*4096kB (UM) = 1278436kB [ 345.923296][T15403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 345.923391][T15403] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 4*16kB (UM) 5*32kB (UM) 5*64kB (UM) 5*128kB (UM) 3*256kB (UM) 2*512kB (M) 2*1024kB (UM) 1*2048kB (U) 958*4096kB (UM) = 3931056kB [ 345.923551][T15403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.923567][T15403] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.923583][T15403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 345.923598][T15403] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 345.923615][T15403] 44126 total pagecache pages [ 345.923622][T15403] 0 pages in swap cache [ 345.923629][T15403] Free swap = 124996kB [ 345.923636][T15403] Total swap = 124996kB [ 345.923645][T15403] 2097051 pages RAM [ 345.923651][T15403] 0 pages HighMem/MovableOnly [ 345.923659][T15403] 428730 pages reserved [ 345.923665][T15403] 0 pages cma reserved [ 345.971563][T15403] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3265'. [ 346.124098][T15408] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 346.270905][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.271042][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 346.963458][T15438] IPVS: length: 206 != 8 [ 347.040052][T15442] netlink: 'syz.1.3276': attribute type 1 has an invalid length. [ 347.085416][T15444] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3277'. [ 347.088193][T15442] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3276'. [ 347.725329][T15467] IPVS: length: 206 != 8 [ 347.731049][T15465] syzkaller0: entered promiscuous mode [ 347.736793][T15465] syzkaller0: entered allmulticast mode [ 347.862380][T15473] netlink: 'syz.1.3290': attribute type 1 has an invalid length. [ 347.917202][T15479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3290'. [ 348.121248][T15484] bond1: option downdelay: invalid value (18446744073709551487) [ 348.129234][T15484] bond1: option downdelay: allowed values 0 - 2147483647 [ 348.141914][T15484] bond1 (unregistering): Released all slaves [ 348.422345][T15507] IPVS: length: 206 != 8 [ 348.512333][T15516] netlink: 'syz.2.3304': attribute type 1 has an invalid length. [ 348.541474][T15516] gretap0: entered promiscuous mode [ 348.552501][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 348.552541][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3303'. [ 348.552579][T15511] netlink: 'syz.4.3303': attribute type 6 has an invalid length. [ 348.582732][T15516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3304'. [ 348.584645][T15511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 348.584664][T15511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3303'. [ 348.584685][T15511] netlink: 'syz.4.3303': attribute type 6 has an invalid length. [ 348.619432][ T1335] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.628678][ T1335] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.638420][ T1335] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.647296][ T1335] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.038617][T15539] tc_dump_action: action bad kind [ 349.236890][T15546] netlink: 'syz.1.3316': attribute type 29 has an invalid length. [ 349.472133][T15549] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3316'. [ 350.435365][ T2479] block nbd2: Possible stuck request ffff888026ae5080: control (read@0,1024B). Runtime 120 seconds [ 350.435434][ T2479] block nbd2: Possible stuck request ffff888026ae5240: control (read@1024,1024B). Runtime 120 seconds [ 350.435479][ T2479] block nbd2: Possible stuck request ffff888026ae5400: control (read@2048,1024B). Runtime 120 seconds [ 350.435502][ T2479] block nbd2: Possible stuck request ffff888026ae55c0: control (read@3072,1024B). Runtime 120 seconds [ 350.868110][T15475] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 351.062982][T15560] FAULT_INJECTION: forcing a failure. [ 351.062982][T15560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 351.077963][T15560] CPU: 0 UID: 0 PID: 15560 Comm: syz.2.3320 Not tainted syzkaller #0 PREEMPT(full) [ 351.078012][T15560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.078034][T15560] Call Trace: [ 351.078041][T15560] [ 351.078049][T15560] dump_stack_lvl+0xe8/0x150 [ 351.078160][T15560] should_fail_ex+0x410/0x560 [ 351.078282][T15560] _copy_from_user+0x2d/0xb0 [ 351.078335][T15560] ___sys_sendmsg+0x1c6/0x360 [ 351.078424][T15560] ? __lock_acquire+0x6df/0x2e50 [ 351.078468][T15560] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.078517][T15560] ? __fget_files+0x2a/0x420 [ 351.078558][T15560] ? __fget_files+0x3a2/0x420 [ 351.078594][T15560] __x64_sys_sendmsg+0x1b1/0x290 [ 351.078615][T15560] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.078656][T15560] do_syscall_64+0x166/0x520 [ 351.078763][T15560] ? trace_irq_disable+0x3b/0x140 [ 351.078797][T15560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.078831][T15560] ? clear_bhb_loop+0x70/0xc0 [ 351.078853][T15560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.078871][T15560] RIP: 0033:0x7fe63179e159 [ 351.078889][T15560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.078905][T15560] RSP: 002b:00007fe63273b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.078931][T15560] RAX: ffffffffffffffda RBX: 00007fe631a25fa0 RCX: 00007fe63179e159 [ 351.078944][T15560] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003 [ 351.078956][T15560] RBP: 00007fe63273b090 R08: 0000000000000000 R09: 0000000000000000 [ 351.078967][T15560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.078978][T15560] R13: 00007fe631a26038 R14: 00007fe631a25fa0 R15: 00007ffe8df91748 [ 351.079006][T15560] [ 351.285264][T15566] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3321'. [ 351.301249][T15566] Bluetooth: MGMT ver 1.23 [ 351.719999][T15588] FAULT_INJECTION: forcing a failure. [ 351.719999][T15588] name failslab, interval 1, probability 0, space 0, times 0 [ 351.720060][T15588] CPU: 1 UID: 0 PID: 15588 Comm: syz.4.3330 Not tainted syzkaller #0 PREEMPT(full) [ 351.720080][T15588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 351.720090][T15588] Call Trace: [ 351.720097][T15588] [ 351.720111][T15588] dump_stack_lvl+0xe8/0x150 [ 351.720139][T15588] should_fail_ex+0x410/0x560 [ 351.720167][T15588] ? __alloc_skb+0x1db/0x7a0 [ 351.720301][T15588] should_failslab+0xa8/0x100 [ 351.720336][T15588] ? __alloc_skb+0x1db/0x7a0 [ 351.720357][T15588] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 351.720393][T15588] ? __alloc_skb+0x18d/0x7a0 [ 351.720418][T15588] ? __alloc_skb+0x1db/0x7a0 [ 351.720446][T15588] __alloc_skb+0x1db/0x7a0 [ 351.720474][T15588] netlink_sendmsg+0x5d4/0xb40 [ 351.720553][T15588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.720582][T15588] ? apparmor_socket_sendmsg+0x98/0x360 [ 351.720660][T15588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 351.720680][T15588] sock_sendmsg_nosec+0x13a/0x180 [ 351.720706][T15588] ____sys_sendmsg+0x54e/0x850 [ 351.720731][T15588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 351.720757][T15588] ? import_iovec+0x73/0xa0 [ 351.720813][T15588] ___sys_sendmsg+0x2a5/0x360 [ 351.720830][T15588] ? __lock_acquire+0x6df/0x2e50 [ 351.720851][T15588] ? __pfx____sys_sendmsg+0x10/0x10 [ 351.720902][T15588] ? __fget_files+0x2a/0x420 [ 351.720923][T15588] ? __fget_files+0x3a2/0x420 [ 351.720953][T15588] __x64_sys_sendmsg+0x1b1/0x290 [ 351.720974][T15588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 351.721011][T15588] do_syscall_64+0x166/0x520 [ 351.721033][T15588] ? trace_irq_disable+0x3b/0x140 [ 351.721050][T15588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.721068][T15588] ? clear_bhb_loop+0x70/0xc0 [ 351.721090][T15588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.721115][T15588] RIP: 0033:0x7fe3aa59e159 [ 351.721132][T15588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 351.721147][T15588] RSP: 002b:00007fe3ab380028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 351.721167][T15588] RAX: ffffffffffffffda RBX: 00007fe3aa825fa0 RCX: 00007fe3aa59e159 [ 351.721180][T15588] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 000000000000000a [ 351.721192][T15588] RBP: 00007fe3ab380090 R08: 0000000000000000 R09: 0000000000000000 [ 351.721203][T15588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.721213][T15588] R13: 00007fe3aa826038 R14: 00007fe3aa825fa0 R15: 00007ffc39e9e018 [ 351.721241][T15588] [ 351.924263][T15591] IPVS: length: 206 != 8 [ 352.230669][T15611] netlink: 'syz.0.3339': attribute type 1 has an invalid length. [ 352.239783][T15611] gretap0: entered promiscuous mode [ 352.245749][T15611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3339'. [ 352.402950][T15618] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3342'. [ 352.515105][T15623] IPVS: length: 206 != 8 [ 352.539047][T15625] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.612785][T15627] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3346'. [ 352.786978][T15637] netlink: 'syz.3.3350': attribute type 1 has an invalid length. [ 352.799110][T15637] gretap0: entered promiscuous mode [ 352.809580][T15637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3350'. [ 353.025539][T15646] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3354'. [ 353.038046][T15646] xt_hashlimit: max too large, truncated to 1048576 [ 353.046530][T15646] netlink: 'syz.3.3354': attribute type 2 has an invalid length. [ 353.132477][T15646] : entered promiscuous mode [ 353.176983][T15650] IPVS: length: 206 != 8 [ 353.566928][T15667] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.567510][T15667] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.601758][T15673] netlink: 'syz.0.3364': attribute type 1 has an invalid length. [ 353.662997][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3364'. [ 353.726163][T15667] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 353.753735][T15667] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 353.959068][ T38] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.959304][ T38] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.959354][ T38] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.959388][ T38] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.031571][T15684] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3370'. [ 354.106808][ T5617] Bluetooth: hci0: command 0x0c1a tx timeout [ 354.112017][ T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 354.220318][T15690] IPVS: length: 206 != 8 [ 355.578497][T15734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3383'. [ 355.769268][T15742] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 355.870191][T15745] syzkaller0: entered promiscuous mode [ 355.870219][T15745] syzkaller0: entered allmulticast mode [ 356.827282][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 357.150696][T15695] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 358.115049][T15775] netlink: 'syz.3.3398': attribute type 4 has an invalid length. [ 358.115076][T15775] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.3398'. [ 358.288342][T15779] TCP: TCP_TX_DELAY enabled [ 358.661569][T15787] lo speed is unknown, defaulting to 1000 [ 360.239657][T15750] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 360.261705][T15787] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 361.010210][T15831] FAULT_INJECTION: forcing a failure. [ 361.010210][T15831] name failslab, interval 1, probability 0, space 0, times 0 [ 361.024876][T15831] CPU: 1 UID: 0 PID: 15831 Comm: syz.2.3414 Not tainted syzkaller #0 PREEMPT(full) [ 361.024904][T15831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.024916][T15831] Call Trace: [ 361.024923][T15831] [ 361.024932][T15831] dump_stack_lvl+0xe8/0x150 [ 361.024994][T15831] should_fail_ex+0x410/0x560 [ 361.025023][T15831] ? __alloc_skb+0x1db/0x7a0 [ 361.025047][T15831] should_failslab+0xa8/0x100 [ 361.025069][T15831] ? __alloc_skb+0x1db/0x7a0 [ 361.025091][T15831] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 361.025118][T15831] ? __alloc_skb+0x18d/0x7a0 [ 361.025144][T15831] ? __alloc_skb+0x1db/0x7a0 [ 361.025174][T15831] __alloc_skb+0x1db/0x7a0 [ 361.025204][T15831] alloc_skb_with_frags+0xc6/0x760 [ 361.025305][T15831] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 361.025336][T15831] ? xfrm4_fill_dst+0x330/0x530 [ 361.025413][T15831] sock_alloc_send_pskb+0x878/0x990 [ 361.025455][T15831] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 361.025492][T15831] __ip_append_data+0x29ea/0x3cf0 [ 361.025570][T15831] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 361.025615][T15831] ? __pfx___ip_append_data+0x10/0x10 [ 361.025638][T15831] ? xfrm_mtu+0x6a/0x1c0 [ 361.025687][T15831] ? __pfx_xfrm_mtu+0x10/0x10 [ 361.025710][T15831] ? ip_setup_cork+0x4ed/0x8f0 [ 361.025734][T15831] ip_make_skb+0x22e/0x440 [ 361.025762][T15831] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 361.025786][T15831] ? __pfx_ip_make_skb+0x10/0x10 [ 361.025853][T15831] udp_sendmsg+0x1937/0x2140 [ 361.025949][T15831] ? __pfx_udp_sendmsg+0x10/0x10 [ 361.025991][T15831] ? aa_file_perm+0x4ed/0x15f0 [ 361.026087][T15831] ? __asan_memset+0x22/0x50 [ 361.026117][T15831] ? aa_sock_msg_perm+0xfc/0x210 [ 361.026142][T15831] ? sock_rps_record_flow+0x19/0x350 [ 361.026213][T15831] ? inet_sendmsg+0x23e/0x320 [ 361.026234][T15831] ? apparmor_socket_sendmsg+0x98/0x360 [ 361.026262][T15831] ? __pfx_inet_sendmsg+0x10/0x10 [ 361.026281][T15831] sock_sendmsg_nosec+0x10e/0x180 [ 361.026305][T15831] sock_write_iter+0x2de/0x3e0 [ 361.026326][T15831] ? __pfx_sock_write_iter+0x10/0x10 [ 361.026352][T15831] ? bpf_lsm_file_permission+0x9/0x20 [ 361.026390][T15831] ? security_file_permission+0x75/0x260 [ 361.026481][T15831] vfs_write+0x612/0xba0 [ 361.026530][T15831] ? __pfx_vfs_write+0x10/0x10 [ 361.026564][T15831] ? __fget_files+0x2a/0x420 [ 361.026594][T15831] ksys_write+0x150/0x270 [ 361.026622][T15831] ? __pfx_ksys_write+0x10/0x10 [ 361.026657][T15831] do_syscall_64+0x166/0x520 [ 361.026681][T15831] ? trace_irq_disable+0x3b/0x140 [ 361.026699][T15831] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.026717][T15831] ? clear_bhb_loop+0x70/0xc0 [ 361.026739][T15831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.026756][T15831] RIP: 0033:0x7fe63179e159 [ 361.026775][T15831] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.026790][T15831] RSP: 002b:00007fe63273b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 361.026809][T15831] RAX: ffffffffffffffda RBX: 00007fe631a25fa0 RCX: 00007fe63179e159 [ 361.026823][T15831] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 361.026834][T15831] RBP: 00007fe63273b090 R08: 0000000000000000 R09: 0000000000000000 [ 361.026845][T15831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.026856][T15831] R13: 00007fe631a26038 R14: 00007fe631a25fa0 R15: 00007ffe8df91748 [ 361.026886][T15831] [ 361.411619][T15836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3417'. [ 361.415283][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3418'. [ 361.433796][T15842] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.436111][T15842] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.587863][T15850] netlink: 'syz.2.3421': attribute type 4 has an invalid length. [ 361.620009][T15850] netlink: 'syz.2.3421': attribute type 4 has an invalid length. [ 361.657685][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3418'. [ 361.657731][T15842] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3418'. [ 361.713756][T15850] netlink: 'syz.2.3421': attribute type 6 has an invalid length. [ 361.825392][T15859] FAULT_INJECTION: forcing a failure. [ 361.825392][T15859] name failslab, interval 1, probability 0, space 0, times 0 [ 361.841164][T15859] CPU: 1 UID: 0 PID: 15859 Comm: syz.0.3424 Not tainted syzkaller #0 PREEMPT(full) [ 361.841190][T15859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 361.841202][T15859] Call Trace: [ 361.841210][T15859] [ 361.841218][T15859] dump_stack_lvl+0xe8/0x150 [ 361.841250][T15859] should_fail_ex+0x410/0x560 [ 361.841282][T15859] should_failslab+0xa8/0x100 [ 361.841305][T15859] __kmalloc_noprof+0xfe/0x720 [ 361.841329][T15859] ? is_bpf_text_address+0x26/0x2b0 [ 361.841350][T15859] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 361.841375][T15859] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 361.841403][T15859] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 361.841432][T15859] genl_family_rcv_msg_doit+0xda/0x340 [ 361.841460][T15859] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 361.841492][T15859] ? apparmor_capable+0x126/0x170 [ 361.841515][T15859] ? bpf_lsm_capable+0x9/0x20 [ 361.841538][T15859] ? security_capable+0x7e/0x2c0 [ 361.841644][T15859] genl_rcv_msg+0x614/0x7a0 [ 361.841674][T15859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.841696][T15859] ? __pfx_ovs_dp_cmd_del+0x10/0x10 [ 361.841792][T15859] netlink_rcv_skb+0x226/0x4a0 [ 361.841818][T15859] ? __pfx_genl_rcv_msg+0x10/0x10 [ 361.841843][T15859] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 361.841878][T15859] ? down_read+0x2be/0x330 [ 361.841944][T15859] genl_rcv+0x28/0x40 [ 361.841963][T15859] netlink_unicast+0x7bd/0x940 [ 361.841992][T15859] netlink_sendmsg+0x813/0xb40 [ 361.842019][T15859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.842044][T15859] ? apparmor_socket_sendmsg+0x98/0x360 [ 361.842067][T15859] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.842084][T15859] sock_sendmsg_nosec+0x13a/0x180 [ 361.842109][T15859] ____sys_sendmsg+0x54e/0x850 [ 361.842129][T15859] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.842154][T15859] ? import_iovec+0x73/0xa0 [ 361.842185][T15859] ___sys_sendmsg+0x2a5/0x360 [ 361.842201][T15859] ? __lock_acquire+0x6df/0x2e50 [ 361.842223][T15859] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.842282][T15859] ? __fget_files+0x2a/0x420 [ 361.842305][T15859] ? __fget_files+0x3a2/0x420 [ 361.842334][T15859] __x64_sys_sendmsg+0x1b1/0x290 [ 361.842353][T15859] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.842384][T15859] do_syscall_64+0x166/0x520 [ 361.842406][T15859] ? trace_irq_disable+0x3b/0x140 [ 361.842423][T15859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.842442][T15859] ? clear_bhb_loop+0x70/0xc0 [ 361.842463][T15859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.842480][T15859] RIP: 0033:0x7fafe379e159 [ 361.842498][T15859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 361.842513][T15859] RSP: 002b:00007fafe45d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.842533][T15859] RAX: ffffffffffffffda RBX: 00007fafe3a26090 RCX: 00007fafe379e159 [ 361.842545][T15859] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 000000000000000c [ 361.842557][T15859] RBP: 00007fafe45d7090 R08: 0000000000000000 R09: 0000000000000000 [ 361.842570][T15859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.842581][T15859] R13: 00007fafe3a26128 R14: 00007fafe3a26090 R15: 00007ffd233f1908 [ 361.842618][T15859] [ 362.214764][T15867] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 362.285613][T15867] bond1 (unregistering): Released all slaves [ 362.323037][T15870] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 362.532543][T15880] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 362.567565][T15880] x_tables: duplicate underflow at hook 3 [ 362.762670][T15889] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3436'. [ 363.201964][T15900] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.202728][T15900] bridge0: port 2(bridge_slave_1) entered listening state [ 363.203027][T15900] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.203144][T15900] bridge0: port 1(bridge_slave_0) entered listening state [ 363.424745][T15909] netlink: 'syz.2.3444': attribute type 1 has an invalid length. [ 364.200620][T15938] FAULT_INJECTION: forcing a failure. [ 364.200620][T15938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.215844][T15938] CPU: 1 UID: 0 PID: 15938 Comm: syz.0.3454 Not tainted syzkaller #0 PREEMPT(full) [ 364.215872][T15938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.215882][T15938] Call Trace: [ 364.215889][T15938] [ 364.215896][T15938] dump_stack_lvl+0xe8/0x150 [ 364.215937][T15938] should_fail_ex+0x410/0x560 [ 364.215969][T15938] _copy_from_user+0x2d/0xb0 [ 364.215988][T15938] ___sys_sendmsg+0x1c6/0x360 [ 364.216007][T15938] ? __lock_acquire+0x6df/0x2e50 [ 364.216028][T15938] ? __pfx____sys_sendmsg+0x10/0x10 [ 364.216078][T15938] ? __fget_files+0x2a/0x420 [ 364.216099][T15938] ? __fget_files+0x3a2/0x420 [ 364.216130][T15938] __x64_sys_sendmsg+0x1b1/0x290 [ 364.216150][T15938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 364.216189][T15938] do_syscall_64+0x166/0x520 [ 364.216211][T15938] ? trace_irq_disable+0x3b/0x140 [ 364.216228][T15938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.216246][T15938] ? clear_bhb_loop+0x70/0xc0 [ 364.216268][T15938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.216287][T15938] RIP: 0033:0x7fafe379e159 [ 364.216304][T15938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.216318][T15938] RSP: 002b:00007fafe45f8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 364.216336][T15938] RAX: ffffffffffffffda RBX: 00007fafe3a25fa0 RCX: 00007fafe379e159 [ 364.216348][T15938] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000004 [ 364.216360][T15938] RBP: 00007fafe45f8090 R08: 0000000000000000 R09: 0000000000000000 [ 364.216371][T15938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.216382][T15938] R13: 00007fafe3a26038 R14: 00007fafe3a25fa0 R15: 00007ffd233f1908 [ 364.216411][T15938] [ 364.612455][T15953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3462'. [ 364.748524][T15955] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3461'. [ 364.821251][T15955] hsr_slave_1 (unregistering): left promiscuous mode [ 365.272079][T15981] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3469'. [ 365.508814][T15991] syzkaller1: entered promiscuous mode [ 365.515848][T15991] syzkaller1: entered allmulticast mode [ 366.964874][T16039] bridge_slave_0: left allmulticast mode [ 366.964934][T16039] bridge_slave_0: left promiscuous mode [ 366.967464][T16039] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.981575][T16039] bridge_slave_1: left allmulticast mode [ 366.981600][T16039] bridge_slave_1: left promiscuous mode [ 366.981784][T16039] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.023336][T16039] bond0: (slave bond_slave_0): Releasing backup interface [ 367.044596][T16039] bond0: (slave bond_slave_1): Releasing backup interface [ 367.081765][T16039] team0: Port device team_slave_0 removed [ 367.101805][T16039] team0: Port device team_slave_1 removed [ 367.108763][T16039] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.108789][T16039] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.126129][T16039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.135455][T16039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.145259][T16039] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 367.488688][T16065] 0: reclassify loop, rule prio 0, protocol 03 [ 367.489890][T16065] netlink: 'syz.1.3496': attribute type 28 has an invalid length. [ 367.489911][T16065] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3496'. [ 367.493997][T16065] siw: device registration error -23 [ 367.937979][T16089] FAULT_INJECTION: forcing a failure. [ 367.937979][T16089] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.938017][T16089] CPU: 0 UID: 0 PID: 16089 Comm: syz.1.3504 Not tainted syzkaller #0 PREEMPT(full) [ 367.938047][T16089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 367.938058][T16089] Call Trace: [ 367.938065][T16089] [ 367.938072][T16089] dump_stack_lvl+0xe8/0x150 [ 367.938102][T16089] should_fail_ex+0x410/0x560 [ 367.938129][T16089] _copy_from_iter+0x1d3/0x1660 [ 367.938150][T16089] ? __alloc_skb+0x27a/0x7a0 [ 367.938175][T16089] ? __alloc_skb+0x27a/0x7a0 [ 367.938199][T16089] ? __alloc_skb+0x27a/0x7a0 [ 367.938222][T16089] ? __pfx__copy_from_iter+0x10/0x10 [ 367.938245][T16089] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 367.938268][T16089] ? __alloc_skb+0x27a/0x7a0 [ 367.938289][T16089] ? __alloc_skb+0x27a/0x7a0 [ 367.938318][T16089] ? netlink_sendmsg+0x650/0xb40 [ 367.938338][T16089] ? skb_put+0x112/0x210 [ 367.938366][T16089] netlink_sendmsg+0x6c0/0xb40 [ 367.938393][T16089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.938421][T16089] ? apparmor_socket_sendmsg+0x98/0x360 [ 367.938448][T16089] ? __pfx_netlink_sendmsg+0x10/0x10 [ 367.938467][T16089] sock_sendmsg_nosec+0x13a/0x180 [ 367.938492][T16089] ____sys_sendmsg+0x54e/0x850 [ 367.938514][T16089] ? __pfx_____sys_sendmsg+0x10/0x10 [ 367.938539][T16089] ? import_iovec+0x73/0xa0 [ 367.938568][T16089] ___sys_sendmsg+0x2a5/0x360 [ 367.938585][T16089] ? __lock_acquire+0x6df/0x2e50 [ 367.938605][T16089] ? __pfx____sys_sendmsg+0x10/0x10 [ 367.938655][T16089] ? __fget_files+0x2a/0x420 [ 367.938676][T16089] ? __fget_files+0x3a2/0x420 [ 367.938707][T16089] __x64_sys_sendmsg+0x1b1/0x290 [ 367.938726][T16089] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 367.938764][T16089] do_syscall_64+0x166/0x520 [ 367.938786][T16089] ? trace_irq_disable+0x3b/0x140 [ 367.938803][T16089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.938821][T16089] ? clear_bhb_loop+0x70/0xc0 [ 367.938842][T16089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.938860][T16089] RIP: 0033:0x7f98cb39e159 [ 367.938876][T16089] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 367.938891][T16089] RSP: 002b:00007f98cc2b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 367.938911][T16089] RAX: ffffffffffffffda RBX: 00007f98cb625fa0 RCX: 00007f98cb39e159 [ 367.938923][T16089] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 367.938935][T16089] RBP: 00007f98cc2b2090 R08: 0000000000000000 R09: 0000000000000000 [ 367.938946][T16089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.938957][T16089] R13: 00007f98cb626038 R14: 00007f98cb625fa0 R15: 00007ffc0989e298 [ 367.938986][T16089] [ 368.224258][T16095] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3507'. [ 368.224341][T16095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 368.539502][T16102] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3512'. [ 368.546081][T16111] sit0: entered promiscuous mode [ 368.553525][T16111] netlink: 'syz.1.3513': attribute type 1 has an invalid length. [ 368.553552][T16111] netlink: 9 bytes leftover after parsing attributes in process `syz.1.3513'. [ 368.695884][T16114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3514'. [ 368.695940][T16114] netlink: 'syz.1.3514': attribute type 21 has an invalid length. [ 368.788879][T16112] bridge_slave_0: left allmulticast mode [ 368.788934][T16112] bridge_slave_0: left promiscuous mode [ 368.789165][T16112] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.829717][T16112] bridge_slave_1: left allmulticast mode [ 368.829775][T16112] bridge_slave_1: left promiscuous mode [ 368.829969][T16112] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.880483][T16112] bond0: (slave bond_slave_0): Releasing backup interface [ 368.913430][T16112] bond0: (slave bond_slave_1): Releasing backup interface [ 368.955564][T16112] team0: Port device team_slave_0 removed [ 368.969721][T16112] team0: Port device team_slave_1 removed [ 368.977369][T16112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.977392][T16112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.995646][T16112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.003754][T16112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.014920][T16112] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 369.419690][T16132] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3519'. [ 369.436164][T16132] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 369.853049][T16155] __nla_validate_parse: 1 callbacks suppressed [ 369.856365][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3528'. [ 369.856391][T16155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3528'. [ 369.856406][T16155] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3528'. [ 369.856591][T16155] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3528'. [ 370.647537][T16181] FAULT_INJECTION: forcing a failure. [ 370.647537][T16181] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.647592][T16181] CPU: 0 UID: 0 PID: 16181 Comm: syz.2.3534 Not tainted syzkaller #0 PREEMPT(full) [ 370.647615][T16181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 370.647624][T16181] Call Trace: [ 370.647629][T16181] [ 370.647636][T16181] dump_stack_lvl+0xe8/0x150 [ 370.647665][T16181] should_fail_ex+0x410/0x560 [ 370.647704][T16181] _copy_to_user+0x31/0xb0 [ 370.647725][T16181] simple_read_from_buffer+0xe1/0x170 [ 370.647754][T16181] proc_fail_nth_read+0x1bb/0x230 [ 370.647804][T16181] ? common_file_perm+0x20e/0x2b0 [ 370.647832][T16181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.647868][T16181] ? rw_verify_area+0x24a/0x4c0 [ 370.647900][T16181] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 370.647926][T16181] vfs_read+0x213/0xa80 [ 370.647954][T16181] ? __pfx___mutex_lock+0x10/0x10 [ 370.647980][T16181] ? __pfx_vfs_read+0x10/0x10 [ 370.648006][T16181] ? __fget_files+0x2a/0x420 [ 370.648033][T16181] ? __fget_files+0x3a2/0x420 [ 370.648055][T16181] ? __fget_files+0x2a/0x420 [ 370.648085][T16181] ksys_read+0x150/0x270 [ 370.648111][T16181] ? __pfx_ksys_read+0x10/0x10 [ 370.648147][T16181] do_syscall_64+0x166/0x520 [ 370.648169][T16181] ? trace_irq_disable+0x3b/0x140 [ 370.648186][T16181] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.648204][T16181] ? clear_bhb_loop+0x70/0xc0 [ 370.648227][T16181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.648245][T16181] RIP: 0033:0x7fe63175e98e [ 370.648262][T16181] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 370.648277][T16181] RSP: 002b:00007fe63273afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.648296][T16181] RAX: ffffffffffffffda RBX: 00007fe63273b6c0 RCX: 00007fe63175e98e [ 370.648310][T16181] RDX: 000000000000000f RSI: 00007fe63273b0a0 RDI: 0000000000000004 [ 370.648321][T16181] RBP: 00007fe63273b090 R08: 0000000000000000 R09: 0000000000000000 [ 370.648461][T16181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.648472][T16181] R13: 00007fe631a26038 R14: 00007fe631a25fa0 R15: 00007ffe8df91748 [ 370.648502][T16181] [ 370.917660][T16178] syz_tun: entered allmulticast mode [ 370.935638][T16178] dvmrp8: entered allmulticast mode [ 370.941382][T16186] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3536'. [ 370.959941][T16177] syz_tun: left allmulticast mode [ 371.641779][T16209] bridge0: port 1(veth0) entered blocking state [ 371.642902][T16209] bridge0: port 1(veth0) entered disabled state [ 371.643082][T16209] veth0: entered allmulticast mode [ 371.648036][T16209] veth0: entered promiscuous mode [ 371.648994][T16209] bridge0: port 1(veth0) entered blocking state [ 371.649099][T16209] bridge0: port 1(veth0) entered forwarding state [ 371.672163][T16211] bond2: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 371.678448][T16211] bond2 (unregistering): Released all slaves [ 371.723755][T16209] bridge0: port 2(veth1) entered blocking state [ 371.723866][T16209] bridge0: port 2(veth1) entered disabled state [ 371.724034][T16209] veth1: entered allmulticast mode [ 371.737081][T16209] veth1: entered promiscuous mode [ 371.737658][T16209] bridge0: port 2(veth1) entered blocking state [ 371.737755][T16209] bridge0: port 2(veth1) entered forwarding state [ 371.758860][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.759789][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.760560][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.760787][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.761016][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.761238][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 371.761472][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.496493][ C0] net_ratelimit: 3245 callbacks suppressed [ 372.496545][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.496782][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.497023][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.497263][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.497493][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.497713][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.497926][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.498137][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.498359][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 372.498567][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 373.324339][T16245] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3561'. [ 373.753983][T16259] netlink: 25 bytes leftover after parsing attributes in process `syz.3.3564'. [ 377.506315][ C0] net_ratelimit: 27984 callbacks suppressed [ 377.506376][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.506555][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.506669][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.506906][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.507008][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 377.507137][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.507364][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.507467][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.507587][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 377.507814][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.516392][ C0] net_ratelimit: 33095 callbacks suppressed [ 382.516438][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.516540][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.516703][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.516991][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.516991][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.517252][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.517491][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 382.517510][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.517765][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 382.517953][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 383.036309][ C0] sched: DL replenish lagged too much [ 387.526382][ C0] net_ratelimit: 33384 callbacks suppressed [ 387.526431][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.526625][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.526692][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.526960][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.527052][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 387.527207][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.527455][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.527512][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.527744][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 387.527990][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.536490][ C0] net_ratelimit: 32796 callbacks suppressed [ 392.536546][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.536571][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 392.536809][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.537008][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.537069][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.537313][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.537434][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.537563][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.537817][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 392.537859][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 393.326566][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 393.328678][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 397.546486][ C1] net_ratelimit: 33148 callbacks suppressed [ 397.546503][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.546550][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.546747][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.546992][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.547012][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.547238][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.547465][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.547469][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 397.547703][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 397.547903][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.556319][ C0] net_ratelimit: 33276 callbacks suppressed [ 402.556361][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.556419][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 402.556633][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.556884][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.556901][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.557130][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 402.557362][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.557375][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.557620][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 402.557823][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 407.566444][ C0] net_ratelimit: 33794 callbacks suppressed [ 407.566457][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.566491][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.566745][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.566832][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 407.566991][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.567216][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.567236][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 407.567480][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.567580][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 407.567724][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.576332][ C0] net_ratelimit: 34026 callbacks suppressed [ 412.576379][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.576478][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 412.576618][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.576844][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 412.576875][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.577050][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.577271][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.577308][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.577505][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.577698][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.586322][ C0] net_ratelimit: 35157 callbacks suppressed [ 417.586343][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 417.586529][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 417.586563][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.586794][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.586921][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 417.587019][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.587261][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.587378][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 417.587604][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 417.587653][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.596432][ C0] net_ratelimit: 37043 callbacks suppressed [ 422.596463][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.596587][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.596756][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.596982][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.596982][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 422.597217][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.597366][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 422.597442][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 422.597658][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 422.597758][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 423.407590][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.407642][ C1] bridge0: topology change detected, propagating [ 423.408228][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.408246][ C1] bridge0: topology change detected, propagating [ 424.685740][ C1] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 427.606452][ C0] net_ratelimit: 35456 callbacks suppressed [ 427.606475][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 427.606496][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.606718][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.606983][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.607027][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.607215][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.607448][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.607542][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 427.607709][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 427.607926][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.616350][ C0] net_ratelimit: 36336 callbacks suppressed [ 432.616372][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.616602][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.616684][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.616835][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.617070][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 432.617167][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.617290][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.617517][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 432.617641][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 432.617745][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.626440][ C0] net_ratelimit: 37074 callbacks suppressed [ 437.626462][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.626564][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.626689][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.626909][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 437.626960][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.627122][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.627328][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.627355][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.627576][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.627712][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.636481][ C0] net_ratelimit: 36173 callbacks suppressed [ 442.636504][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.636590][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 442.636738][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.636961][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.637022][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 442.637192][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 442.637402][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.637421][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.637653][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.637768][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.646346][ C1] net_ratelimit: 35312 callbacks suppressed [ 447.646381][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 447.646433][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.646700][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.646917][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.647131][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.647358][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 447.647592][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.647850][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.648075][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.648184][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.656429][ C0] net_ratelimit: 36624 callbacks suppressed [ 452.656452][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.656493][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 452.656685][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 452.656880][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.656909][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 452.657124][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.657276][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.657350][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.657573][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 452.657728][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.666338][ C0] net_ratelimit: 36745 callbacks suppressed [ 457.666360][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 457.666577][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.666638][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.666810][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.667039][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.667066][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.667262][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 457.667484][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 457.667560][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 457.667701][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 462.676324][ C1] net_ratelimit: 35878 callbacks suppressed [ 462.676359][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 462.676377][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 462.676587][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 462.676799][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.676883][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.677031][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.677253][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.677318][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.677515][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 462.677742][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 467.686289][ C0] net_ratelimit: 36226 callbacks suppressed [ 467.686311][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.686539][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.686639][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.686774][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 467.686984][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 467.687076][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 467.687214][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.687438][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 467.687501][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 467.687665][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.696395][ C1] net_ratelimit: 36277 callbacks suppressed [ 472.696402][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.696430][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.696628][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 472.696838][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 472.696865][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.697050][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.697313][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.697355][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.697588][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 472.697749][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 477.706409][ C0] net_ratelimit: 36021 callbacks suppressed [ 477.706432][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 477.706452][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.706682][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 477.706847][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.706902][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.707128][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.707240][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.707384][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.707608][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 477.707654][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 482.716449][ C0] net_ratelimit: 36293 callbacks suppressed [ 482.716469][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.716625][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 482.716683][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.716956][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.717058][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.717180][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 482.717390][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 482.717521][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 482.717599][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 482.717821][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 483.846185][ T5618] Bluetooth: hci4: command 0x0406 tx timeout [ 487.726353][ C1] net_ratelimit: 35958 callbacks suppressed [ 487.726389][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 487.726423][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.726647][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.726787][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.726866][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.727091][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.727175][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 487.727317][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 487.727526][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 487.727636][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.736434][ C1] net_ratelimit: 36712 callbacks suppressed [ 492.736461][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 492.736470][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 492.736677][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.736902][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.736930][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.737131][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.737393][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.737398][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.737622][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 492.737832][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 497.746350][ C0] net_ratelimit: 34921 callbacks suppressed [ 497.746372][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 497.746377][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 497.746599][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.746826][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.746854][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.747062][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.747287][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.747336][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.747505][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 497.747716][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 502.756272][ C0] net_ratelimit: 34801 callbacks suppressed [ 502.756293][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.756568][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.756679][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 502.756791][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 502.757001][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 502.757155][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 502.757221][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.757450][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.757645][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.757670][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.766250][ C0] net_ratelimit: 35810 callbacks suppressed [ 507.766264][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.766271][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.766497][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.766682][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.766720][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.766956][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 507.767109][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 507.767202][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 507.767415][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.767503][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 512.776407][ C0] net_ratelimit: 35810 callbacks suppressed [ 512.776430][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.776496][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.776657][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.776917][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.776933][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 512.777138][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 512.777356][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 512.777361][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.777572][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.777792][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.746240][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 516.987747][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4983/1:b..l P16274/1:b..l [ 516.996989][ C0] rcu: (detected by 0, t=10727 jiffies, g=80021, q=1297 ncpus=2) [ 517.004820][ C0] task:syz.2.3567 state:R running task stack:26888 pid:16274 tgid:16271 ppid:14396 task_flags:0x40044c flags:0x00080002 [ 517.018359][ C0] Call Trace: [ 517.021661][ C0] [ 517.024609][ C0] __schedule+0x17d4/0x5820 [ 517.029169][ C0] ? mod_memcg_lruvec_state+0xd5/0x270 [ 517.034668][ C0] ? __pfx___schedule+0x10/0x10 [ 517.039541][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 517.044765][ C0] ? irqentry_exit+0x218/0x910 [ 517.049557][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 517.054951][ C0] preempt_schedule_common+0x7f/0xd0 [ 517.060255][ C0] preempt_schedule_thunk+0x16/0x40 [ 517.065477][ C0] _raw_spin_unlock_irqrestore+0x76/0x80 [ 517.071214][ C0] folios_put_refs+0x8b0/0xb30 [ 517.076023][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 517.081784][ C0] ? exit_to_user_mode_loop+0x10e/0x770 [ 517.087374][ C0] ? do_syscall_64+0x328/0x520 [ 517.092179][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 517.097493][ C0] ? free_swap_cache+0x109/0x300 [ 517.102454][ C0] free_pages_and_swap_cache+0x2ba/0x490 [ 517.108116][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 517.114291][ C0] ? free_pgd_range+0x1356/0x13c0 [ 517.119367][ C0] ? __virt_addr_valid+0x137/0x390 [ 517.124558][ C0] tlb_flush_mmu+0x6d3/0xa30 [ 517.129191][ C0] tlb_finish_mmu+0xf4/0x220 [ 517.133810][ C0] exit_mmap+0x4b2/0x9f0 [ 517.138076][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 517.142889][ C0] ? __pfx_exit_aio+0x10/0x10 [ 517.147637][ C0] ? uprobe_clear_state+0x2a4/0x3d0 [ 517.152868][ C0] __mmput+0x118/0x420 [ 517.157428][ C0] exit_mm+0x221/0x2d0 [ 517.161544][ C0] do_exit+0x6cd/0x2360 [ 517.165726][ C0] ? __pfx_do_exit+0x10/0x10 [ 517.170334][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 517.175394][ C0] do_group_exit+0x22d/0x2f0 [ 517.180003][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 517.185229][ C0] get_signal+0x121b/0x12c0 [ 517.189782][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 517.195380][ C0] ? irqentry_exit+0x218/0x910 [ 517.200172][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 517.206346][ C0] ? irqentry_exit+0x218/0x910 [ 517.211194][ C0] exit_to_user_mode_loop+0x10e/0x770 [ 517.216590][ C0] ? rcu_is_watching+0x16/0xb0 [ 517.221473][ C0] do_syscall_64+0x328/0x520 [ 517.226085][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.232169][ C0] ? clear_bhb_loop+0x70/0xc0 [ 517.236958][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.242873][ C0] RIP: 0033:0x7fe63179e159 [ 517.247302][ C0] RSP: 002b:00007fe63273b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 517.255739][ C0] RAX: fffffffffffffe00 RBX: 00007fe631a25fa0 RCX: 00007fe63179e159 [ 517.263727][ C0] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 517.271723][ C0] RBP: 00007fe631835024 R08: 0000000000000000 R09: 0000000000000000 [ 517.279709][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.287690][ C0] R13: 00007fe631a26038 R14: 00007fe631a25fa0 R15: 00007ffe8df91748 [ 517.295699][ C0] [ 517.298733][ C0] task:udevd state:R running task stack:22408 pid:4983 tgid:4983 ppid:1 task_flags:0x400140 flags:0x00080000 [ 517.312264][ C0] Call Trace: [ 517.315531][ C0] [ 517.318451][ C0] __schedule+0x17d4/0x5820 [ 517.322939][ C0] ? lock_acquire+0x115/0x350 [ 517.327601][ C0] ? __lock_acquire+0x6df/0x2e50 [ 517.332575][ C0] ? __pfx___schedule+0x10/0x10 [ 517.337431][ C0] ? __lock_acquire+0x6df/0x2e50 [ 517.342351][ C0] preempt_schedule_irq+0x4b/0x90 [ 517.347367][ C0] irqentry_exit+0x14f/0x910 [ 517.351936][ C0] ? trace_irq_disable+0x3b/0x140 [ 517.356939][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 517.362901][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 517.368179][ C0] Code: ff ff ff e8 40 dc 3f 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 92 e7 f0 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 07 22 da [ 517.387853][ C0] RSP: 0018:ffffc9000300f800 EFLAGS: 00000296 [ 517.393903][ C0] RAX: d5c1f484d7a9fa00 RBX: 0000000000000000 RCX: 0000000000000046 [ 517.401855][ C0] RDX: 00000000e2212058 RSI: ffffffff8e6fac1d RDI: ffffffff8c6d8b80 [ 517.409809][ C0] RBP: ffff88807effbe80 R08: a200000000000000 R09: 0000000000000000 [ 517.417759][ C0] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: ffffffff8ed5c6e0 [ 517.425708][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 517.433669][ C0] ? is_module_text_address+0x1d/0x1e0 [ 517.439213][ C0] is_module_text_address+0x39/0x1e0 [ 517.444483][ C0] ? is_module_text_address+0x1d/0x1e0 [ 517.449926][ C0] kernel_text_address+0x94/0xe0 [ 517.454875][ C0] __kernel_text_address+0xd/0x30 [ 517.459893][ C0] unwind_get_return_address+0x4d/0x90 [ 517.465377][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 517.471535][ C0] arch_stack_walk+0xfb/0x150 [ 517.476220][ C0] stack_trace_save+0xa9/0x100 [ 517.480971][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 517.486354][ C0] save_stack+0x122/0x230 [ 517.490687][ C0] ? __pfx_save_stack+0x10/0x10 [ 517.495526][ C0] ? __free_frozen_pages+0xc93/0xd90 [ 517.500812][ C0] ? __slab_free+0x274/0x2c0 [ 517.505396][ C0] ? qlist_free_all+0x99/0x100 [ 517.510156][ C0] ? kasan_quarantine_reduce+0x148/0x160 [ 517.515780][ C0] ? __kasan_slab_alloc+0x22/0x80 [ 517.520783][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 517.526407][ C0] ? do_getname+0x2e/0x250 [ 517.530807][ C0] ? do_readlinkat+0xc8/0x510 [ 517.535466][ C0] ? __x64_sys_readlink+0x7f/0x90 [ 517.540471][ C0] ? do_syscall_64+0x166/0x520 [ 517.545221][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.551283][ C0] ? page_ext_put+0x97/0xc0 [ 517.555788][ C0] __reset_page_owner+0x71/0x1f0 [ 517.560719][ C0] __free_frozen_pages+0xc93/0xd90 [ 517.565830][ C0] __slab_free+0x274/0x2c0 [ 517.570232][ C0] ? qlist_free_all+0x8e/0x100 [ 517.574999][ C0] qlist_free_all+0x99/0x100 [ 517.579578][ C0] ? do_getname+0x2e/0x250 [ 517.583976][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 517.589606][ C0] kasan_quarantine_reduce+0x148/0x160 [ 517.595056][ C0] __kasan_slab_alloc+0x22/0x80 [ 517.599912][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 517.605373][ C0] ? do_getname+0x2e/0x250 [ 517.609789][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 517.615413][ C0] ? do_getname+0x2e/0x250 [ 517.619815][ C0] do_getname+0x2e/0x250 [ 517.624037][ C0] ? getname_flags+0x11/0x20 [ 517.628608][ C0] do_readlinkat+0xc8/0x510 [ 517.633103][ C0] ? __pfx_do_readlinkat+0x10/0x10 [ 517.638207][ C0] __x64_sys_readlink+0x7f/0x90 [ 517.643051][ C0] do_syscall_64+0x166/0x520 [ 517.647648][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.653692][ C0] ? clear_bhb_loop+0x70/0xc0 [ 517.658354][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.664257][ C0] RIP: 0033:0x7fa466d153a7 [ 517.668669][ C0] RSP: 002b:00007ffdaecd9fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 517.677077][ C0] RAX: ffffffffffffffda RBX: 00007ffdaecda4c0 RCX: 00007fa466d153a7 [ 517.685037][ C0] RDX: 0000000000000400 RSI: 00007ffdaecd9ff0 RDI: 00007ffdaecda4c0 [ 517.693081][ C0] RBP: 00007ffdaecd9ff0 R08: 00000000000001e0 R09: 0000000000000000 [ 517.701058][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 517.709110][ C0] R13: 000055b64bff3100 R14: 000055b653c90a20 R15: 00007ffdaecdaef0 [ 517.717081][ C0] [ 517.720096][ C0] rcu: rcu_preempt kthread starved for 9999 jiffies! g80021 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 517.731121][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 517.741110][ C0] rcu: RCU grace-period kthread stack dump: [ 517.747006][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 517.760518][ C0] Call Trace: [ 517.763839][ C0] [ 517.766788][ C0] __schedule+0x17d4/0x5820 [ 517.771313][ C0] ? __lock_acquire+0x6df/0x2e50 [ 517.776291][ C0] ? __pfx___schedule+0x10/0x10 [ 517.781160][ C0] ? lock_acquire+0x115/0x350 [ 517.785859][ C0] ? schedule+0x90/0x2b0 [ 517.790156][ C0] schedule+0x164/0x2b0 [ 517.794335][ C0] schedule_timeout+0x152/0x2c0 [ 517.799201][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 517.804587][ C0] ? __pfx_process_timeout+0x10/0x10 [ 517.807235][ C1] net_ratelimit: 21471 callbacks suppressed [ 517.807284][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.807516][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.807733][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 517.807983][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 517.808202][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.808413][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.808624][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.808832][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 517.809084][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.809296][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.926921][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 517.932757][ C0] ? prepare_to_swait_event+0x322/0x350 [ 517.938426][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 517.943300][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 517.949467][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 517.954801][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 517.960028][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 517.966030][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 517.970636][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 517.975847][ C0] ? __kthread_parkme+0x71/0x1f0 [ 517.980806][ C0] ? __kthread_parkme+0x199/0x1f0 [ 517.985857][ C0] kthread+0x38b/0x480 [ 517.989975][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 517.995185][ C0] ? __pfx_kthread+0x10/0x10 [ 517.999793][ C0] ret_from_fork+0x514/0xb70 [ 518.004410][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 518.009548][ C0] ? __switch_to+0xc89/0x1420 [ 518.014256][ C0] ? __pfx_kthread+0x10/0x10 [ 518.018871][ C0] ret_from_fork_asm+0x1a/0x30 [ 518.023673][ C0] [ 518.026698][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 518.033029][ C0] Sending NMI from CPU 0 to CPUs 1: [ 518.038247][ C1] NMI backtrace for cpu 1 [ 518.038274][ C1] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 518.038319][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 518.038344][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 518.038459][ C1] RIP: 0010:__siphash_unaligned+0x174/0x3e0 [ 518.038521][ C1] Code: 15 48 01 eb 48 c1 c5 11 48 31 dd 48 c1 c3 20 4d 31 f5 49 01 ee 48 c1 c5 0d 4c 31 f5 49 c1 c6 20 4c 01 eb 49 c1 c5 10 49 31 dd <4d> 01 ee 49 c1 c5 15 4d 31 f5 48 01 eb 48 c1 c5 11 48 31 dd 48 c1 [ 518.038538][ C1] RSP: 0018:ffffc90000a17950 EFLAGS: 00000282 [ 518.038558][ C1] RAX: 0000000000000000 RBX: a1f73aff228634d3 RCX: ffff88801bb2ddc0 [ 518.038572][ C1] RDX: dffffc0000000000 RSI: 0000000000000040 RDI: ffffc90000a17d77 [ 518.038586][ C1] RBP: 4264b1df33b45d1f R08: 0000000000000100 R09: 0000000000000003 [ 518.038599][ C1] R10: 0000000000000008 R11: 8000000000000100 R12: ffffc90000a17d70 [ 518.038613][ C1] R13: ccd18cff2a466270 R14: fac08cbddfb9c4ea R15: 0000000000000018 [ 518.038627][ C1] FS: 0000000000000000(0000) GS:ffff888124de0000(0000) knlGS:0000000000000000 [ 518.038642][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 518.038655][ C1] CR2: 00007f01d661e000 CR3: 0000000077656000 CR4: 00000000003526f0 [ 518.038672][ C1] Call Trace: [ 518.038679][ C1] [ 518.038692][ C1] __flow_hash_from_keys+0x431/0x6c0 [ 518.038717][ C1] rt6_multipath_hash+0x65d/0x19b0 [ 518.038790][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 518.038820][ C1] ? __pfx_rt6_multipath_hash+0x10/0x10 [ 518.038845][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 518.038925][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 518.038955][ C1] ? lockdep_hardirqs_on+0x7b/0x110 [ 518.038998][ C1] ? br_nf_dev_queue_xmit+0x4f6/0x25c0 [ 518.039074][ C1] ? br_dev_queue_push_xmit+0x370/0x4b0 [ 518.039154][ C1] ? NF_HOOK+0xa2/0x6e0 [ 518.039173][ C1] ? NF_HOOK+0x64e/0x6e0 [ 518.039194][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 518.039213][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 518.039235][ C1] ? net_generic+0x1e/0x240 [ 518.039257][ C1] ? br_nf_post_routing+0xa53/0xee0 [ 518.039277][ C1] ? __pfx_br_nf_dev_queue_xmit+0x10/0x10 [ 518.039303][ C1] ? NF_HOOK+0xa2/0x3f0 [ 518.039331][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 518.039360][ C1] ? NF_HOOK+0x369/0x3f0 [ 518.039392][ C1] ip6_route_input+0x954/0xb20 [ 518.039420][ C1] ? __pfx_ip6_route_input+0x10/0x10 [ 518.039449][ C1] ? br_nf_forward_finish+0xa76/0xea0 [ 518.039477][ C1] ? ip6_rcv_finish_core+0x222/0x420 [ 518.039555][ C1] ip6_rcv_finish+0x141/0x280 [ 518.039585][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 518.039613][ C1] ip_sabotage_in+0x1e1/0x270 [ 518.039632][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 518.039653][ C1] nf_hook_slow+0xc5/0x220 [ 518.039729][ C1] NF_HOOK+0x21f/0x3c0 [ 518.039758][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 518.039785][ C1] ? NF_HOOK+0x9e/0x3c0 [ 518.039812][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 518.039839][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 518.039869][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 518.039901][ C1] ? netif_receive_skb+0x102/0xbf0 [ 518.039925][ C1] netif_receive_skb+0x278/0xbf0 [ 518.039947][ C1] ? lock_acquire+0x115/0x350 [ 518.039967][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 518.039998][ C1] ? br_netif_receive_skb+0x126/0x190 [ 518.040020][ C1] NF_HOOK+0xa4/0x3a0 [ 518.040038][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 518.040059][ C1] ? NF_HOOK+0xfa/0x3a0 [ 518.040077][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 518.040097][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 518.040120][ C1] ? br_pass_frame_up+0x275/0x420 [ 518.040142][ C1] br_handle_frame_finish+0x1136/0x1950 [ 518.040168][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 518.040189][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 518.040239][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 518.040263][ C1] ? nf_hook_slow+0x176/0x220 [ 518.040288][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 518.040308][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 518.040328][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 518.040428][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 518.040449][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 518.040470][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 518.040491][ C1] ? lock_acquire+0x115/0x350 [ 518.040511][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 518.040534][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 518.040558][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 518.040581][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 518.040602][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 518.040626][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 518.040655][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 518.040679][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 518.040699][ C1] br_handle_frame+0x127f/0x1510 [ 518.040724][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 518.040742][ C1] ? __lock_acquire+0x6df/0x2e50 [ 518.040761][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 518.040786][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 518.040805][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 518.040866][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 518.040891][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 518.040929][ C1] ? process_backlog+0x3de/0x18b0 [ 518.040954][ C1] ? process_backlog+0x3de/0x18b0 [ 518.040982][ C1] process_backlog+0x727/0x18b0 [ 518.041016][ C1] ? process_backlog+0x3de/0x18b0 [ 518.041048][ C1] __napi_poll+0xaa/0x330 [ 518.041073][ C1] net_rx_action+0x61d/0xf50 [ 518.041105][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 518.041129][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 518.041188][ C1] handle_softirqs+0x226/0x860 [ 518.041214][ C1] ? do_softirq+0x77/0xd0 [ 518.041239][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 518.041326][ C1] do_softirq+0x77/0xd0 [ 518.041349][ C1] [ 518.041356][ C1] [ 518.041363][ C1] __local_bh_enable_ip+0x100/0x140 [ 518.041388][ C1] ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 518.041421][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 518.041449][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 518.041475][ C1] ? __lock_acquire+0x6df/0x2e50 [ 518.041494][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 518.041534][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 518.041560][ C1] ? kcov_remote_start+0x9c/0x7e0 [ 518.041599][ C1] ? kcov_remote_start+0x1a6/0x7e0 [ 518.041633][ C1] ieee80211_iface_work+0x78a/0x1010 [ 518.041667][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 518.041691][ C1] ? process_scheduled_works+0x97a/0x1630 [ 518.041715][ C1] process_scheduled_works+0xc3d/0x1630 [ 518.041755][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 518.041783][ C1] ? assign_work+0x3cf/0x5d0 [ 518.041810][ C1] worker_thread+0xa47/0xfb0 [ 518.041849][ C1] kthread+0x38b/0x480 [ 518.041866][ C1] ? __pfx_worker_thread+0x10/0x10 [ 518.041890][ C1] ? __pfx_kthread+0x10/0x10 [ 518.041908][ C1] ret_from_fork+0x514/0xb70 [ 518.041939][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 518.041968][ C1] ? __switch_to+0xc89/0x1420 [ 518.042002][ C1] ? __pfx_kthread+0x10/0x10 [ 518.042020][ C1] ret_from_fork_asm+0x1a/0x30 [ 518.042057][ C1]