last executing test programs: 2m46.795503322s ago: executing program 4 (id=5753): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newchain={0x84, 0x64, 0x20, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfffb, 0x10}, {0xfff1, 0xc}, {0xb, 0xffe8}}, [@TCA_CHAIN={0x8, 0xb, 0x7}, @filter_kind_options=@f_flow={{0x9}, {0x4c, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xb, 0xb}}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x8000000, 0x10000000, 0x1ff, 0xfffffffc, 0x81, {0x81, 0x0, 0x8, 0x3ff, 0x4, 0x5}, {0x28, 0x2, 0x4, 0x4000, 0x5, 0x4}, 0x2, 0x6, 0x80000001}}]}]}}]}, 0x84}}, 0x4000) 2m40.49923466s ago: executing program 4 (id=5756): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x6, 0x4, 0x8, 0xc}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_HELP={0xc, 0x5, 0x0, 0x1, {0x5, 0x1, '\x00'}}]}, 0x44}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000003ac0)=ANY=[@ANYRES32=r0, @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) recvmmsg(r4, &(0x7f0000003680)=[{{0x0, 0x0, 0x0}, 0x1009}, {{0x0, 0x0, &(0x7f0000003740)}, 0x6}, {{0x0, 0x0, 0x0}, 0xd7}, {{&(0x7f0000000480)=@qipcrtr, 0x80, &(0x7f0000003c80)=[{&(0x7f0000000500)=""/38, 0x26}, {&(0x7f0000000540)=""/97, 0x61}, {&(0x7f0000000640)=""/145, 0x91}, {&(0x7f0000000780)=""/240, 0xf0}, {&(0x7f0000000880)=""/162, 0xa2}, {&(0x7f0000000a40)=""/211, 0xd3}, {&(0x7f0000000b40)=""/152, 0x98}, {&(0x7f0000000c00)=""/100, 0x64}, {&(0x7f0000003c00)=""/96, 0x60}], 0x9, &(0x7f0000000d00)=""/24, 0x18}, 0x1}, {{&(0x7f0000000d40)=@can, 0x80, &(0x7f0000001200)=[{&(0x7f0000000dc0)=""/64, 0x40}, {&(0x7f0000000e40)=""/224, 0xe0}, {&(0x7f0000000f40)=""/12, 0xc}, {&(0x7f0000000f80)=""/204, 0xcc}, {&(0x7f00000010c0)=""/80, 0x50}, {&(0x7f0000001140)=""/40, 0x28}, {&(0x7f0000001180)=""/123, 0x7b}], 0x7, &(0x7f0000001280)=""/4096, 0x1000}, 0x5}, {{0x0, 0x0, &(0x7f0000003500)=[{&(0x7f0000002280)=""/125, 0x7d}, {&(0x7f0000002300)=""/172, 0xac}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/40, 0x28}, {&(0x7f0000003400)=""/251, 0xfb}], 0x5, &(0x7f0000003580)=""/210, 0xd2}, 0x3c71}], 0x6, 0x2202, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800000042008991"], 0x18}], 0x1}, 0x2000080) write$tcp_congestion(r2, &(0x7f00000000c0)='bbr\x00', 0x4) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) recvmsg$unix(r3, &(0x7f0000003a80)={&(0x7f0000003840), 0x6e, &(0x7f0000003a00)=[{&(0x7f00000038c0)=""/57, 0x39}, {&(0x7f0000003900)=""/11, 0xb}, {&(0x7f0000003940)=""/167, 0xa7}], 0x3, &(0x7f0000003a40)=[@cred={{0x1c}}], 0x20}, 0x10021) r6 = socket(0x2, 0x80805, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000003800)={'vlan0\x00', &(0x7f0000000940)=@ethtool_eeprom={0xb, 0xff, 0x7, 0x4a, "3bd7cccc023d29f42b1bdb06959b542dc2b3e02d04e151676e53cd954bb21deb81396907754c979f0e7ab8ed541a2acb03a926567b5bbf44c9dd39809d87438ed22fcb21a6d0d4c84533"}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfe94, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) r10 = socket(0x2a, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40080}, 0xc, &(0x7f0000000400)={&(0x7f0000000840)=ANY=[], 0x13c}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x82, &(0x7f00000001c0)={r11, 0x0, 0x3ff}, 0x8) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x4, 0x0}, 0x8) bind$unix(r3, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e24}, 0x6e) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r2}, 0x8) write$tcp_congestion(r2, &(0x7f00000003c0)='lp\x00', 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x40}]}, &(0x7f0000000100)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0}, 0x94) 2m40.214881274s ago: executing program 4 (id=5859): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x2d00, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x500}, 0x2}, 0x80) 2m40.196201219s ago: executing program 4 (id=5861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c000000170a01040000000000000000010000040c00054000000000000000010c0005400000006c256b94040900020073797a32000000000900020073797a31000000000c000540010000000000000108000740000000000900010073797a30"], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x20008020) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) 2m40.029849855s ago: executing program 4 (id=5863): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400030400000000000000542d"], 0x44}}, 0x0) 2m39.950218652s ago: executing program 4 (id=5866): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x7, 0x9, 0xfffffffc}, 0x61}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r2) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020007ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESOCT=r6], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x1a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@li, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x11, r9, 0x54865000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x11, r9, 0x54865000) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r8, r11, 0x0, 0x0) (async) sendfile(r8, r11, 0x0, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) 2m24.954527107s ago: executing program 2 (id=6043): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "ca4c8b8ed4412604"}}]}, 0x28}}, 0xf7f85815488cd7c0) 2m24.926962701s ago: executing program 2 (id=6045): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x789, 0x1, [0x1]}, &(0x7f0000000040)=0xa) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xb, &(0x7f0000000200)=0xfffffffc, 0x4) sendmsg$inet(r2, &(0x7f00000024c0)={&(0x7f0000000080)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, 0x0}, 0x24040000) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000080)={r1, 0x97, "7f327ce34dd2bdf244f207fc9c42e5bd92ce3383d0101bd17cd45fe7fb8268cfe347fd79491a504c0484dc550815a9f7a80d1eb2072315eb1defe8b1fc7f342cd0c46987eb65bb7fe89f3530851e971dca8e7e06ea10d53b7c2c43a815df087e823a22974a069199a45992cdf1448e4b1565008b4784d9b1e27be2f73a2c15c7aa88ea55ecf3c6697f6a4ef6d6e5703383c50397dd117d"}, &(0x7f0000000140)=0x9f) socket$inet6(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8a00fe00000000bfa200000000000007020000f8ffffffb703000008000000b70400", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18}, 0x800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x2}]}, 0x10) recvmmsg(r4, &(0x7f0000007340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/61, 0x3d}, 0xfffffffe}], 0x1, 0x0, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$kcm(0x29, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xfff3, 0xffe0}, {}, {0x5, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x0, 0xffff}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8848}, 0x4000010) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xbfffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2f, 0xee, 0x9, 0xac5b, 0x80000001, 0xa5ca, 0xdb3, 0x5, 0x7}}}}]}, 0x58}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0xd, 0xffffffffffffffff, 0x3, 0xd}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000340)={{{@in=@multicast2, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f0000000440)=0xe8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x4) getsockopt$inet_IP_XFRM_POLICY(r5, 0x0, 0x11, &(0x7f0000000c00)={{{@in6=@private1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @broadcast}}, 0x0, @in6=@private0}}, &(0x7f0000000240)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000640)={'vxcan0\x00', 0x0}) sendmsg$nl_xfrm(r5, &(0x7f0000000a00)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000009c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="2c030000160000042abd7000ffdbdf25ac1e0001000000000000000000000000ac1414bb0000000000000000000000004e20000e4e2400660200a04000000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="fc020000000000000000000000000000000004d3ff0000007f000001000000000000000000000000030000000000000008000000000000000400000000000000000000000000000081000000000000000500000000000000a000000000000000ffffffffffffff7f080000000000000008000000000000000800000000000000050000000000000000002000ac000000f3ffffff2bbd70000235000002000203c4000000000000000004000001000100ac000700fe8000000000000000000000000000aafe8000000000000000000000000000bb4e2100004e2400040a0020202b000000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="06000000000000000000008000000000830b00000000000000000000000000000500000000000000ffffffffffffff7f0800000000000000040000000000000045060000000000000300000000000000c600000000000000820000000000000007000000bf6b6e0000010202410000000c001c00", @ANYRES32=r14, @ANYBLOB="020000003c001700080000002bbd70002abd70002abd700025bd700005000000ff0f0000b0000000000000003e0a0000090000000900000005000000440f000034011100ff010000000000000000000000000001ac1414bb00000000000000000000000020010000000000000000000000000002ff0100000000000000000000000000016c010000000000000a000a00fe800000000000000000000000000029ff01000000000000000000000000000100000000000000000000000000000000fc0100000000000000000000000000013c030000003500000a000200fc010000000000000000000000000000ac1414bb000000000000000000000000640101020000000000000000000000007f000001000000000000000000000000ff0300000000000002000200ac1414aa00000000000000000000000000000000000000000000000000000000ac1e0001000000000000000000000000fc0200000000000000000000000000003c040000ff3400000a0002000a0010000100000000000000"], 0x32c}, 0x1, 0x0, 0x0, 0x400c041}, 0x4000894) r15 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000009b40)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x4, 0xb, @empty}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 2m24.879974037s ago: executing program 32 (id=5866): r0 = socket$unix(0x1, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x1, 0x7, 0x9, 0xfffffffc}, 0x61}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r2) socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r4, 0x18}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020007ff88125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) (async) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000140)='\r', 0x1}], 0x1, 0x0, 0x0, 0x86dd}, 0x4) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYRESOCT=r6], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x1a) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r9}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@li, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x11, r9, 0x54865000) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x11, r9, 0x54865000) r11 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) sendfile(r8, r11, 0x0, 0x0) (async) sendfile(r8, r11, 0x0, 0x0) r12 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) (async) ioctl$sock_SIOCETHTOOL(r12, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000300)=@ethtool_rxnfc={0x0, 0x2, 0x6, {0x3, @usr_ip6_spec={@empty, @dev={0xfe, 0x80, '\x00', 0x24}, 0xfffffff8, 0x3d, 0xe}, {0x0, @remote, 0xe, 0x4, [0x7, 0x6]}, @ah_ip4_spec={@multicast1, @private=0xa010101, 0x0, 0x5}, {0x0, @empty, 0x6, 0x5, [0x6, 0x9]}, 0xff, 0x3}}}) 2m24.591138953s ago: executing program 2 (id=6049): r0 = socket(0x10, 0x803, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000040)={0x0, 0x86, "858af84ecfd1ec79cc972ed7ce90a5d5d449aa99ea4c67dd3e2fa0a6c92ad87f2b749d46d5bfa1e99319f7d3c5e326e1e33bb34ca23ffdc38fbd9eb39cfbb1565eb2bda476fef2c4af2a53b0374593b6db725cbf70619cf488accc43cf7595e1bfc07cc4cf4afdeb48896607b074a236a2cb52d8bb008839c7292f10d8d7a72276a45076bdd7"}, &(0x7f0000000100)=0x8e) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x5, @private1, 0x40}}, 0x3, 0x1, 0xff, 0x4, 0x2, 0x1, 0xf8}, &(0x7f0000000200)=0x9c) sendto(r0, &(0x7f0000000000)="120000003200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) 2m24.349903229s ago: executing program 2 (id=6050): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x3, 0x2, 0x1}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000240), 0x4) write$ppp(r0, &(0x7f0000000040)="901bc29e85eb6d945391fd7f0b028f57f0adba3dae5334c4e30d21f077f16409eaf0fad1eb64424dd08063ac79ef4731f198cd4c4cc52e3a001dca", 0x3b) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000100000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m24.096961924s ago: executing program 2 (id=6052): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008001980"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffffff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=@getlink={0x30, 0x12, 0x2fa9ccd93d5c0297, 0x70bd28, 0x0, {0x7}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40010}, 0x0) 2m22.959372594s ago: executing program 2 (id=6066): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="e0f61cff6375718432fb484144fc33f94893a586d8736c1527fa11b51415cdf406501d8eeb75b1c71621351c664e8048ef30e425eb68119e9a18682064cca8023f7004e6a83a585ca1d7af2f342294bd7bf2891d2ee26dbe80ecaed3eea5c0225e5da4bbb2aa1c146d7c72940044abd447f3b07525a35e392d80b9d57234dc9bb711be26671ebc5cb0ae738b2a948e232ec9", 0x92}], 0x1}}], 0x1, 0x4000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(r0, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x370, 0x280, 0x1b0, 0x280, 0x280, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010101, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x7, 0x8, 0xdb1, 0x3, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="08009f000600000008002600b409"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000040), 0x4) 2m7.808287511s ago: executing program 33 (id=6066): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000340)="e0f61cff6375718432fb484144fc33f94893a586d8736c1527fa11b51415cdf406501d8eeb75b1c71621351c664e8048ef30e425eb68119e9a18682064cca8023f7004e6a83a585ca1d7af2f342294bd7bf2891d2ee26dbe80ecaed3eea5c0225e5da4bbb2aa1c146d7c72940044abd447f3b07525a35e392d80b9d57234dc9bb711be26671ebc5cb0ae738b2a948e232ec9", 0x92}], 0x1}}], 0x1, 0x4000000) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a24, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0x7, 0x6, @local}, 0x14) getsockname$packet(r1, &(0x7f0000000980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000540001050000000000c4000007008209", @ANYRES32=r5, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="00000001e000030000000000000000000000000008"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) listen(r0, 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x548, 0x370, 0x280, 0x1b0, 0x280, 0x280, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [0x0, 0xffffffff], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{}, {}, {}, 0x300}}}, {{@ipv6={@remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xffffff00], 'veth0_vlan\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x10, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@rand_addr=0x64010101, [0xff, 0xffffffff, 0xffffffff, 0xffffffff], 0x4e22, 0x4e21, 0x4e21, 0x4e22, 0x7, 0x8, 0xdb1, 0x3, 0xffff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r7, @ANYBLOB="08009f000600000008002600b409"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) r10 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000040), 0x4) 7.704876056s ago: executing program 0 (id=8133): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09200000000000b60901000000002066000000646c6c251801000020786c2500000000002020207b9af8ff000000005d9100000000000037010000f8ffffffb702000008000000b70300000000000015000000060000003f93000000000000b50300000000000085000071ff111d9d31245e78bc4e4760360076000000b7000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) close(r4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000000740)={0x0, 0x0, {0x0, @usage, 0x0}, {}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000b40)={r5, 0x4, 0x1, [0xd921, 0x40, 0x4, 0x4, 0x2], [0x2, 0xc7, 0x20a, 0x4, 0x6, 0x1, 0x0, 0x7fffffff, 0x8, 0x9, 0x6, 0x53, 0x80, 0x9, 0x5801, 0x9, 0x100, 0x80000000, 0x5, 0x3ff, 0xbd, 0x2, 0x5, 0x17, 0x10001, 0x0, 0x9, 0xe7ab, 0x9, 0x217, 0x4c8, 0xfffffffffffffffd, 0x6, 0xb84c, 0x0, 0x3, 0x9, 0x6, 0x6, 0x805, 0x1b, 0xc, 0x6, 0x0, 0xa1, 0x25cd, 0x6, 0x9, 0x7, 0x40, 0x24bf58da, 0x9, 0x9, 0x93e, 0x1, 0x7, 0xb1, 0x6, 0x6, 0x2, 0x879, 0xf, 0x2d43, 0xe, 0x6, 0x7, 0x7fffffff, 0x3, 0x9, 0x41e6, 0x5, 0x6, 0x7f, 0x7, 0x800000010, 0xffffffffffff7347, 0x3, 0x101, 0xc, 0x80, 0xfffffffffffeffff, 0x0, 0x3, 0xb190, 0x3, 0x2, 0x40, 0x9, 0x81af, 0x1000, 0x1, 0x2, 0x10001, 0x8, 0x0, 0x4, 0x20fd, 0x4, 0x3f6, 0x2, 0x5, 0x3ff, 0x5, 0x10000, 0x3, 0x4, 0x9, 0x4, 0x3, 0xffff, 0x6, 0x7, 0x1, 0x4, 0x8, 0x7ff, 0x2, 0x8001, 0x3]}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000a40)={0x0, 0xcf, @start={r5, 0x0, "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", "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"}, [0x0, 0x0, 0x80000000000000, 0x9, 0xffffffff, 0x1, 0x9, 0x5397, 0x3c1, 0x9, 0x5, 0xf00d, 0x9701792, 0xcb6, 0x10001, 0x18b, 0x8d38, 0x2, 0x3, 0x7, 0x1, 0x57e1, 0x4, 0x8000000000000000, 0xfffffffffffffc00, 0xffffffffffffffff, 0x8000000000000001, 0xff, 0x2, 0x4, 0x9, 0xa, 0x100000001, 0x6, 0x3, 0xfffffffffffffff9, 0xa9, 0x100000001, 0x3, 0x3ff, 0x0, 0x6b2c, 0x4, 0x1, 0x7, 0x1, 0x200, 0x7, 0x8, 0x8, 0x1000, 0xce1, 0x8, 0x57, 0x92, 0x7, 0x8, 0xa6, 0x8, 0x5, 0x4, 0x5, 0x4, 0x80000001]}) 7.321942449s ago: executing program 0 (id=8138): syz_emit_ethernet(0x46, &(0x7f0000000f00)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x15, 0xd}}}}}}, 0x0) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000040)={'macvtap0\x00', {0x2, 0x0, @remote}}) 7.234096154s ago: executing program 0 (id=8139): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x8d, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 7.178591714s ago: executing program 0 (id=8142): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xb6, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x4, 0x0, {0x23, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x76, 0xffffffffffffffff, [{0x0, 0xe, "87c07b337f0e60aa00000000"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x12, "007600000200325b8771349c000efb1a"}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0xe, "c8f46976e79ea788f03d9d32"}]}]}}}}}}}, 0x0) 7.100922575s ago: executing program 0 (id=8144): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)='%pS \x00'}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000080)={0x0, 0x5, 0x1, "fd"}, 0x9) r3 = socket(0x2, 0x80805, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0xfffffffffffffffe, 0x0) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r3, 0x6, 0x15, &(0x7f0000000140)=0x3, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a8001600a400014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) 6.92684084s ago: executing program 0 (id=8146): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000001780)={0x1, 'vlan1\x00', {}, 0x8}) 6.462839267s ago: executing program 1 (id=8159): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x67}, 0x94) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@random, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x18, 0x3a, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, {[], @mld={0x83, 0x0, 0x0, 0x9, 0xc036, @remote}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) (fail_nth: 65) 6.390538385s ago: executing program 1 (id=8161): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99bfa0018", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000001800)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000400007012bbd7000fedbdf250400c28004000180040008"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000005000)=ANY=[], 0x1198}, 0x1, 0x0, 0x0, 0x40}, 0x880) recvfrom$inet(r1, &(0x7f0000000000)=""/4084, 0x1198, 0x2102, 0x0, 0x0) 6.287076067s ago: executing program 1 (id=8163): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000008000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) 6.239506118s ago: executing program 5 (id=8165): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x8d, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 6.138719143s ago: executing program 3 (id=8167): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x20000000) 6.138384611s ago: executing program 1 (id=8168): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r3) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xc, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 6.126364635s ago: executing program 5 (id=8169): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (fail_nth: 3) 6.042951177s ago: executing program 3 (id=8171): r0 = socket$inet_udp(0x2, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}, @void, {@ipv6={0x86dd, @icmpv6={0x3, 0x6, '\x00', 0x28, 0x3a, 0xff, @local, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private1, @mcast2}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x448, 0x2e0, 0x190, 0xffffffff, 0x190, 0x0, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, 0x0, {[{{@uncond, 0x0, 0x158, 0x190, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@addrtype1={{0x28}, {0x4, 0x400, 0x3}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010102, @loopback, @gre_key=0x3, @port=0x4e20}}}}, {{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x64}, 0xff, 0xff000000, 'veth1_to_bridge\x00', 'ip6erspan0\x00', {0xff}, {}, 0x11, 0x2, 0x78}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @remote, @local, @port=0x4e20, @gre_key=0x6}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth1_to_hsr\x00', 'batadv_slave_1\x00', {}, {}, 0x6e, 0x0, 0x4}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @port=0x4e23}}}}, {{@ip={@multicast1, @broadcast, 0xff000000, 0xff, 'veth1_macvtap\x00', 'bridge0\x00', {}, {0xff}, 0x73, 0x2, 0x20}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xc, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x26}, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) r1 = socket$inet_tcp(0x2, 0x1, 0x0) pselect6(0xfffffffffffffeef, &(0x7f00000001c0)={0x0, 0x1000000}, 0x0, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x60}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000840)={r7, r2, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0, 0x0, 0x5}}, 0x30) syz_emit_ethernet(0xfef3, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0) 5.973094456s ago: executing program 5 (id=8172): socket$unix(0x1, 0x1, 0x0) (async) r0 = socket$unix(0x1, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000001c0)={0xffffffffffffffff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r3, 0x58, &(0x7f0000000300)}, 0x10) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={r3, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r4, 0x8}, 0x94) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) (async) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x0, 0x800, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x1d}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x24040895}, 0xc0) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001780)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r8, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x80000008, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0x0, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x3, 0x1966f9ad, 0x200, 0x20200, 0xb0fd, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x9, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x3, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x3, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x8, 0x8, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x2, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x6, 0x5cf1, 0x0, 0x1, 0x773, 0xfffffffb, 0x9, 0x8000, 0xa00000, 0x1, 0x0, 0x80000000, 0x9, 0x2a5, 0x4, 0x95e3, 0x8, 0xb, 0x7, 0x80000000, 0x4, 0x7fffffff, 0x56, 0x2, 0x3, 0x401, 0x3c6, 0x4, 0x56, 0x6d, 0x400, 0x93fb, 0x853c, 0x5, 0xfffffff0, 0x5, 0xfffff0d4, 0x7, 0xffffffff, 0x10000, 0x8, 0x7fffffff, 0xfffffffc, 0x4a, 0x800, 0xb, 0xffff, 0xb, 0xc, 0x7, 0x4, 0x6, 0x8, 0x800, 0x850e7fb, 0xd2dd, 0x2, 0x8001, 0x5, 0x8000, 0x9, 0x7, 0xffffff18, 0x0, 0x81, 0x2, 0x0, 0x1ff, 0x80, 0x4, 0x2, 0x7fff, 0xa64, 0x92e, 0xfffff682, 0xbc, 0x1, 0x8, 0x80000001, 0x7, 0x2, 0x1, 0x7fff, 0x4, 0x4, 0x100, 0x6, 0x9, 0x6, 0xffffffff, 0x8001, 0xc9, 0x0, 0x81, 0x7fffffff, 0x10000, 0x30, 0xfffffff6, 0x3000, 0xfffffffe, 0x8, 0x0, 0x400, 0x2, 0x9, 0x6, 0x0, 0x2ce2, 0x5, 0x0, 0x4, 0x7, 0x9, 0x6, 0x9d7, 0x2, 0x839, 0xe459, 0x1, 0x3630, 0x7, 0x6, 0x5, 0xd905, 0x9a, 0x5891, 0x3, 0x9, 0x9, 0x9f33, 0x1, 0xc0, 0x3ffc00, 0x8, 0x7, 0x8, 0x9, 0x3, 0x2, 0x97, 0x5, 0x7, 0x2, 0xc631, 0x3ff, 0xd43, 0x6, 0x800, 0x415, 0x3322, 0x0, 0x6, 0x4, 0x6, 0x8, 0xf50d, 0xd, 0x1ff, 0x7, 0xb07, 0x8, 0x5, 0x2, 0x1, 0x9f, 0x1000, 0xa, 0x4, 0x401, 0x175ac67f, 0x9, 0x7fff, 0x4, 0x6, 0xcc1, 0x800, 0xeff1, 0x8, 0xa, 0x3, 0x0, 0x6, 0x3, 0x1, 0x1000, 0x8, 0x3ff, 0x9, 0xfffffffb, 0x3, 0x268c, 0x1d, 0x4, 0x9, 0x5, 0xa, 0x2, 0x4, 0xbf33, 0x8, 0x8001, 0x0, 0x1ff, 0x200, 0x2, 0x1, 0x7, 0xfffffeff, 0x1, 0x0, 0x80, 0xa, 0xffffffff, 0xf07, 0xe6d, 0xff, 0x9, 0x400, 0x5, 0x6, 0x101, 0x7f, 0x8, 0x800, 0x60a, 0x3, 0x4df17694, 0x8, 0x4, 0x5, 0x6, 0x6, 0xb6e, 0x4, 0x3, 0xd, 0x400, 0x0, 0x5, 0x89e, 0x3, 0x9, 0x6, 0x5, 0x2, 0x1, 0x9, 0x8, 0x4, 0x7ff, 0x6, 0x6, 0x81, 0x0, 0x4]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r11, 0x112, 0x40000}, [@IFLA_ADDRESS={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4042) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r12, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 5.8788379s ago: executing program 6 (id=8173): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000007000010000000000fddbdf2507000000", @ANYRES32=r4, @ANYBLOB="0c000180080001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x440040c4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) ppoll(&(0x7f00000000c0)=[{r0, 0x1000}], 0x1, &(0x7f0000000140)={0x0, 0x3938700}, 0x0, 0x0) getsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000080), &(0x7f00000001c0)=0x10) 5.76481856s ago: executing program 1 (id=8174): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff23fe8881e24615ab884c90a867807021614b76f2fc6695edb367b14cbb91d59a589a76825842687a544e13b050ca60af93370e27babc155ea748c7ee418cfc", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200ea0000000800010004000000140003007866726d3000"/64], 0x58}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff00000000017c0000040042801c0001800600050088a80000100004002524298d275c232f262d2b00040002"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PMTUDISC={0x5, 0xa, 0x1}, @IFLA_IPTUN_TOS={0x5}]}}}]}, 0x44}}, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r3, 0x40309439, &(0x7f0000000040)={0x1, 0x2, 0x5}) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) 5.659920562s ago: executing program 3 (id=8175): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001f80)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x1, 0xfffffffe, 0x0, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x9, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x6, 0xfffffffc, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x2, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0xcd, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x3, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0xffffffff, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x0, 0xff, 0x9, 0xa7, 0x12, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0x3, 0xfffffc00, 0x6, 0x4, 0x800008, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc01, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x9, 0x3, 0x0, 0x800, 0x2, 0x800008, 0x7ff, 0x1, 0x80000009, 0x6, 0x5, 0x5, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0x7, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x3e, 0x9b4, 0x1, 0x8, 0x2, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x4, 0x1, 0x6, 0x1fd, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 5.547432935s ago: executing program 5 (id=8176): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a31000000000500010006000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 5.498266435s ago: executing program 1 (id=8177): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xf4b6}]}}]}, 0x3c}}, 0x20004055) (async, rerun: 32) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000580), &(0x7f0000000080)=@udp6, 0xff00}, 0x20) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.497517252s ago: executing program 5 (id=8178): r0 = socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket(0xa, 0xa, 0xb8c) recvmmsg(r1, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)=""/175, 0xaf}], 0x1}}], 0x1, 0x40000161, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r2, 0x10c, 0x2, &(0x7f0000000140), 0x4) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0\x00'}) syz_emit_ethernet(0x2a, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x1000, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo={0x8, 0x0, 0x0, 0x6, 0x3}}}}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x4c}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000600)=""/83, 0x53}], 0x2}, 0x0) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240)=0x18, &(0x7f0000000300)=0x4) setsockopt$MRT6_DEL_MIF(r5, 0x29, 0xcb, &(0x7f0000000000)={0x0, 0x0, 0xa, 0x0, 0x7fffffff}, 0xc) 4.135325485s ago: executing program 6 (id=8179): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x8d, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 4.087516957s ago: executing program 6 (id=8180): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xb6, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa8, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x4, 0x0, {0x23, 0x4, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x78, 0xffffffffffffffff, [{0x0, 0xe, "87c07b337f0e60aa00000000"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x12, "007600000200325b8771349c000efb1a"}, {0x2, 0x2}, {0x0, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x6, 0xa, "0000000000800000"}, {0x7, 0x11, "73bc23f9ffffffa30900a301c84600"}, {0x0, 0xe, "c8f46976e79ea788f03d9d32"}]}]}}}}}}}, 0x0) 4.045580386s ago: executing program 6 (id=8181): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000a40)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x48}}, 0x20000000) 4.010526215s ago: executing program 6 (id=8182): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xb90, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 416.390092ms ago: executing program 6 (id=8183): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x5460, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="000100000314000129bd7000fcdbdf250900020073797a3200000000080041007369770014003300776731000000000089e16d73e8098d3a0900020073697700140033007465616d3000000000000000000000000900020073797a310000000008004100736977001400330073797a6b616c6c6572310000000000000900020073797a3200000000080041007278650014003300767863616e31000000000000000000000900020073797a300000000008004100727865001400330076657468305f6d6163767461700000000900020073797a300000000008004100727865001400330074756e6c3000"/256], 0x100}, 0x1, 0x0, 0x0, 0xc080}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r7, 0x11, 0x65, &(0x7f00000001c0)=0x800, 0x4) (async) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffd, @local, 0x3}, 0x1c) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x400}}}, 0x32) writev(r6, &(0x7f0000000180)=[{&(0x7f0000000140)="a01ced", 0x3}], 0x1) (async) sendmsg$nl_route_sched(r3, 0x0, 0x20040084) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079100000000000227eaca65708012180500000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x6}, 0x48) (rerun: 32) 416.130251ms ago: executing program 5 (id=8184): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xffff, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x4, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x7f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) close(r3) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0xc, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x2}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 175.031331ms ago: executing program 3 (id=8185): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x100}, 0x1c) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e20, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x7}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c94c0b42a21d7214bf92594925208a0e2f964e654dc534a63207008cfcf19b49f3ee818a118a7c49462189316d556d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f00000000c0), 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty, 0x41020000}, 0x1c) 174.648707ms ago: executing program 3 (id=8186): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000c00)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x4e22, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x4d3, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x1, 0x3, 0x9, 0x2, 0x1, 0x4}]}]}, 0xfc}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback={0x11}, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in6=@mcast2, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x0) 0s ago: executing program 3 (id=8187): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000006c0)={r1, 0x5, 0x26, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e24}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000801) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000040)=@ethtool_regs={0x4, 0x4, 0xb, "f42a97b96d02674f51eae4"}}) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): z.5.7008'. [ 560.534156][T29550] netlink: 'syz.5.7014': attribute type 1 has an invalid length. [ 560.555302][T29550] 8021q: adding VLAN 0 to HW filter on device bond10 [ 560.567101][T29550] netlink: 40 bytes leftover after parsing attributes in process `syz.5.7014'. [ 560.654510][T29558] netlink: 'syz.3.7018': attribute type 1 has an invalid length. [ 560.726071][T29564] openvswitch: netlink: Flow key attribute not present in set flow. [ 561.059750][T29591] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.7030'. [ 561.181165][T29601] netlink: 'syz.5.7034': attribute type 11 has an invalid length. [ 561.234216][T29601] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.251157][T29601] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 561.278840][T29601] mac80211_hwsim hwsim125 wlan0: entered promiscuous mode [ 561.286086][T29601] mac80211_hwsim hwsim125 wlan0: entered allmulticast mode [ 561.388043][T29610] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7037'. [ 561.492946][T29615] netlink: 104 bytes leftover after parsing attributes in process `syz.6.7039'. [ 561.569143][T29619] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7042'. [ 561.584884][T29619] openvswitch: netlink: Missing key (keys=40, expected=80) [ 561.892863][T29646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7049'. [ 561.950486][T29650] netlink: 'syz.6.7051': attribute type 1 has an invalid length. [ 562.024315][T29650] 8021q: adding VLAN 0 to HW filter on device bond5 [ 562.279911][T29681] nbd: must specify an index to disconnect [ 562.496809][T29699] netlink: 'syz.5.7066': attribute type 1 has an invalid length. [ 562.518408][T29699] 8021q: adding VLAN 0 to HW filter on device bond11 [ 562.779098][T29722] netlink: 'syz.5.7073': attribute type 11 has an invalid length. [ 562.991240][T29742] netlink: 'syz.0.7077': attribute type 1 has an invalid length. [ 563.066046][T29742] 8021q: adding VLAN 0 to HW filter on device bond7 [ 563.105123][T29752] netlink: 'syz.6.7082': attribute type 10 has an invalid length. [ 563.369330][T29775] IPv6: Can't replace route, no match found [ 563.392789][T29775] netlink: 'syz.0.7084': attribute type 1 has an invalid length. [ 563.430124][T29752] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 563.499892][T29774] 8021q: adding VLAN 0 to HW filter on device bond12 [ 563.518955][T29775] netlink: 'syz.0.7084': attribute type 10 has an invalid length. [ 563.527227][T29775] dummy0: entered promiscuous mode [ 563.726561][T29791] netlink: 'syz.5.7091': attribute type 1 has an invalid length. [ 563.782182][T29791] 8021q: adding VLAN 0 to HW filter on device bond13 [ 564.318125][T29840] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 564.328953][T29840] xt_hashlimit: size too large, truncated to 1048576 [ 564.412707][T29837] sctp: [Deprecated]: syz.5.7105 (pid 29837) Use of int in max_burst socket option deprecated. [ 564.412707][T29837] Use struct sctp_assoc_value instead [ 564.538874][T29851] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 564.720150][T29867] tipc: Enabled bearer , priority 0 [ 564.730653][T29867] syzkaller0: entered promiscuous mode [ 564.742910][T29867] syzkaller0: entered allmulticast mode [ 564.761927][T29867] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 564.787454][T29867] tipc: Resetting bearer [ 564.794751][T29873] __nla_validate_parse: 22 callbacks suppressed [ 564.794769][T29873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7116'. [ 564.810129][T29873] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7116'. [ 564.811512][T29866] tipc: Resetting bearer [ 564.856388][T29866] tipc: Disabling bearer [ 564.927562][T29879] netlink: 7064 bytes leftover after parsing attributes in process `syz.6.7119'. [ 564.937026][T29879] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 565.223875][T29891] batadv0: entered promiscuous mode [ 565.238140][T29891] macsec1: entered promiscuous mode [ 565.250726][T29891] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 565.269808][T29891] batadv0: left promiscuous mode [ 565.380345][T29900] syzkaller0: entered promiscuous mode [ 565.385885][T29900] syzkaller0: entered allmulticast mode [ 565.396790][T29900] netlink: 48 bytes leftover after parsing attributes in process `syz.3.7127'. [ 565.430707][T29900] TC_ACT_REPEAT abuse ? [ 565.591407][T29907] netlink: 'syz.1.7129': attribute type 7 has an invalid length. [ 565.608585][T29907] netlink: 'syz.1.7129': attribute type 8 has an invalid length. [ 566.050316][T29927] x_tables: duplicate underflow at hook 1 [ 566.564547][T29944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7141'. [ 566.860549][T29948] ip_vti0: left allmulticast mode [ 567.014999][T29948] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.022599][T29948] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.211062][T29948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.224920][T29948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 567.430874][T29948] macvlan0: left promiscuous mode [ 567.477518][T29948] macsec0: left promiscuous mode [ 567.482547][T29948] macsec0: left allmulticast mode [ 567.495563][T29948] netdevsim netdevsim6 netdevsim0: left promiscuous mode [ 567.519899][T29948] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 567.526859][T29948] ipvlan2: left allmulticast mode [ 567.531927][T29948] batadv_slave_1: left allmulticast mode [ 567.554440][T29948] vlan2: left promiscuous mode [ 567.559286][T29948] geneve1: left promiscuous mode [ 567.616324][T29949] veth3: entered allmulticast mode [ 567.625289][T29949] bond1: (slave veth3): Enslaving as an active interface with an up link [ 567.660539][T29962] syzkaller0: entered promiscuous mode [ 567.677998][T29962] syzkaller0: entered allmulticast mode [ 567.705584][ T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.756371][ T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.777041][ T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.789142][ T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.953239][T29986] netlink: 'syz.3.7154': attribute type 1 has an invalid length. [ 568.263207][T30006] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7163'. [ 568.382396][T30011] veth0_to_team: entered promiscuous mode [ 568.412659][T30011] veth0_to_team: left promiscuous mode [ 568.463043][T30016] netlink: 'syz.5.7168': attribute type 16 has an invalid length. [ 568.470930][T30016] netlink: 'syz.5.7168': attribute type 3 has an invalid length. [ 568.478702][T30016] netlink: 64066 bytes leftover after parsing attributes in process `syz.5.7168'. [ 568.720000][T30031] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7175'. [ 568.811535][T30040] hsr0: entered promiscuous mode [ 569.352461][T30068] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7189'. [ 569.384010][T30068] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 569.511346][T30071] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7190'. [ 569.796750][T30087] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 569.812038][T30087] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 569.857449][T30089] vlan3: entered promiscuous mode [ 569.862551][T30089] bridge0: entered promiscuous mode [ 570.002451][T30096] syzkaller0: entered promiscuous mode [ 570.009990][T30096] syzkaller0: entered allmulticast mode [ 570.500866][T30118] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7208'. [ 570.566556][T30125] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7208'. [ 570.939357][T30148] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7216'. [ 570.948487][T30148] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7216'. [ 571.107461][ T12] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.118192][ T12] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.143293][T30146] tipc: Enabled bearer , priority 0 [ 571.164614][T30134] syzkaller0: entered promiscuous mode [ 571.170483][T30134] syzkaller0: entered allmulticast mode [ 571.193829][ T12] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.217194][ T12] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.288931][T30103] tipc: Resetting bearer [ 571.326307][T30103] tipc: Disabling bearer [ 571.338301][T30168] x_tables: duplicate underflow at hook 1 [ 571.359515][T30170] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7225'. [ 571.928368][T30199] netlink: 'syz.5.7238': attribute type 17 has an invalid length. [ 571.998463][T30202] syzkaller0: entered promiscuous mode [ 572.003352][T30199] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7238'. [ 572.005026][T30202] syzkaller0: entered allmulticast mode [ 572.027891][T30199] bond0: option all_slaves_active: invalid value (8) [ 572.129052][T30207] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 572.153479][T30207] netlink: 67 bytes leftover after parsing attributes in process `syz.3.7241'. [ 572.209333][T30207] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 572.425848][T30221] sock: sock_set_timeout: `syz.0.7248' (pid 30221) tries to set negative timeout [ 572.802640][T30242] netlink: 7 bytes leftover after parsing attributes in process `syz.5.7255'. [ 573.786713][T30276] syz_tun: entered allmulticast mode [ 573.795443][T30276] bond0: entered promiscuous mode [ 573.800553][T30276] bond_slave_0: entered promiscuous mode [ 573.806325][T30276] bond_slave_1: entered promiscuous mode [ 573.890601][T30280] netlink: 356 bytes leftover after parsing attributes in process `syz.3.7272'. [ 574.750748][T30299] syzkaller0: entered promiscuous mode [ 574.756591][T30299] syzkaller0: entered allmulticast mode [ 574.836793][T30301] syz_tun: entered allmulticast mode [ 574.928810][T30305] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7283'. [ 575.030090][T30303] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.037412][T30303] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.130784][T30303] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 575.143710][T30303] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 575.264977][ T6422] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.273929][ T6422] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 575.282928][ T6422] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.291831][ T6422] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 575.300837][ T6422] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.309733][ T6422] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 575.318728][ T6422] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.349977][ T6422] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 575.359652][T30309] netlink: 'syz.1.7285': attribute type 4 has an invalid length. [ 575.397065][T30309] netlink: 'syz.1.7285': attribute type 4 has an invalid length. [ 575.768085][T30325] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7292'. [ 575.892108][T30332] netlink: 'syz.5.7296': attribute type 1 has an invalid length. [ 575.914539][T30332] 8021q: adding VLAN 0 to HW filter on device bond14 [ 575.935216][T30332] bond14: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 575.952189][T30332] bond14: entered promiscuous mode [ 575.961648][T30332] bond14: entered allmulticast mode [ 575.974430][T30332] macvlan2: entered promiscuous mode [ 575.979824][T30332] macvlan2: entered allmulticast mode [ 575.986698][T30332] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 576.100725][T30344] sctp: [Deprecated]: syz.0.7300 (pid 30344) Use of int in max_burst socket option. [ 576.100725][T30344] Use struct sctp_assoc_value instead [ 576.246168][T30354] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7305'. [ 576.277502][T30357] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 576.289366][T30357] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7306'. [ 576.348728][T30362] xt_hashlimit: size too large, truncated to 1048576 [ 576.810317][T30394] vlan3: entered promiscuous mode [ 576.831062][T30394] syz_tun: entered promiscuous mode [ 577.118593][T30411] syzkaller0: entered promiscuous mode [ 577.124663][T30411] syzkaller0: entered allmulticast mode [ 578.110239][T30446] netlink: 8772 bytes leftover after parsing attributes in process `syz.1.7338'. [ 578.322403][T30454] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 40 [ 578.437651][ T6422] 0ªX¹¦Dö»: left allmulticast mode [ 578.443199][ T6422] bridge0: port 1(00ªX¹¦Dö») entered disabled state [ 578.456255][ T6422] pim6reg527: left allmulticast mode [ 578.462187][ T6422] pimreg3: left allmulticast mode [ 578.574804][ T6422] bond10 (unregistering): (slave geneve3): Releasing active interface [ 578.590377][ T6422] bond9 (unregistering): (slave geneve2): Releasing active interface [ 578.611512][ T6422] team0: Port device geneve1 removed [ 578.732726][ T6422] bond0 (unregistering): (slave bond14): Releasing backup interface [ 578.776252][ T6422] bond0 (unregistering): Released all slaves [ 578.801277][ T6422] bond1 (unregistering): Released all slaves [ 578.812835][ T6422] bond2 (unregistering): Released all slaves [ 578.824683][ T6422] bond3 (unregistering): Released all slaves [ 578.841375][ T6422] bond4 (unregistering): Released all slaves [ 578.891112][ T6422] bond5 (unregistering): Released all slaves [ 578.904379][ T6422] bond6 (unregistering): Released all slaves [ 578.921232][ T6422] bond7 (unregistering): Released all slaves [ 578.935487][ T6422] bond8 (unregistering): Released all slaves [ 578.961095][ T6422] bond9 (unregistering): Released all slaves [ 579.022567][ T6422] bond10 (unregistering): Released all slaves [ 579.059491][ T6422] bond11 (unregistering): Released all slaves [ 579.073517][ T6422] bond12 (unregistering): Released all slaves [ 579.086430][ T6422] bond13 (unregistering): Released all slaves [ 579.101463][ T6422] bond14 (unregistering): Released all slaves [ 579.164368][T30490] veth0_to_team: entered promiscuous mode [ 579.174580][T30490] erspan0: entered promiscuous mode [ 579.182445][T30490] debugfs: 'hsr1' already exists in 'hsr' [ 579.188643][T30490] Cannot create hsr debugfs directory [ 579.279510][ T6422] : left promiscuous mode [ 579.341093][T30499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7361'. [ 579.462222][T30464] lo speed is unknown, defaulting to 1000 [ 579.471214][ T6422] tipc: Left network mode [ 579.482423][ T6422] IPVS: stopping backup sync thread 7050 ... [ 579.627939][T30514] syzkaller0: entered promiscuous mode [ 579.643755][T30514] syzkaller0: entered allmulticast mode [ 580.022734][T30530] syzkaller0: entered promiscuous mode [ 580.028286][T30530] syzkaller0: entered allmulticast mode [ 580.740577][T30546] bond4: entered allmulticast mode [ 580.745882][T30546] ip6gre2: entered allmulticast mode [ 580.760952][T30546] dvmrp6: entered allmulticast mode [ 580.771754][T30545] bond4: left allmulticast mode [ 580.776805][T30545] ip6gre2: left allmulticast mode [ 580.888505][T30553] tipc: Enabling of bearer rejected, failed to enable media [ 581.103606][T30560] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7388'. [ 581.114536][T30560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7388'. [ 581.116827][T30558] gretap3: entered promiscuous mode [ 581.125359][T30560] netlink: 'syz.3.7388': attribute type 12 has an invalid length. [ 581.158154][T30558] batman_adv: batadv0: Adding interface: gretap3 [ 581.166852][T30558] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 581.186890][T30560] netlink: 'syz.3.7388': attribute type 11 has an invalid length. [ 581.194810][T30558] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 581.339273][T30578] Cannot find set identified by id 65534 to match [ 581.389621][T30581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7395'. [ 581.430943][T30584] tipc: Enabling of bearer rejected, failed to enable media [ 581.733696][T30594] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7401'. [ 581.996724][T30611] tipc: Enabling of bearer rejected, failed to enable media [ 582.045111][T30620] tipc: Failed to remove unknown binding: 66,1,1/0:2882994401/2882994403 [ 582.060683][T30620] tipc: Failed to remove unknown binding: 66,1,1/0:2882994401/2882994403 [ 582.121154][T30627] 8021q: adding VLAN 0 to HW filter on device bond6 [ 582.129179][T30630] netlink: 'syz.1.7413': attribute type 1 has an invalid length. [ 582.194756][T30630] 8021q: adding VLAN 0 to HW filter on device bond6 [ 582.205886][T30630] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7413'. [ 582.220514][T30627] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 582.236781][T16492] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.297290][T16492] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.316591][T16492] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.340052][T30636] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7414'. [ 582.384257][T16492] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.407194][T30636] FAULT_INJECTION: forcing a failure. [ 582.407194][T30636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 582.459130][T30636] CPU: 1 UID: 0 PID: 30636 Comm: syz.6.7414 Not tainted syzkaller #0 PREEMPT(full) [ 582.459158][T30636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 582.459172][T30636] Call Trace: [ 582.459181][T30636] [ 582.459190][T30636] dump_stack_lvl+0xe8/0x150 [ 582.459230][T30636] should_fail_ex+0x40c/0x560 [ 582.459257][T30636] _copy_from_user+0x2d/0xb0 [ 582.459290][T30636] wext_handle_ioctl+0xc7/0x1d0 [ 582.459372][T30636] ? __pfx_wext_handle_ioctl+0x10/0x10 [ 582.459394][T30636] ? hook_file_ioctl+0x1f0/0x5c0 [ 582.459435][T30636] sock_ioctl+0x159/0x7e0 [ 582.459456][T30636] ? lock_release+0x4b/0x3c0 [ 582.459488][T30636] ? __pfx_sock_ioctl+0x10/0x10 [ 582.459508][T30636] ? __fget_files+0x2a/0x420 [ 582.459532][T30636] ? __fget_files+0x3a2/0x420 [ 582.459555][T30636] ? __fget_files+0x2a/0x420 [ 582.459579][T30636] ? bpf_lsm_file_ioctl+0x9/0x20 [ 582.459609][T30636] ? __pfx_sock_ioctl+0x10/0x10 [ 582.459629][T30636] __se_sys_ioctl+0xfc/0x170 [ 582.459658][T30636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.459681][T30636] do_syscall_64+0x174/0x580 [ 582.459708][T30636] ? trace_irq_disable+0x3b/0x140 [ 582.459736][T30636] ? clear_bhb_loop+0x40/0x90 [ 582.459795][T30636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.459816][T30636] RIP: 0033:0x7fc34819ce59 [ 582.459834][T30636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 582.459852][T30636] RSP: 002b:00007fc3490dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 582.459875][T30636] RAX: ffffffffffffffda RBX: 00007fc348415fa0 RCX: 00007fc34819ce59 [ 582.459890][T30636] RDX: 0000200000000000 RSI: 0000000000008b34 RDI: 0000000000000004 [ 582.459904][T30636] RBP: 00007fc3490dc090 R08: 0000000000000000 R09: 0000000000000000 [ 582.459917][T30636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 582.459929][T30636] R13: 00007fc348416038 R14: 00007fc348415fa0 R15: 00007ffc557187e8 [ 582.459955][T30636] [ 583.169635][T30674] FAULT_INJECTION: forcing a failure. [ 583.169635][T30674] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 583.182814][T30674] CPU: 0 UID: 0 PID: 30674 Comm: syz.6.7426 Not tainted syzkaller #0 PREEMPT(full) [ 583.182840][T30674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 583.182853][T30674] Call Trace: [ 583.182861][T30674] [ 583.182870][T30674] dump_stack_lvl+0xe8/0x150 [ 583.182898][T30674] should_fail_ex+0x40c/0x560 [ 583.182923][T30674] _copy_from_user+0x2d/0xb0 [ 583.182952][T30674] bpf_test_init+0xd8/0x150 [ 583.182985][T30674] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 583.183016][T30674] ? lock_release+0x4b/0x3c0 [ 583.183046][T30674] ? rcu_is_watching+0x15/0xb0 [ 583.183069][T30674] ? rcu_is_watching+0x15/0xb0 [ 583.183090][T30674] ? lock_release+0x4b/0x3c0 [ 583.183120][T30674] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 583.183154][T30674] ? __fget_files+0x2a/0x420 [ 583.183179][T30674] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 583.183218][T30674] bpf_prog_test_run+0x2c5/0x340 [ 583.183251][T30674] __sys_bpf+0x643/0x950 [ 583.183279][T30674] ? __pfx___sys_bpf+0x10/0x10 [ 583.183314][T30674] ? ksys_write+0x242/0x270 [ 583.183343][T30674] ? __pfx_ksys_write+0x10/0x10 [ 583.183373][T30674] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.183395][T30674] __x64_sys_bpf+0x7c/0x90 [ 583.183433][T30674] do_syscall_64+0x174/0x580 [ 583.183461][T30674] ? trace_irq_disable+0x3b/0x140 [ 583.183489][T30674] ? clear_bhb_loop+0x40/0x90 [ 583.183513][T30674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.183533][T30674] RIP: 0033:0x7fc34819ce59 [ 583.183552][T30674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 583.183570][T30674] RSP: 002b:00007fc3490dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 583.183594][T30674] RAX: ffffffffffffffda RBX: 00007fc348415fa0 RCX: 00007fc34819ce59 [ 583.183609][T30674] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 583.183623][T30674] RBP: 00007fc3490dc090 R08: 0000000000000000 R09: 0000000000000000 [ 583.183636][T30674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 583.183648][T30674] R13: 00007fc348416038 R14: 00007fc348415fa0 R15: 00007ffc557187e8 [ 583.183674][T30674] [ 583.494760][T30677] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7427'. [ 584.044305][T30702] netlink: 'syz.3.7434': attribute type 16 has an invalid length. [ 584.052419][T30702] netlink: 'syz.3.7434': attribute type 17 has an invalid length. [ 584.235614][T30694] 8021q: adding VLAN 0 to HW filter on device bond7 [ 584.391293][T30699] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.400402][T30699] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.529678][T30702] bond0: left promiscuous mode [ 584.534610][T30702] bond_slave_0: left promiscuous mode [ 584.540182][T30702] bond_slave_1: left promiscuous mode [ 584.546297][T30702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 584.567305][T30702] bridge0: port 1(bridge_slave_0) entered blocking state [ 584.574454][T30702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 584.584328][T30702] bridge0: port 2(bridge_slave_1) entered blocking state [ 584.606130][T30702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 584.673829][T30702] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 584.740743][T30709] veth0_to_team: entered promiscuous mode [ 584.780084][T30709] veth0_to_team: left promiscuous mode [ 584.797597][T30695] lo speed is unknown, defaulting to 1000 [ 584.813773][T30718] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7440'. [ 585.043927][T30625] Set syz1 is full, maxelem 65536 reached [ 585.123634][T30727] xt_cgroup: path and classid specified [ 585.216521][T30739] netlink: 212 bytes leftover after parsing attributes in process `syz.1.7445'. [ 585.319926][T30736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7444'. [ 585.644640][T30752] 8021q: adding VLAN 0 to HW filter on device bond7 [ 586.187699][T30796] netlink: 'syz.5.7458': attribute type 1 has an invalid length. [ 586.487483][T30803] __nla_validate_parse: 1 callbacks suppressed [ 586.487505][T30803] netlink: 56 bytes leftover after parsing attributes in process `syz.5.7460'. [ 586.582943][T30810] 8021q: adding VLAN 0 to HW filter on device bond8 [ 586.698367][T30818] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7465'. [ 586.745050][T30818] macvtap1: entered promiscuous mode [ 586.750654][T30818] vlan0: entered promiscuous mode [ 586.756173][T30818] macvtap1: entered allmulticast mode [ 586.764366][T30818] vlan0: entered allmulticast mode [ 586.769861][T30818] veth0_vlan: entered allmulticast mode [ 586.856106][T30829] netlink: 44 bytes leftover after parsing attributes in process `syz.0.7468'. [ 587.061224][T30844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7475'. [ 587.191986][T30852] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.7477'. [ 587.416543][T30862] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7481'. [ 587.642495][T30871] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 587.757607][T30883] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 587.866142][T30888] netlink: 'syz.1.7493': attribute type 1 has an invalid length. [ 587.976920][T30888] 8021q: adding VLAN 0 to HW filter on device bond8 [ 588.888480][T30927] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7506'. [ 589.240241][T30941] veth0_to_team: entered promiscuous mode [ 589.247648][T30941] gretap0: entered promiscuous mode [ 589.254683][T30941] debugfs: 'hsr1' already exists in 'hsr' [ 589.261289][T30941] Cannot create hsr debugfs directory [ 589.440520][T30953] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7511'. [ 589.463625][T30950] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 589.548991][T30959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7512'. [ 589.557913][T30959] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7512'. [ 589.746009][T30948] veth0: entered promiscuous mode [ 589.764331][T30953] veth0 (unregistering): left promiscuous mode [ 590.509271][T30981] FAULT_INJECTION: forcing a failure. [ 590.509271][T30981] name failslab, interval 1, probability 0, space 0, times 0 [ 590.593362][T30981] CPU: 0 UID: 0 PID: 30981 Comm: syz.6.7523 Not tainted syzkaller #0 PREEMPT(full) [ 590.593393][T30981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 590.593407][T30981] Call Trace: [ 590.593415][T30981] [ 590.593425][T30981] dump_stack_lvl+0xe8/0x150 [ 590.593452][T30981] should_fail_ex+0x40c/0x560 [ 590.593477][T30981] should_failslab+0xa8/0x100 [ 590.593506][T30981] __kmalloc_cache_noprof+0x88/0x660 [ 590.593535][T30981] ? __xdp_reg_mem_model+0x1e9/0x5a0 [ 590.593572][T30981] __xdp_reg_mem_model+0x1e9/0x5a0 [ 590.593608][T30981] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 590.593645][T30981] xdp_reg_mem_model+0x22/0x40 [ 590.593675][T30981] bpf_test_run_xdp_live+0x292/0x1c20 [ 590.593707][T30981] ? rcu_is_watching+0x15/0xb0 [ 590.593729][T30981] ? lock_release+0x4b/0x3c0 [ 590.593760][T30981] ? preempt_count_add+0x91/0x190 [ 590.593792][T30981] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 590.593827][T30981] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 590.593870][T30981] ? 0xffffffffa02036d4 [ 590.593887][T30981] ? 0xffffffffa0203788 [ 590.593903][T30981] ? 0xffffffffa02037cc [ 590.593933][T30981] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 590.593960][T30981] ? _copy_from_user+0x94/0xb0 [ 590.593988][T30981] ? bpf_test_init+0x113/0x150 [ 590.594017][T30981] ? xdp_convert_md_to_buff+0x5b/0x330 [ 590.594050][T30981] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 590.594081][T30981] ? lock_release+0x4b/0x3c0 [ 590.594114][T30981] ? rcu_is_watching+0x15/0xb0 [ 590.594135][T30981] ? lock_release+0x4b/0x3c0 [ 590.594165][T30981] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 590.594200][T30981] ? __fget_files+0x2a/0x420 [ 590.594225][T30981] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 590.594268][T30981] bpf_prog_test_run+0x2c5/0x340 [ 590.594301][T30981] __sys_bpf+0x643/0x950 [ 590.594330][T30981] ? __pfx___sys_bpf+0x10/0x10 [ 590.594367][T30981] ? ksys_write+0x242/0x270 [ 590.594396][T30981] ? __pfx_ksys_write+0x10/0x10 [ 590.594427][T30981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.594449][T30981] __x64_sys_bpf+0x7c/0x90 [ 590.594474][T30981] do_syscall_64+0x174/0x580 [ 590.594501][T30981] ? trace_irq_disable+0x3b/0x140 [ 590.594528][T30981] ? clear_bhb_loop+0x40/0x90 [ 590.594552][T30981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.594573][T30981] RIP: 0033:0x7fc34819ce59 [ 590.594592][T30981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 590.594611][T30981] RSP: 002b:00007fc3490dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 590.594635][T30981] RAX: ffffffffffffffda RBX: 00007fc348415fa0 RCX: 00007fc34819ce59 [ 590.594651][T30981] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 590.594665][T30981] RBP: 00007fc3490dc090 R08: 0000000000000000 R09: 0000000000000000 [ 590.594678][T30981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 590.594691][T30981] R13: 00007fc348416038 R14: 00007fc348415fa0 R15: 00007ffc557187e8 [ 590.594716][T30981] [ 590.616088][T30989] xt_hl: Unknown Hop Limit match mode: 206 [ 590.873581][T30992] tipc: Enabled bearer , priority 0 [ 591.124620][T30990] tipc: Disabling bearer [ 591.128673][T31003] netlink: 'syz.3.7530': attribute type 1 has an invalid length. [ 591.152162][T31003] 8021q: adding VLAN 0 to HW filter on device bond2 [ 591.193186][T31006] netlink: 'syz.3.7531': attribute type 1 has an invalid length. [ 591.229240][T31006] 8021q: adding VLAN 0 to HW filter on device bond3 [ 591.248873][T31006] bond3: (slave geneve3): making interface the new active one [ 591.258025][T31006] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 591.504300][T31022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 591.512197][T31022] 8021q: adding VLAN 0 to HW filter on device team0 [ 591.522770][T31022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 591.584229][T31022] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 591.594635][T31022] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 591.607776][T31022] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 591.688273][T31022] __nla_validate_parse: 1 callbacks suppressed [ 591.688295][T31022] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7536'. [ 591.719716][ T6422] IPVS: stop unused estimator thread 0... [ 591.855543][T31050] netlink: 'syz.1.7542': attribute type 11 has an invalid length. [ 591.863431][T31050] netlink: 224 bytes leftover after parsing attributes in process `syz.1.7542'. [ 592.103661][T31065] netlink: 'syz.0.7549': attribute type 9 has an invalid length. [ 592.174175][T31067] tipc: Enabled bearer , priority 0 [ 592.183428][T31066] tipc: Disabling bearer [ 592.545863][T31075] netlink: 'syz.5.7554': attribute type 10 has an invalid length. [ 592.614228][T31075] team0: left promiscuous mode [ 592.621772][T31075] 8021q: adding VLAN 0 to HW filter on device team0 [ 592.638201][T31075] bond0: (slave team0): Enslaving as an active interface with an up link [ 592.705467][T31086] netlink: 20 bytes leftover after parsing attributes in process `syz.3.7556'. [ 592.810491][T31092] veth3: entered promiscuous mode [ 592.822976][T31092] veth3: entered allmulticast mode [ 592.950150][T31103] netlink: 44 bytes leftover after parsing attributes in process `syz.6.7561'. [ 592.968457][T31102] tipc: Enabled bearer , priority 0 [ 592.997575][T31100] tipc: Disabling bearer [ 593.048115][T31109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7566'. [ 593.204115][T31117] netlink: 'syz.6.7569': attribute type 11 has an invalid length. [ 593.211985][T31117] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7569'. [ 593.308204][T31119] bond0: entered promiscuous mode [ 593.313558][T31119] bond_slave_0: entered promiscuous mode [ 593.319537][T31119] bond_slave_1: entered promiscuous mode [ 593.325347][T31119] dummy0: entered promiscuous mode [ 593.333885][T31119] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 593.505792][T31131] netlink: 'syz.6.7576': attribute type 1 has an invalid length. [ 593.549114][T31131] 8021q: adding VLAN 0 to HW filter on device bond8 [ 593.559750][T31131] netlink: 40 bytes leftover after parsing attributes in process `syz.6.7576'. [ 593.576838][T31135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7577'. [ 594.115095][T31147] netlink: 'syz.6.7581': attribute type 11 has an invalid length. [ 594.123061][T31147] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7581'. [ 594.233985][T31149] tipc: Enabled bearer , priority 0 [ 594.313751][T31145] tipc: Disabling bearer [ 594.331503][T31165] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7588'. [ 594.545586][T31178] 8021q: adding VLAN 0 to HW filter on device bond9 [ 594.569105][T31178] 8021q: adding VLAN 0 to HW filter on device bond10 [ 594.577780][T31178] bond9: (slave bond10): Enslaving as an active interface with an up link [ 594.673607][T31178] bond9 (unregistering): (slave bond10): Releasing backup interface [ 594.723901][T31178] bond9 (unregistering): Released all slaves [ 594.780108][T31184] tipc: Enabling of bearer rejected, failed to enable media [ 594.808043][T31184] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 594.829325][T31186] syzkaller0: entered promiscuous mode [ 594.843310][T31190] netlink: 'syz.3.7595': attribute type 11 has an invalid length. [ 594.851094][T31186] syzkaller0: entered allmulticast mode [ 595.135609][T31200] tipc: Enabled bearer , priority 0 [ 595.150556][T31199] tipc: Disabling bearer [ 595.357461][T31213] netlink: 'syz.1.7608': attribute type 11 has an invalid length. [ 595.493773][T31225] FAULT_INJECTION: forcing a failure. [ 595.493773][T31225] name failslab, interval 1, probability 0, space 0, times 0 [ 595.506687][T31225] CPU: 1 UID: 0 PID: 31225 Comm: syz.0.7612 Not tainted syzkaller #0 PREEMPT(full) [ 595.506716][T31225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 595.506730][T31225] Call Trace: [ 595.506738][T31225] [ 595.506747][T31225] dump_stack_lvl+0xe8/0x150 [ 595.506778][T31225] should_fail_ex+0x40c/0x560 [ 595.506804][T31225] should_failslab+0xa8/0x100 [ 595.506838][T31225] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 595.506866][T31225] ? rcu_is_watching+0x15/0xb0 [ 595.506888][T31225] ? __alloc_skb+0x1d7/0x7a0 [ 595.506914][T31225] ? trace_irq_enable+0x3b/0x140 [ 595.506946][T31225] __alloc_skb+0x1d7/0x7a0 [ 595.506975][T31225] netlink_sendmsg+0x5d4/0xb40 [ 595.507012][T31225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.507044][T31225] ? aa_sock_msg_perm+0xf1/0x1b0 [ 595.507067][T31225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 595.507093][T31225] ? __pfx_netlink_sendmsg+0x10/0x10 [ 595.507124][T31225] ____sys_sendmsg+0x9b9/0xa20 [ 595.507158][T31225] ? __pfx_____sys_sendmsg+0x10/0x10 [ 595.507190][T31225] ? lock_release+0x4b/0x3c0 [ 595.507222][T31225] ? import_iovec+0x73/0xa0 [ 595.507256][T31225] ___sys_sendmsg+0x2a5/0x360 [ 595.507283][T31225] ? rcu_is_watching+0x15/0xb0 [ 595.507303][T31225] ? get_pid_task+0x20/0x1f0 [ 595.507324][T31225] ? __pfx____sys_sendmsg+0x10/0x10 [ 595.507356][T31225] ? rcu_is_watching+0x15/0xb0 [ 595.507392][T31225] ? __fget_files+0x2a/0x420 [ 595.507425][T31225] ? __fget_files+0x3a2/0x420 [ 595.507453][T31225] __x64_sys_sendmsg+0x1b1/0x290 [ 595.507484][T31225] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 595.507520][T31225] ? rcu_is_watching+0x15/0xb0 [ 595.507542][T31225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.507564][T31225] do_syscall_64+0x174/0x580 [ 595.507590][T31225] ? trace_irq_disable+0x3b/0x140 [ 595.507616][T31225] ? clear_bhb_loop+0x40/0x90 [ 595.507640][T31225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.507659][T31225] RIP: 0033:0x7fa42819ce59 [ 595.507678][T31225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 595.507696][T31225] RSP: 002b:00007fa42910b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 595.507720][T31225] RAX: ffffffffffffffda RBX: 00007fa428415fa0 RCX: 00007fa42819ce59 [ 595.507736][T31225] RDX: 00000000200088c2 RSI: 0000200000000340 RDI: 0000000000000003 [ 595.507748][T31225] RBP: 00007fa42910b090 R08: 0000000000000000 R09: 0000000000000000 [ 595.507760][T31225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 595.507772][T31225] R13: 00007fa428416038 R14: 00007fa428415fa0 R15: 00007ffff3ff89d8 [ 595.507797][T31225] [ 595.795203][T31228] syzkaller0: entered promiscuous mode [ 595.800788][T31228] syzkaller0: entered allmulticast mode [ 595.849032][T31231] tipc: Enabled bearer , priority 0 [ 595.856686][T31231] syzkaller0: entered promiscuous mode [ 595.865291][T31231] syzkaller0: entered allmulticast mode [ 595.880150][T31231] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 595.892310][T31230] tipc: Resetting bearer [ 595.910615][T31230] tipc: Disabling bearer [ 596.275807][T31260] netlink: 'syz.0.7620': attribute type 11 has an invalid length. [ 596.454624][T31261] tipc: Enabled bearer , priority 0 [ 596.465102][T31258] tipc: Disabling bearer [ 596.559878][T31274] syzkaller0: entered promiscuous mode [ 596.565775][T31274] syzkaller0: entered allmulticast mode [ 596.686914][T31280] tipc: Enabled bearer , priority 0 [ 596.694500][T31280] syzkaller0: entered promiscuous mode [ 596.700665][T31280] syzkaller0: entered allmulticast mode [ 596.709234][T31280] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 596.719136][T31279] tipc: Resetting bearer [ 596.730758][T31279] tipc: Disabling bearer [ 596.785931][T31282] __nla_validate_parse: 5 callbacks suppressed [ 596.785945][T31282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7631'. [ 596.829481][T31284] nbd: nbd1 already in use [ 596.840840][T31284] nbd: nbd1 already in use [ 596.890973][T31289] netlink: 'syz.1.7633': attribute type 11 has an invalid length. [ 597.024763][T31295] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 597.042440][T31301] netlink: 'syz.6.7634': attribute type 1 has an invalid length. [ 597.065625][T31295] bond9 (unregistering): Released all slaves [ 597.253285][T31310] netlink: 'syz.1.7640': attribute type 2 has an invalid length. [ 597.288403][T31310] netlink: 'syz.1.7640': attribute type 2 has an invalid length. [ 597.350321][T31315] tipc: Enabled bearer , priority 0 [ 597.363527][T31313] tipc: Disabling bearer [ 597.456198][T31296] lo speed is unknown, defaulting to 1000 [ 597.728586][T31345] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7653'. [ 597.737619][T31343] syzkaller0: entered promiscuous mode [ 597.743133][T31343] syzkaller0: entered allmulticast mode [ 597.867599][T31351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7656'. [ 597.907619][T31351] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7656'. [ 598.276727][T31375] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7664'. [ 598.433680][T31384] tipc: Enabled bearer , priority 0 [ 598.525331][T31386] netlink: 'syz.3.7669': attribute type 4 has an invalid length. [ 598.535372][T31383] tipc: Disabling bearer [ 598.731123][T31396] syzkaller0: entered promiscuous mode [ 598.736660][T31396] syzkaller0: entered allmulticast mode [ 598.840973][T31406] tipc: Enabling of bearer rejected, failed to enable media [ 598.858366][T31406] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7677'. [ 598.868194][T31398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7674'. [ 598.911026][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 598.971672][T31412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7678'. [ 599.001165][T31414] erspan0: entered promiscuous mode [ 599.024537][T31414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7679'. [ 599.113855][T31426] SET target dimension over the limit! [ 599.194184][T31428] tipc: Enabled bearer , priority 0 [ 599.206206][T31431] tipc: Enabled bearer , priority 0 [ 599.218905][T31432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 599.230224][T31429] tipc: Disabling bearer [ 599.272647][T31428] syzkaller0: entered promiscuous mode [ 599.278598][T31428] syzkaller0: entered allmulticast mode [ 599.290976][T31428] tipc: Resetting bearer [ 599.294072][T31424] xt_TPROXY: Can be used only with -p tcp or -p udp [ 599.303779][T31427] tipc: Resetting bearer [ 599.313731][T31438] netlink: 'syz.5.7688': attribute type 39 has an invalid length. [ 599.336588][T31427] tipc: Disabling bearer [ 599.412525][T31446] syzkaller0: entered promiscuous mode [ 599.419829][T31446] syzkaller0: entered allmulticast mode [ 599.425701][T31444] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7689'. [ 599.873959][T31470] dvmrp6: entered allmulticast mode [ 599.895658][T31472] tipc: Enabled bearer , priority 0 [ 599.922549][T31471] tipc: Disabling bearer [ 600.063264][T31483] netlink: 'syz.3.7705': attribute type 11 has an invalid length. [ 600.306172][T31495] xt_recent: Unsupported userspace flags (000000b1) [ 600.395099][T31504] syzkaller0: entered promiscuous mode [ 600.400634][T31504] syzkaller0: entered allmulticast mode [ 600.461642][T31505] syzkaller1: entered promiscuous mode [ 600.488916][T31505] syzkaller1: entered allmulticast mode [ 600.749062][T31522] tipc: Enabled bearer , priority 0 [ 600.758821][T31521] tipc: Disabling bearer [ 600.856495][T31524] bond0: (slave bond_slave_1): Error: Device is in use and cannot be enslaved [ 600.984353][T31532] xt_CT: No such helper "snmp" [ 601.034688][T31540] h: entered promiscuous mode [ 601.891514][T31599] __nla_validate_parse: 15 callbacks suppressed [ 601.891570][T31599] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7741'. [ 601.930009][T31598] netlink: 'syz.1.7741': attribute type 4 has an invalid length. [ 602.019410][T31603] syzkaller0: entered promiscuous mode [ 602.024988][T31603] syzkaller0: entered allmulticast mode [ 602.033556][T31603] tipc: Enabled bearer , priority 0 [ 602.044350][T31602] tipc: Resetting bearer [ 602.124256][T31602] tipc: Disabling bearer [ 602.139178][T31606] syz_tun: entered allmulticast mode [ 602.187116][T31606] dvmrp6: entered allmulticast mode [ 602.371460][T31625] netlink: 'syz.5.7750': attribute type 21 has an invalid length. [ 602.379397][T31625] netlink: 'syz.5.7750': attribute type 22 has an invalid length. [ 602.388122][T31625] netlink: 'syz.5.7750': attribute type 23 has an invalid length. [ 602.447343][T31625] netlink: 'syz.5.7750': attribute type 25 has an invalid length. [ 602.455265][T31625] netlink: 'syz.5.7750': attribute type 26 has an invalid length. [ 602.463121][T31625] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7750'. [ 602.482626][T31625] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7750'. [ 602.501796][T31629] netlink: 65047 bytes leftover after parsing attributes in process `syz.0.7751'. [ 602.813698][T31647] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7760'. [ 602.828874][T31652] syzkaller0: entered promiscuous mode [ 602.834415][T31652] syzkaller0: entered allmulticast mode [ 602.843061][T31652] tipc: Enabled bearer , priority 0 [ 602.851100][T31651] tipc: Resetting bearer [ 602.911025][T31651] tipc: Disabling bearer [ 603.120510][T31667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7766'. [ 603.272259][T31675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7769'. [ 603.284470][T31675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7769'. [ 603.293398][T31675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7769'. [ 603.303462][T31677] veth0: entered promiscuous mode [ 603.333071][T31677] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7770'. [ 603.343344][T31677] veth0 (unregistering): left promiscuous mode [ 603.393505][T31675] netlink: 'syz.5.7769': attribute type 4 has an invalid length. [ 603.975478][T31717] netlink: 'syz.1.7782': attribute type 97 has an invalid length. [ 604.051024][T31720] nft_compat: unsupported protocol 0 [ 604.078485][T31721] syzkaller0: entered promiscuous mode [ 604.094270][T31721] syzkaller0: entered allmulticast mode [ 604.114250][T31721] tipc: Enabled bearer , priority 0 [ 604.141327][T31719] tipc: Resetting bearer [ 604.166853][T31719] tipc: Disabling bearer [ 604.728074][T31743] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 604.784923][T31745] syzkaller0: entered promiscuous mode [ 604.790453][T31745] syzkaller0: entered allmulticast mode [ 605.315212][T31754] bridge_slave_0 (unregistering): left allmulticast mode [ 605.327014][T31754] bridge_slave_0 (unregistering): left promiscuous mode [ 605.336908][T31758] FAULT_INJECTION: forcing a failure. [ 605.336908][T31758] name failslab, interval 1, probability 0, space 0, times 0 [ 605.356334][T31754] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.363474][T31758] CPU: 1 UID: 0 PID: 31758 Comm: syz.5.7798 Not tainted syzkaller #0 PREEMPT(full) [ 605.363501][T31758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 605.363518][T31758] Call Trace: [ 605.363526][T31758] [ 605.363534][T31758] dump_stack_lvl+0xe8/0x150 [ 605.363570][T31758] should_fail_ex+0x40c/0x560 [ 605.363593][T31758] should_failslab+0xa8/0x100 [ 605.363624][T31758] __kmalloc_noprof+0xe8/0x750 [ 605.363651][T31758] ? get_pid_task+0x20/0x1f0 [ 605.363668][T31758] ? tomoyo_realpath_from_path+0xef/0x640 [ 605.363695][T31758] tomoyo_realpath_from_path+0xef/0x640 [ 605.363716][T31758] ? lock_release+0x4b/0x3c0 [ 605.363748][T31758] ? tomoyo_path_number_perm+0x219/0x5f0 [ 605.363777][T31758] tomoyo_path_number_perm+0x246/0x5f0 [ 605.363810][T31758] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 605.363832][T31758] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 605.363853][T31758] ? preempt_count_add+0x91/0x190 [ 605.363875][T31758] ? rcu_is_watching+0x15/0xb0 [ 605.363894][T31758] ? hook_file_ioctl+0x1f0/0x5c0 [ 605.363922][T31758] ? lock_release+0x4b/0x3c0 [ 605.363945][T31758] ? __fget_files+0x2a/0x420 [ 605.363961][T31758] ? __fget_files+0x3a2/0x420 [ 605.363976][T31758] ? __fget_files+0x2a/0x420 [ 605.363994][T31758] security_file_ioctl+0xc3/0x2a0 [ 605.364014][T31758] __se_sys_ioctl+0x47/0x170 [ 605.364035][T31758] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.364050][T31758] do_syscall_64+0x174/0x580 [ 605.364072][T31758] ? trace_irq_disable+0x3b/0x140 [ 605.364093][T31758] ? clear_bhb_loop+0x40/0x90 [ 605.364110][T31758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.364124][T31758] RIP: 0033:0x7fb97439ce59 [ 605.364138][T31758] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 605.364151][T31758] RSP: 002b:00007fb97520d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 605.364167][T31758] RAX: ffffffffffffffda RBX: 00007fb974615fa0 RCX: 00007fb97439ce59 [ 605.364178][T31758] RDX: 00002000000001c0 RSI: 0000000040047459 RDI: 0000000000000004 [ 605.364188][T31758] RBP: 00007fb97520d090 R08: 0000000000000000 R09: 0000000000000000 [ 605.364198][T31758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.364207][T31758] R13: 00007fb974616038 R14: 00007fb974615fa0 R15: 00007ffe29aab9b8 [ 605.364225][T31758] [ 605.364332][T31758] ERROR: Out of memory at tomoyo_realpath_from_path. [ 605.670131][T31760] syzkaller0: entered promiscuous mode [ 605.681686][T31760] syzkaller0: entered allmulticast mode [ 605.701666][T31760] tipc: Enabled bearer , priority 0 [ 605.730593][T31759] tipc: Resetting bearer [ 605.766942][T31759] tipc: Disabling bearer [ 605.811784][ T13] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.820699][ T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.829882][ T13] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.838969][ T13] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 605.913137][T31777] sctp: [Deprecated]: syz.1.7803 (pid 31777) Use of int in max_burst socket option deprecated. [ 605.913137][T31777] Use struct sctp_assoc_value instead [ 605.955264][T31781] x_tables: duplicate underflow at hook 2 [ 606.704789][T31797] tc action pedit unable to extract header offset for header type (0x5) [ 606.874960][T31809] syzkaller0: entered promiscuous mode [ 606.880548][T31809] syzkaller0: entered allmulticast mode [ 606.889025][T31809] tipc: Enabled bearer , priority 0 [ 606.899719][T31808] tipc: Resetting bearer [ 606.931994][T31813] netlink: 'syz.5.7817': attribute type 1 has an invalid length. [ 606.978956][T31808] tipc: Disabling bearer [ 607.285243][T16490] tipc: Subscription rejected, illegal request [ 607.478346][T31842] bond9: Unable to set down delay as MII monitoring is disabled [ 607.492484][T31842] bond9 (unregistering): Released all slaves [ 607.632862][T31852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 607.647064][T31854] syz_tun: entered allmulticast mode [ 607.658373][T31854] dvmrp6: entered allmulticast mode [ 607.666472][T31853] syz_tun: left allmulticast mode [ 607.924081][T31877] __nla_validate_parse: 14 callbacks suppressed [ 607.924102][T31877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7841'. [ 608.234588][T31891] netlink: 'syz.6.7846': attribute type 18 has an invalid length. [ 608.257441][ T6422] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.270123][ T6422] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.304262][ T6422] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.314075][ T6422] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 608.363246][T31894] xt_hashlimit: size too large, truncated to 1048576 [ 609.144896][T31923] syz_tun: entered allmulticast mode [ 609.176694][T31925] netlink: 68 bytes leftover after parsing attributes in process `syz.1.7859'. [ 609.200502][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 609.289783][T31932] x_tables: duplicate underflow at hook 1 [ 609.348778][T31934] netlink: 252 bytes leftover after parsing attributes in process `syz.1.7863'. [ 609.388745][T31938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7864'. [ 609.397722][T31938] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7864'. [ 609.838759][T31953] FAULT_INJECTION: forcing a failure. [ 609.838759][T31953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 609.851840][T31953] CPU: 0 UID: 0 PID: 31953 Comm: syz.3.7871 Not tainted syzkaller #0 PREEMPT(full) [ 609.851860][T31953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 609.851870][T31953] Call Trace: [ 609.851877][T31953] [ 609.851884][T31953] dump_stack_lvl+0xe8/0x150 [ 609.851905][T31953] should_fail_ex+0x40c/0x560 [ 609.851923][T31953] _copy_to_user+0x31/0xb0 [ 609.851944][T31953] simple_read_from_buffer+0xe1/0x170 [ 609.851964][T31953] proc_fail_nth_read+0x1bb/0x230 [ 609.851985][T31953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.852005][T31953] ? rw_verify_area+0x24a/0x4c0 [ 609.852025][T31953] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 609.852044][T31953] vfs_read+0x213/0xa80 [ 609.852064][T31953] ? __pfx___mutex_lock+0x10/0x10 [ 609.852085][T31953] ? __pfx_vfs_read+0x10/0x10 [ 609.852106][T31953] ? __fget_files+0x3a2/0x420 [ 609.852122][T31953] ? __fget_files+0x2a/0x420 [ 609.852141][T31953] ksys_read+0x150/0x270 [ 609.852161][T31953] ? __pfx_ksys_read+0x10/0x10 [ 609.852179][T31953] ? __pfx_sock_ioctl+0x10/0x10 [ 609.852195][T31953] ? rcu_is_watching+0x15/0xb0 [ 609.852211][T31953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.852226][T31953] do_syscall_64+0x174/0x580 [ 609.852246][T31953] ? trace_irq_disable+0x3b/0x140 [ 609.852266][T31953] ? clear_bhb_loop+0x40/0x90 [ 609.852282][T31953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.852297][T31953] RIP: 0033:0x7f4fc835d68e [ 609.852311][T31953] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 609.852324][T31953] RSP: 002b:00007f4fc923afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 609.852349][T31953] RAX: ffffffffffffffda RBX: 00007f4fc923b6c0 RCX: 00007f4fc835d68e [ 609.852361][T31953] RDX: 000000000000000f RSI: 00007f4fc923b0a0 RDI: 0000000000000003 [ 609.852371][T31953] RBP: 00007f4fc923b090 R08: 0000000000000000 R09: 0000000000000000 [ 609.852381][T31953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 609.852390][T31953] R13: 00007f4fc8616038 R14: 00007f4fc8615fa0 R15: 00007ffd09e43e18 [ 609.852409][T31953] [ 610.175067][T31958] tipc: Enabled bearer , priority 0 [ 610.183119][T31958] syzkaller0: entered promiscuous mode [ 610.188650][T31958] syzkaller0: entered allmulticast mode [ 610.230836][T31958] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 610.245753][T31958] tipc: Resetting bearer [ 610.767101][T31983] bond9 (unregistering): Released all slaves [ 610.825925][T31957] tipc: Resetting bearer [ 610.845763][T31957] tipc: Disabling bearer [ 610.880977][T31992] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7882'. [ 611.262524][T32011] netlink: 'syz.1.7888': attribute type 11 has an invalid length. [ 611.331319][T32018] IPv6: sit1: Disabled Multicast RS [ 611.351476][T32018] sit1: entered allmulticast mode [ 611.771203][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7894'. [ 611.804347][T32024] netlink: 29 bytes leftover after parsing attributes in process `syz.3.7894'. [ 611.813372][T32024] : renamed from bridge_slave_1 (while UP) [ 611.838377][T32024] bridge0: port 2() entered disabled state [ 611.965970][T32033] netlink: 'syz.3.7901': attribute type 11 has an invalid length. [ 612.019106][T32037] FAULT_INJECTION: forcing a failure. [ 612.019106][T32037] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 612.032742][T32037] CPU: 1 UID: 0 PID: 32037 Comm: syz.6.7899 Not tainted syzkaller #0 PREEMPT(full) [ 612.032770][T32037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 612.032783][T32037] Call Trace: [ 612.032791][T32037] [ 612.032800][T32037] dump_stack_lvl+0xe8/0x150 [ 612.032828][T32037] should_fail_ex+0x40c/0x560 [ 612.032853][T32037] _copy_from_user+0x2d/0xb0 [ 612.032881][T32037] ___sys_recvmsg+0x173/0x5a0 [ 612.032915][T32037] ? __pfx____sys_recvmsg+0x10/0x10 [ 612.032949][T32037] ? __fget_files+0x2a/0x420 [ 612.032971][T32037] ? rcu_is_watching+0x15/0xb0 [ 612.033001][T32037] ? __fget_files+0x3a2/0x420 [ 612.033029][T32037] do_recvmmsg+0x31a/0x7f0 [ 612.033064][T32037] ? __pfx_do_recvmmsg+0x10/0x10 [ 612.033101][T32037] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 612.033131][T32037] ? __fget_files+0x3a2/0x420 [ 612.033159][T32037] __x64_sys_recvmmsg+0x198/0x250 [ 612.033191][T32037] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 612.033225][T32037] ? rcu_is_watching+0x15/0xb0 [ 612.033246][T32037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.033267][T32037] do_syscall_64+0x174/0x580 [ 612.033293][T32037] ? trace_irq_disable+0x3b/0x140 [ 612.033320][T32037] ? clear_bhb_loop+0x40/0x90 [ 612.033344][T32037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.033364][T32037] RIP: 0033:0x7fc34819ce59 [ 612.033382][T32037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 612.033401][T32037] RSP: 002b:00007fc3490bb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 612.033424][T32037] RAX: ffffffffffffffda RBX: 00007fc348416090 RCX: 00007fc34819ce59 [ 612.033439][T32037] RDX: 0000000000000001 RSI: 0000200000003e00 RDI: 0000000000000003 [ 612.033453][T32037] RBP: 00007fc3490bb090 R08: 0000000000000000 R09: 0000000000000000 [ 612.033466][T32037] R10: 45833af92e4a39df R11: 0000000000000246 R12: 0000000000000001 [ 612.033479][T32037] R13: 00007fc348416128 R14: 00007fc348416090 R15: 00007ffc557187e8 [ 612.033504][T32037] [ 612.421031][T32047] netlink: 'syz.6.7906': attribute type 26 has an invalid length. [ 612.429628][T32047] netlink: 'syz.6.7906': attribute type 11 has an invalid length. [ 612.573184][T32054] bond15: entered promiscuous mode [ 612.578883][T32054] 8021q: adding VLAN 0 to HW filter on device bond15 [ 612.594021][T32054] 8021q: adding VLAN 0 to HW filter on device bond15 [ 612.601258][T32054] bond15: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 612.612408][T32054] bond15: (slave ip6gre1): Error -95 calling set_mac_address [ 613.010003][T32067] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 613.117494][T32071] netlink: 'syz.3.7914': attribute type 12 has an invalid length. [ 613.125340][T32071] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7914'. [ 613.235391][T32074] 8021q: VLANs not supported on lo [ 613.287978][T32078] tipc: Enabled bearer , priority 0 [ 613.325244][T32078] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 613.337101][T32078] tipc: Resetting bearer [ 613.345510][T32077] tipc: Disabling bearer [ 613.586644][T32092] netlink: 'syz.0.7925': attribute type 11 has an invalid length. [ 613.673363][T32104] netlink: 'syz.0.7927': attribute type 11 has an invalid length. [ 613.681493][T32104] FAULT_INJECTION: forcing a failure. [ 613.681493][T32104] name failslab, interval 1, probability 0, space 0, times 0 [ 613.705593][T32104] CPU: 1 UID: 0 PID: 32104 Comm: syz.0.7927 Not tainted syzkaller #0 PREEMPT(full) [ 613.705622][T32104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 613.705635][T32104] Call Trace: [ 613.705643][T32104] [ 613.705652][T32104] dump_stack_lvl+0xe8/0x150 [ 613.705678][T32104] should_fail_ex+0x40c/0x560 [ 613.705704][T32104] should_failslab+0xa8/0x100 [ 613.705735][T32104] __kmalloc_cache_noprof+0x88/0x660 [ 613.705764][T32104] ? nft_flush_table+0x153c/0x1900 [ 613.705832][T32104] nft_flush_table+0x153c/0x1900 [ 613.705862][T32104] ? nft_pernet+0x23/0x240 [ 613.705887][T32104] ? nft_pernet+0x23/0x240 [ 613.705916][T32104] nf_tables_deltable+0x5d2/0xe80 [ 613.705954][T32104] ? __pfx_nf_tables_deltable+0x10/0x10 [ 613.705979][T32104] ? nfnl_pernet+0x23/0x240 [ 613.706011][T32104] ? __nla_parse+0x40/0x60 [ 613.706038][T32104] nfnetlink_rcv+0x1288/0x28c0 [ 613.706066][T32104] ? is_bpf_text_address+0x292/0x2b0 [ 613.706116][T32104] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 613.706150][T32104] ? netlink_sendmsg+0x5d4/0xb40 [ 613.706180][T32104] ? ____sys_sendmsg+0x9b9/0xa20 [ 613.706208][T32104] ? ___sys_sendmsg+0x2a5/0x360 [ 613.706236][T32104] ? __x64_sys_sendmsg+0x1b1/0x290 [ 613.706281][T32104] ? net_generic+0x1e/0x240 [ 613.706305][T32104] ? rcu_is_watching+0x15/0xb0 [ 613.706328][T32104] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.706356][T32104] ? rcu_is_watching+0x15/0xb0 [ 613.706387][T32104] ? rcu_is_watching+0x15/0xb0 [ 613.706406][T32104] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.706435][T32104] ? lock_release+0x4b/0x3c0 [ 613.706467][T32104] ? netlink_deliver_tap+0x2e/0x1b0 [ 613.706500][T32104] netlink_unicast+0x7bb/0x940 [ 613.706534][T32104] netlink_sendmsg+0x813/0xb40 [ 613.706570][T32104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.706603][T32104] ? aa_sock_msg_perm+0xf1/0x1b0 [ 613.706625][T32104] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 613.706654][T32104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 613.706686][T32104] ____sys_sendmsg+0x9b9/0xa20 [ 613.706721][T32104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 613.706752][T32104] ? lock_release+0x4b/0x3c0 [ 613.706784][T32104] ? import_iovec+0x73/0xa0 [ 613.706814][T32104] ___sys_sendmsg+0x2a5/0x360 [ 613.706843][T32104] ? rcu_is_watching+0x15/0xb0 [ 613.706863][T32104] ? get_pid_task+0x20/0x1f0 [ 613.706884][T32104] ? __pfx____sys_sendmsg+0x10/0x10 [ 613.706917][T32104] ? rcu_is_watching+0x15/0xb0 [ 613.706953][T32104] ? __fget_files+0x2a/0x420 [ 613.706976][T32104] ? __fget_files+0x3a2/0x420 [ 613.707005][T32104] __x64_sys_sendmsg+0x1b1/0x290 [ 613.707037][T32104] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 613.707075][T32104] ? rcu_is_watching+0x15/0xb0 [ 613.707098][T32104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.707120][T32104] do_syscall_64+0x174/0x580 [ 613.707148][T32104] ? trace_irq_disable+0x3b/0x140 [ 613.707177][T32104] ? clear_bhb_loop+0x40/0x90 [ 613.707201][T32104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.707222][T32104] RIP: 0033:0x7fa42819ce59 [ 613.707242][T32104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.707261][T32104] RSP: 002b:00007fa42910b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 613.707284][T32104] RAX: ffffffffffffffda RBX: 00007fa428415fa0 RCX: 00007fa42819ce59 [ 613.707299][T32104] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 613.707313][T32104] RBP: 00007fa42910b090 R08: 0000000000000000 R09: 0000000000000000 [ 613.707327][T32104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.707339][T32104] R13: 00007fa428416038 R14: 00007fa428415fa0 R15: 00007ffff3ff89d8 [ 613.707364][T32104] [ 614.079001][T32106] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7928'. [ 614.088155][T32107] netlink: 'syz.5.7928': attribute type 4 has an invalid length. [ 614.244239][T32115] syzkaller0: entered promiscuous mode [ 614.249952][T32115] syzkaller0: entered allmulticast mode [ 614.287829][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 614.302793][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 614.324008][T32122] netlink: 'syz.3.7934': attribute type 17 has an invalid length. [ 614.337376][T32122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7934'. [ 614.339869][T32117] tipc: Enabled bearer , priority 0 [ 614.346284][T32122] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7934'. [ 614.372994][T32117] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 614.382634][T32117] tipc: Resetting bearer [ 614.390517][T32116] tipc: Disabling bearer [ 614.449337][T32129] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7936'. [ 614.614662][T32142] syzkaller0: entered promiscuous mode [ 614.620230][T32142] syzkaller0: entered allmulticast mode [ 614.654245][T32142] tipc: Enabled bearer , priority 0 [ 614.718085][T32141] tipc: Resetting bearer [ 614.784400][T32141] tipc: Disabling bearer [ 614.914322][T32147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7944'. [ 615.617881][T32175] netlink: 'syz.6.7951': attribute type 21 has an invalid length. [ 615.812298][T32182] netlink: 'syz.6.7955': attribute type 11 has an invalid length. [ 615.842160][T32182] FAULT_INJECTION: forcing a failure. [ 615.842160][T32182] name failslab, interval 1, probability 0, space 0, times 0 [ 615.893506][T32182] CPU: 1 UID: 0 PID: 32182 Comm: syz.6.7955 Not tainted syzkaller #0 PREEMPT(full) [ 615.893536][T32182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.893549][T32182] Call Trace: [ 615.893558][T32182] [ 615.893567][T32182] dump_stack_lvl+0xe8/0x150 [ 615.893598][T32182] should_fail_ex+0x40c/0x560 [ 615.893624][T32182] should_failslab+0xa8/0x100 [ 615.893656][T32182] __kmalloc_cache_noprof+0x88/0x660 [ 615.893686][T32182] ? nft_delchain+0x54/0x4b0 [ 615.893715][T32182] ? nft_delrule+0x91d/0xba0 [ 615.893745][T32182] nft_delchain+0x54/0x4b0 [ 615.893777][T32182] nft_flush_table+0x1451/0x1900 [ 615.893807][T32182] ? nft_pernet+0x23/0x240 [ 615.893833][T32182] ? nft_pernet+0x23/0x240 [ 615.893862][T32182] nf_tables_deltable+0x5d2/0xe80 [ 615.893888][T32182] ? nft_trans_table_add+0x22b/0x430 [ 615.893918][T32182] ? __pfx_nf_tables_deltable+0x10/0x10 [ 615.893943][T32182] ? nfnl_pernet+0x23/0x240 [ 615.893976][T32182] ? __nla_parse+0x40/0x60 [ 615.894002][T32182] nfnetlink_rcv+0x1288/0x28c0 [ 615.894030][T32182] ? is_bpf_text_address+0x292/0x2b0 [ 615.894081][T32182] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 615.894114][T32182] ? netlink_sendmsg+0x5d4/0xb40 [ 615.894145][T32182] ? ____sys_sendmsg+0x9b9/0xa20 [ 615.894173][T32182] ? ___sys_sendmsg+0x2a5/0x360 [ 615.894201][T32182] ? __x64_sys_sendmsg+0x1b1/0x290 [ 615.894246][T32182] ? net_generic+0x1e/0x240 [ 615.894269][T32182] ? rcu_is_watching+0x15/0xb0 [ 615.894292][T32182] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.894320][T32182] ? rcu_is_watching+0x15/0xb0 [ 615.894343][T32182] ? rcu_is_watching+0x15/0xb0 [ 615.894363][T32182] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.894393][T32182] ? lock_release+0x4b/0x3c0 [ 615.894433][T32182] ? netlink_deliver_tap+0x2e/0x1b0 [ 615.894466][T32182] netlink_unicast+0x7bb/0x940 [ 615.894500][T32182] netlink_sendmsg+0x813/0xb40 [ 615.894536][T32182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.894570][T32182] ? aa_sock_msg_perm+0xf1/0x1b0 [ 615.894592][T32182] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.894618][T32182] ? __pfx_netlink_sendmsg+0x10/0x10 [ 615.894649][T32182] ____sys_sendmsg+0x9b9/0xa20 [ 615.894684][T32182] ? __pfx_____sys_sendmsg+0x10/0x10 [ 615.894719][T32182] ? import_iovec+0x73/0xa0 [ 615.894748][T32182] ___sys_sendmsg+0x2a5/0x360 [ 615.894777][T32182] ? rcu_is_watching+0x15/0xb0 [ 615.894797][T32182] ? get_pid_task+0x20/0x1f0 [ 615.894818][T32182] ? __pfx____sys_sendmsg+0x10/0x10 [ 615.894852][T32182] ? rcu_is_watching+0x15/0xb0 [ 615.894889][T32182] ? __fget_files+0x2a/0x420 [ 615.894911][T32182] ? __fget_files+0x3a2/0x420 [ 615.894941][T32182] __x64_sys_sendmsg+0x1b1/0x290 [ 615.894973][T32182] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 615.895012][T32182] ? rcu_is_watching+0x15/0xb0 [ 615.895034][T32182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.895056][T32182] do_syscall_64+0x174/0x580 [ 615.895084][T32182] ? trace_irq_disable+0x3b/0x140 [ 615.895113][T32182] ? clear_bhb_loop+0x40/0x90 [ 615.895137][T32182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.895158][T32182] RIP: 0033:0x7fc34819ce59 [ 615.895176][T32182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.895194][T32182] RSP: 002b:00007fc3490dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 615.895216][T32182] RAX: ffffffffffffffda RBX: 00007fc348415fa0 RCX: 00007fc34819ce59 [ 615.895232][T32182] RDX: 0000000000004000 RSI: 0000200000000480 RDI: 0000000000000003 [ 615.895246][T32182] RBP: 00007fc3490dc090 R08: 0000000000000000 R09: 0000000000000000 [ 615.895260][T32182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 615.895272][T32182] R13: 00007fc348416038 R14: 00007fc348415fa0 R15: 00007ffc557187e8 [ 615.895298][T32182] [ 616.390010][T32191] syzkaller0: entered promiscuous mode [ 616.396297][T32191] syzkaller0: entered allmulticast mode [ 616.405996][T32191] tipc: Enabled bearer , priority 0 [ 616.546708][T32190] tipc: Resetting bearer [ 616.602473][T32190] tipc: Disabling bearer [ 616.840857][T32133] Set syz1 is full, maxelem 65536 reached [ 617.022592][T32219] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7965'. [ 617.054851][T32219] netlink: 'syz.1.7965': attribute type 11 has an invalid length. [ 617.171551][T32225] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7968'. [ 617.263487][T32231] syzkaller0: entered promiscuous mode [ 617.275626][T32231] syzkaller0: entered allmulticast mode [ 617.423229][T32231] tipc: Enabled bearer , priority 0 [ 617.487635][T32230] tipc: Resetting bearer [ 617.509251][T32230] tipc: Disabling bearer [ 618.277444][T32273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7984'. [ 618.371405][T32276] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7985'. [ 618.411454][T32280] netlink: 20 bytes leftover after parsing attributes in process `syz.0.7986'. [ 618.557569][T32285] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7987'. [ 618.595530][ T5282] veth1_vlan: left promiscuous mode [ 618.972583][T32294] syzkaller0: entered promiscuous mode [ 618.978192][T32294] syzkaller0: entered allmulticast mode [ 619.007355][T32294] tipc: Enabled bearer , priority 0 [ 619.029075][T32293] tipc: Resetting bearer [ 619.113237][T32293] tipc: Disabling bearer [ 619.186923][T32301] pim6reg527: entered allmulticast mode [ 619.228518][T32309] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7996'. [ 619.331817][T32313] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7997'. [ 619.497109][T32320] syzkaller0: entered promiscuous mode [ 619.544910][T32320] syzkaller0: entered allmulticast mode [ 619.641360][T32334] netlink: 'syz.0.8001': attribute type 3 has an invalid length. [ 619.649149][T32334] netlink: 666 bytes leftover after parsing attributes in process `syz.0.8001'. [ 619.697974][T32337] bond9: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 619.751736][T32337] bond9 (unregistering): Released all slaves [ 619.813701][T32343] netlink: 'syz.5.8003': attribute type 1 has an invalid length. [ 619.911701][T32343] 8021q: adding VLAN 0 to HW filter on device bond16 [ 620.053887][T32209] Set syz1 is full, maxelem 65536 reached [ 620.250366][T32367] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8008'. [ 620.279231][T32368] : entered promiscuous mode [ 620.481907][T32383] syzkaller0: entered promiscuous mode [ 620.487597][T32383] syzkaller0: entered allmulticast mode [ 620.784020][T32412] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8023'. [ 620.929586][T32425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8027'. [ 621.346277][T32448] syzkaller0: entered promiscuous mode [ 621.359991][T32448] syzkaller0: entered allmulticast mode [ 621.866164][T32489] FAULT_INJECTION: forcing a failure. [ 621.866164][T32489] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 621.898083][T32489] CPU: 1 UID: 0 PID: 32489 Comm: syz.1.8050 Not tainted syzkaller #0 PREEMPT(full) [ 621.898115][T32489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 621.898128][T32489] Call Trace: [ 621.898137][T32489] [ 621.898146][T32489] dump_stack_lvl+0xe8/0x150 [ 621.898174][T32489] should_fail_ex+0x40c/0x560 [ 621.898200][T32489] _copy_from_iter+0x1d3/0x1660 [ 621.898228][T32489] ? rcu_is_watching+0x15/0xb0 [ 621.898253][T32489] ? __pfx__copy_from_iter+0x10/0x10 [ 621.898285][T32489] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 621.898318][T32489] ? netlink_sendmsg+0x650/0xb40 [ 621.898349][T32489] ? skb_put+0x112/0x210 [ 621.898377][T32489] netlink_sendmsg+0x6c0/0xb40 [ 621.898413][T32489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.898445][T32489] ? aa_sock_msg_perm+0xf1/0x1b0 [ 621.898466][T32489] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 621.898493][T32489] ? __pfx_netlink_sendmsg+0x10/0x10 [ 621.898525][T32489] ____sys_sendmsg+0x9b9/0xa20 [ 621.898560][T32489] ? __pfx_____sys_sendmsg+0x10/0x10 [ 621.898591][T32489] ? lock_release+0x4b/0x3c0 [ 621.898624][T32489] ? import_iovec+0x73/0xa0 [ 621.898653][T32489] ___sys_sendmsg+0x2a5/0x360 [ 621.898681][T32489] ? rcu_is_watching+0x15/0xb0 [ 621.898704][T32489] ? get_pid_task+0x20/0x1f0 [ 621.898725][T32489] ? __pfx____sys_sendmsg+0x10/0x10 [ 621.898757][T32489] ? rcu_is_watching+0x15/0xb0 [ 621.898794][T32489] ? __fget_files+0x2a/0x420 [ 621.898817][T32489] ? __fget_files+0x3a2/0x420 [ 621.898845][T32489] __x64_sys_sendmsg+0x1b1/0x290 [ 621.898877][T32489] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 621.898915][T32489] ? rcu_is_watching+0x15/0xb0 [ 621.898937][T32489] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.898959][T32489] do_syscall_64+0x174/0x580 [ 621.898986][T32489] ? trace_irq_disable+0x3b/0x140 [ 621.899014][T32489] ? clear_bhb_loop+0x40/0x90 [ 621.899039][T32489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 621.899059][T32489] RIP: 0033:0x7f172fd9ce59 [ 621.899078][T32489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 621.899096][T32489] RSP: 002b:00007f1730ba8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 621.899119][T32489] RAX: ffffffffffffffda RBX: 00007f1730015fa0 RCX: 00007f172fd9ce59 [ 621.899134][T32489] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 621.899148][T32489] RBP: 00007f1730ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 621.899161][T32489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 621.899173][T32489] R13: 00007f1730016038 R14: 00007f1730015fa0 R15: 00007ffefd147df8 [ 621.899198][T32489] [ 621.945751][T32493] netlink: 'syz.6.8052': attribute type 4 has an invalid length. [ 622.200091][T32498] netlink: 'syz.6.8052': attribute type 4 has an invalid length. [ 622.985173][T32552] xt_hashlimit: max too large, truncated to 1048576 [ 623.287899][T32573] netlink: 'syz.3.8077': attribute type 11 has an invalid length. [ 623.347517][T32578] __nla_validate_parse: 12 callbacks suppressed [ 623.347539][T32578] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8079'. [ 623.373003][T32581] netlink: 'syz.3.8081': attribute type 1 has an invalid length. [ 623.403447][T32582] netlink: 'syz.1.8080': attribute type 15 has an invalid length. [ 623.431759][T32582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8080'. [ 623.458769][T32581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 623.781874][T32609] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 623.880429][T32615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8094'. [ 623.895576][T32615] FAULT_INJECTION: forcing a failure. [ 623.895576][T32615] name failslab, interval 1, probability 0, space 0, times 0 [ 623.993693][T32618] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8093'. [ 624.015822][T32615] CPU: 0 UID: 0 PID: 32615 Comm: syz.1.8094 Not tainted syzkaller #0 PREEMPT(full) [ 624.015852][T32615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 624.015865][T32615] Call Trace: [ 624.015874][T32615] [ 624.015883][T32615] dump_stack_lvl+0xe8/0x150 [ 624.015911][T32615] should_fail_ex+0x40c/0x560 [ 624.015936][T32615] should_failslab+0xa8/0x100 [ 624.015968][T32615] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 624.015995][T32615] ? rcu_is_watching+0x15/0xb0 [ 624.016016][T32615] ? __alloc_skb+0x1d7/0x7a0 [ 624.016041][T32615] ? trace_irq_enable+0x3b/0x140 [ 624.016072][T32615] __alloc_skb+0x1d7/0x7a0 [ 624.016100][T32615] netlink_ack+0x136/0xb30 [ 624.016128][T32615] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.016150][T32615] ? ref_tracker_free+0x689/0x830 [ 624.016175][T32615] ? __pfx_nl80211_post_doit+0x10/0x10 [ 624.016198][T32615] ? __pfx_ref_tracker_free+0x10/0x10 [ 624.016227][T32615] netlink_rcv_skb+0x2a4/0x4a0 [ 624.016257][T32615] ? __pfx_genl_rcv_msg+0x10/0x10 [ 624.016281][T32615] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 624.016320][T32615] ? down_read+0x2be/0x330 [ 624.016352][T32615] genl_rcv+0x28/0x40 [ 624.016373][T32615] netlink_unicast+0x7bb/0x940 [ 624.016406][T32615] netlink_sendmsg+0x813/0xb40 [ 624.016442][T32615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.016486][T32615] ? aa_sock_msg_perm+0xf1/0x1b0 [ 624.016507][T32615] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 624.016543][T32615] ? __pfx_netlink_sendmsg+0x10/0x10 [ 624.016571][T32615] ____sys_sendmsg+0x9b9/0xa20 [ 624.016602][T32615] ? __pfx_____sys_sendmsg+0x10/0x10 [ 624.016630][T32615] ? lock_release+0x4b/0x3c0 [ 624.016667][T32615] ? import_iovec+0x73/0xa0 [ 624.016693][T32615] ___sys_sendmsg+0x2a5/0x360 [ 624.016720][T32615] ? rcu_is_watching+0x15/0xb0 [ 624.016738][T32615] ? get_pid_task+0x20/0x1f0 [ 624.016757][T32615] ? __pfx____sys_sendmsg+0x10/0x10 [ 624.016787][T32615] ? rcu_is_watching+0x15/0xb0 [ 624.016820][T32615] ? __fget_files+0x2a/0x420 [ 624.016841][T32615] ? __fget_files+0x3a2/0x420 [ 624.016866][T32615] __x64_sys_sendmsg+0x1b1/0x290 [ 624.016895][T32615] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 624.016928][T32615] ? rcu_is_watching+0x15/0xb0 [ 624.016948][T32615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.016968][T32615] do_syscall_64+0x174/0x580 [ 624.016992][T32615] ? trace_irq_disable+0x3b/0x140 [ 624.017017][T32615] ? clear_bhb_loop+0x40/0x90 [ 624.017038][T32615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 624.017057][T32615] RIP: 0033:0x7f172fd9ce59 [ 624.017074][T32615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 624.017091][T32615] RSP: 002b:00007f1730ba8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 624.017130][T32615] RAX: ffffffffffffffda RBX: 00007f1730015fa0 RCX: 00007f172fd9ce59 [ 624.017145][T32615] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 624.017157][T32615] RBP: 00007f1730ba8090 R08: 0000000000000000 R09: 0000000000000000 [ 624.017169][T32615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 624.017181][T32615] R13: 00007f1730016038 R14: 00007f1730015fa0 R15: 00007ffefd147df8 [ 624.017205][T32615] [ 624.477972][T32626] netlink: 'syz.5.8097': attribute type 1 has an invalid length. [ 624.549613][T32626] 8021q: adding VLAN 0 to HW filter on device bond17 [ 624.639957][T32635] bond10: (slave sit0): Device is not bonding slave [ 624.646711][T32635] bond10: option active_slave: invalid value (sit0) [ 624.680069][T32635] bond10 (unregistering): Released all slaves [ 624.706173][T32645] tc action pedit offset must be on 32 bit boundaries [ 624.873670][T32659] netlink: 'syz.0.8108': attribute type 16 has an invalid length. [ 624.886759][T32659] netlink: 'syz.0.8108': attribute type 17 has an invalid length. [ 624.907504][T32661] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8109'. [ 624.934245][T32659] erspan0: left promiscuous mode [ 624.960924][T32659] 8021q: adding VLAN 0 to HW filter on device team0 [ 624.968384][T32659] dummy0: left promiscuous mode [ 624.976320][T32659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 625.003294][T32659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.012320][T32659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.029303][T32659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.039917][T32659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.050785][T32659] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 625.059540][T32659] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 625.078809][ T7444] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.085925][ T7444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 625.243193][T32657] lo speed is unknown, defaulting to 1000 [ 625.312515][T32669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8112'. [ 625.328975][T32669] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8112'. [ 625.386286][T32671] netlink: 'syz.6.8113': attribute type 1 has an invalid length. [ 625.634105][T32677] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8116'. [ 625.694677][T32689] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 625.991894][T32716] tipc: Enabling of bearer rejected, failed to enable media [ 626.100997][T32723] xt_TCPMSS: Only works on TCP SYN packets [ 626.229941][T32733] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8132'. [ 626.264217][T32735] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8132'. [ 626.705077][T32757] netlink: 'syz.1.8137': attribute type 11 has an invalid length. [ 626.961662][ T308] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 626.988992][ T312] tipc: Enabling of bearer rejected, failed to enable media [ 627.075270][ T319] tipc: Enabling of bearer rejected, failed to enable media [ 627.283261][ T332] netlink: 'syz.6.8150': attribute type 11 has an invalid length. [ 627.515523][ T349] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 627.528786][ T349] bond5 (unregistering): Released all slaves [ 627.732982][ T353] tipc: Enabling of bearer rejected, failed to enable media [ 627.762111][ T370] netlink: 'syz.1.8163': attribute type 11 has an invalid length. [ 627.924875][ T379] tipc: Enabling of bearer rejected, failed to enable media [ 627.999299][ T386] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 628.031339][ T388] syzkaller0: entered promiscuous mode [ 628.066110][ T388] syzkaller0: entered allmulticast mode [ 628.254916][ T400] openvswitch: netlink: VLAN attribute unexpected. [ 628.274185][ T400] bridge0: port 1(veth1_to_bridge) entered blocking state [ 628.281481][ T400] bridge0: port 1(veth1_to_bridge) entered disabled state [ 628.288884][ T400] veth1_to_bridge: entered allmulticast mode [ 628.296040][ T400] veth1_to_bridge: entered promiscuous mode [ 628.302107][ T400] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.314624][ T400] bridge0: port 1(veth1_to_bridge) entered blocking state [ 628.321826][ T400] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 628.367424][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.379820][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.392153][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.404429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.416662][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.428931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.665494][ T408] tipc: Enabling of bearer rejected, failed to enable media [ 628.681662][ T414] __nla_validate_parse: 3 callbacks suppressed [ 628.681684][ T414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8177'. [ 628.788819][ T414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8177'. [ 630.049831][ C0] net_ratelimit: 8873 callbacks suppressed [ 630.049856][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.067976][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.080242][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.092534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.104707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.117013][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.129291][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.141620][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.166034][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 630.178311][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.722345][ T454] tipc: Enabling of bearer rejected, failed to enable media [ 635.060815][ C1] net_ratelimit: 33742 callbacks suppressed [ 635.060848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 635.079977][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 635.092284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 635.104526][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 635.104616][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.117194][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 635.129065][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.141096][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 635.153213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 635.165261][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 638.686330][ C1] sched: DL replenish lagged too much [ 639.790984][ T414] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8177'. [ 640.097236][ C0] net_ratelimit: 79026 callbacks suppressed [ 640.097265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.097287][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 640.103957][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 640.115558][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 640.127310][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 640.139249][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 640.139335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 640.139412][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 640.139480][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 640.139556][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 645.137247][ C0] net_ratelimit: 124823 callbacks suppressed [ 645.137271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.137297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 645.143525][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 645.155651][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 645.167958][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 645.179554][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 645.215411][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 645.227574][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 645.239751][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 645.242053][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.170053][ C1] net_ratelimit: 127894 callbacks suppressed [ 650.170079][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 650.188284][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 650.200457][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 650.212689][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 650.219295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.225124][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 650.237404][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.249153][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 650.261602][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 650.273231][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 655.177852][ C1] net_ratelimit: 131609 callbacks suppressed [ 655.177879][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 655.183877][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.184187][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.196904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 655.208581][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.220664][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 655.232618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.244729][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 655.256569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 655.268824][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 660.207264][ C0] net_ratelimit: 136025 callbacks suppressed [ 660.207278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 660.207288][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.207943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.213591][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 660.225466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.237744][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 660.249550][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 660.261495][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 660.261581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 660.262135][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 665.229632][ C1] net_ratelimit: 137565 callbacks suppressed [ 665.229657][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 665.235619][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.235907][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 665.248395][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.260095][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 665.271905][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.284063][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 665.296068][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 665.308464][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 665.320273][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.904397][ T414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8177'. [ 670.257237][ C0] net_ratelimit: 138827 callbacks suppressed [ 670.257261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.257297][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 670.263533][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.276266][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 670.288018][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 670.300029][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 670.300118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 670.300687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 670.300769][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 670.300846][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 675.267502][ C1] net_ratelimit: 140625 callbacks suppressed [ 675.267526][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 675.274054][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.285912][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 675.297622][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.309770][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 675.321916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.333664][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 675.345413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 675.357593][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 675.369430][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.287271][ C1] net_ratelimit: 142082 callbacks suppressed [ 680.287294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 680.287391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.293643][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 680.305650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.317616][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 680.329479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 680.341369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 680.341450][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 680.341525][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 680.341599][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 685.309201][ C1] net_ratelimit: 143645 callbacks suppressed [ 685.309227][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 685.315264][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.327674][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 685.339369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.351634][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 685.363483][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.375590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 685.387467][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 685.399624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 685.411390][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.337223][ C0] net_ratelimit: 142204 callbacks suppressed [ 690.337246][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.337252][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 690.337444][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 690.343526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.355605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 690.367440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 690.379604][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 690.427444][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 690.439568][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 690.444116][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.378652][ C1] net_ratelimit: 144770 callbacks suppressed [ 695.378677][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 695.397481][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 695.409707][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 695.421857][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 695.427639][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 695.434197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 695.448284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.458394][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 695.470599][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 695.482330][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 700.437243][ C0] net_ratelimit: 146616 callbacks suppressed [ 700.437262][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 700.437267][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.437444][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.443650][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 700.455511][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.467762][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 700.479547][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 700.491541][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 700.491627][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 700.491705][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 705.458575][ C1] net_ratelimit: 144901 callbacks suppressed [ 705.458601][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 705.464657][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.476999][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 705.488842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.500916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 705.512702][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.524840][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 705.536598][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 705.548716][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 705.560558][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.487218][ C0] net_ratelimit: 145754 callbacks suppressed [ 710.487242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.487263][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 710.493656][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.505697][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 710.517630][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 710.529712][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 710.565522][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 710.577649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 710.589928][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 710.594398][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.497214][ C0] net_ratelimit: 144798 callbacks suppressed [ 715.497238][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.497278][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 715.503526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.515562][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 715.527405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 715.539445][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 715.575122][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 715.587263][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 715.599388][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 715.603528][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.761822][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 720.546079][ C1] net_ratelimit: 147564 callbacks suppressed [ 720.546103][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 720.564417][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 720.576628][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 720.588741][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 720.594623][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.601000][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 720.612898][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.625014][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 720.636948][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 720.649061][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 725.547697][ C1] net_ratelimit: 147600 callbacks suppressed [ 725.547722][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 725.548439][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.554067][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 725.565988][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.578127][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 725.590425][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.602034][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 725.614041][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 725.626121][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 725.637970][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.557245][ C0] net_ratelimit: 149037 callbacks suppressed [ 730.557245][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 730.557268][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.563533][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 730.575448][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.587588][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 730.599569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 730.611489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 730.611573][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 730.611651][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 730.611726][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 735.576324][ C1] net_ratelimit: 149948 callbacks suppressed [ 735.576349][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 735.583028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.594808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 735.606840][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.619076][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 735.630932][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.643148][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 735.654930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 735.667075][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 735.678885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.597263][ C1] net_ratelimit: 150695 callbacks suppressed [ 740.597286][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 740.597298][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.597535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.604817][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 740.615762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.627883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 740.639708][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 740.651649][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 740.651770][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 740.651849][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 745.608321][ C1] net_ratelimit: 153241 callbacks suppressed [ 745.608346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 745.626639][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 745.638793][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 745.650897][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 745.657796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.663220][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 745.675133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.687269][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 745.699152][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 745.711238][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 750.618729][ C1] net_ratelimit: 150710 callbacks suppressed [ 750.618756][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 750.619278][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.625073][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 750.637080][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.649346][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 750.661117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.673198][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 750.685157][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 750.697109][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 750.708909][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.627196][ C0] net_ratelimit: 152026 callbacks suppressed [ 755.627219][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.627291][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 755.633488][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.645578][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 755.657417][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 755.669505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 755.705453][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 755.717575][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 755.729702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 755.735888][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.674130][ C1] net_ratelimit: 152467 callbacks suppressed [ 760.674157][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 760.692501][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 760.704729][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 760.716885][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 760.722816][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 760.729283][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 760.741113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.753234][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 760.765059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 760.777497][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 762.796663][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 765.727224][ C0] net_ratelimit: 153403 callbacks suppressed [ 765.727248][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.727930][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 765.733839][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.745838][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 765.757645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 765.769900][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 765.805686][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 765.817803][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 765.829921][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 765.832959][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.737184][ C0] net_ratelimit: 151781 callbacks suppressed [ 770.737206][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.737363][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 770.743708][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.755695][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 770.767455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 770.779374][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 770.779461][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 770.779540][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 770.779626][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 770.779702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 772.517212][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 772.524305][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P474/1:b..l [ 772.532159][ C1] rcu: (detected by 1, t=10503 jiffies, g=104281, q=114456 ncpus=2) [ 772.540264][ C1] task:syz.3.8187 state:R running task stack:25816 pid:474 tgid:474 ppid:27219 task_flags:0x400040 flags:0x00080002 [ 772.553795][ C1] Call Trace: [ 772.557104][ C1] [ 772.560080][ C1] __schedule+0x17d9/0x56c0 [ 772.564649][ C1] ? __pfx___schedule+0x10/0x10 [ 772.569545][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 772.574709][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 772.580585][ C1] ? __pfx___schedule+0x10/0x10 [ 772.585497][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 772.590615][ C1] ? preempt_schedule_thunk+0x16/0x40 [ 772.596047][ C1] preempt_schedule_common+0x82/0xd0 [ 772.601479][ C1] ? nl80211_netlink_notify+0x6f4/0x840 [ 772.607085][ C1] preempt_schedule_thunk+0x16/0x40 [ 772.612359][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 772.617708][ C1] __local_bh_enable_ip+0xe1/0x130 [ 772.622885][ C1] nl80211_netlink_notify+0x6f4/0x840 [ 772.628324][ C1] ? nl80211_netlink_notify+0x74/0x840 [ 772.633937][ C1] notifier_call_chain+0x1a5/0x3d0 [ 772.639123][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 772.644910][ C1] netlink_release+0x11f8/0x1aa0 [ 772.649909][ C1] ? netlink_release+0x106/0x1aa0 [ 772.655170][ C1] ? __pfx_netlink_release+0x10/0x10 [ 772.660514][ C1] ? down_write+0x16d/0x200 [ 772.665172][ C1] ? __pfx_down_write+0x10/0x10 [ 772.670090][ C1] sock_close+0xad/0x220 [ 772.674382][ C1] ? __pfx_sock_close+0x10/0x10 [ 772.679267][ C1] __fput+0x418/0xa50 [ 772.683289][ C1] task_work_run+0x1d9/0x270 [ 772.687916][ C1] ? __pfx_task_work_run+0x10/0x10 [ 772.693060][ C1] ? rcu_is_watching+0x15/0xb0 [ 772.697866][ C1] exit_to_user_mode_loop+0x1fa/0x730 [ 772.703276][ C1] ? rcu_is_watching+0x15/0xb0 [ 772.708081][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.714177][ C1] do_syscall_64+0x353/0x580 [ 772.718810][ C1] ? clear_bhb_loop+0x40/0x90 [ 772.723524][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 772.729462][ C1] RIP: 0033:0x7f4fc839ce59 [ 772.733927][ C1] RSP: 002b:00007ffd09e43f78 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 772.742392][ C1] RAX: 0000000000000000 RBX: 00007f4fc8617da0 RCX: 00007f4fc839ce59 [ 772.750414][ C1] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 772.758556][ C1] RBP: 00007f4fc8617da0 R08: 0000000000000006 R09: 0000000000000000 [ 772.766577][ C1] R10: 00007f4fc8617cb0 R11: 0000000000000246 R12: 000000000009afae [ 772.774607][ C1] R13: 00007f4fc861627c R14: 000000000009adac R15: 00007f4fc8616270 [ 772.782647][ C1] [ 772.785711][ C1] rcu: rcu_preempt kthread starved for 5589 jiffies! g104281 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 772.796964][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 772.807068][ C1] rcu: RCU grace-period kthread stack dump: [ 772.813078][ C1] task:rcu_preempt state:R running task stack:28016 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 772.826973][ C1] Call Trace: [ 772.830282][ C1] [ 772.833245][ C1] __schedule+0x17d9/0x56c0 [ 772.837788][ C1] ? rcu_is_watching+0x15/0xb0 [ 772.842591][ C1] ? rcu_is_watching+0x15/0xb0 [ 772.847572][ C1] ? __pfx___schedule+0x10/0x10 [ 772.852477][ C1] ? schedule+0x90/0x360 [ 772.856754][ C1] ? rcu_is_watching+0x15/0xb0 [ 772.861553][ C1] ? lock_release+0x4b/0x3c0 [ 772.866192][ C1] schedule+0x164/0x360 [ 772.870392][ C1] schedule_timeout+0x152/0x2c0 [ 772.875295][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 772.880726][ C1] ? __pfx_process_timeout+0x10/0x10 [ 772.886070][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 772.891930][ C1] ? prepare_to_swait_event+0x322/0x350 [ 772.897533][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 772.902452][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 772.908670][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 772.914011][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 772.919265][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 772.923918][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 772.929182][ C1] ? __kthread_parkme+0x71/0x1f0 [ 772.934168][ C1] ? __kthread_parkme+0x196/0x1f0 [ 772.939253][ C1] kthread+0x388/0x470 [ 772.943372][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 772.948618][ C1] ? __pfx_kthread+0x10/0x10 [ 772.953252][ C1] ret_from_fork+0x514/0xb70 [ 772.957950][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 772.963122][ C1] ? __switch_to+0xc89/0x1420 [ 772.967874][ C1] ? __pfx_kthread+0x10/0x10 [ 772.972532][ C1] ret_from_fork_asm+0x1a/0x30 [ 772.977343][ C1] [ 772.980385][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 772.986742][ C1] Sending NMI from CPU 1 to CPUs 0: [ 772.991979][ C0] NMI backtrace for cpu 0 [ 772.992006][ C0] CPU: 0 UID: 0 PID: 25433 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 772.992026][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 772.992038][ C0] Workqueue: events_power_efficient neigh_periodic_work [ 772.992068][ C0] RIP: 0010:kasan_check_range+0x1d1/0x2c0 [ 772.992099][ C0] Code: 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 0e 41 80 3b 00 75 7c 49 ff c3 49 ff cc 75 f2 5b 41 5c 41 5d 41 5e 41 5f 5d cc cc cc cc cc 45 84 ff 0f 85 a1 00 00 00 41 f7 c7 00 ff 00 00 [ 772.992115][ C0] RSP: 0018:ffffc900000074c0 EFLAGS: 00000056 [ 772.992130][ C0] RAX: 1ffff11006413601 RBX: ffff88803209b000 RCX: ffffffff897a380f [ 772.992144][ C0] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88803209b198 [ 772.992156][ C0] RBP: 0000000000000000 R08: ffff88803209b19f R09: 1ffff11006413633 [ 772.992168][ C0] R10: dffffc0000000000 R11: ffffed1006413634 R12: ffff88805758f000 [ 772.992182][ C0] R13: dffffc0000000000 R14: ffff88803209b208 R15: ffff88803209b340 [ 772.992196][ C0] FS: 0000000000000000(0000) GS:ffff88812527c000(0000) knlGS:0000000000000000 [ 772.992210][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 772.992223][ C0] CR2: 0000558b22ac8608 CR3: 0000000077090000 CR4: 00000000003526f0 [ 772.992239][ C0] Call Trace: [ 772.992247][ C0] [ 772.992253][ C0] __netif_schedule+0x5f/0x200 [ 772.992279][ C0] ? advance_sched+0xa31/0xc80 [ 772.992297][ C0] ? advance_sched+0x9e8/0xc80 [ 772.992315][ C0] advance_sched+0xa8a/0xc80 [ 772.992335][ C0] ? __pfx_advance_sched+0x10/0x10 [ 772.992352][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 772.992376][ C0] ? __pfx_advance_sched+0x10/0x10 [ 772.992394][ C0] __hrtimer_run_queues+0x3bc/0xa10 [ 772.992424][ C0] hrtimer_interrupt+0x448/0x910 [ 772.992446][ C0] ? sched_clock+0x3f/0x60 [ 772.992482][ C0] __sysvec_apic_timer_interrupt+0x102/0x430 [ 772.992535][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 772.992559][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 772.992577][ C0] RIP: 0010:br_nf_pre_routing+0x0/0x14b0 [ 772.992610][ C0] Code: 61 ae f7 48 8b 54 24 28 e9 d2 fc ff ff 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 50 49 89 d6 49 [ 772.992625][ C0] RSP: 0018:ffffc900000078b8 EFLAGS: 00000246 [ 772.992639][ C0] RAX: ffff888077558930 RBX: 0000000000000000 RCX: dffffc0000000000 [ 772.992652][ C0] RDX: ffffc90000007940 RSI: ffff888094ebd3c0 RDI: 0000000000000000 [ 772.992664][ C0] RBP: ffffc900000079f0 R08: ffff888045a25d00 R09: 0000000000000003 [ 772.992677][ C0] R10: 0000000000000003 R11: ffffffff8a82e8c0 R12: 0000000000000001 [ 772.992688][ C0] R13: ffff888077558928 R14: ffffffff8a82e8c0 R15: ffffc90000007940 [ 772.992703][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 772.992726][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 772.992754][ C0] br_handle_frame+0x127f/0x1510 [ 772.992789][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 772.992811][ C0] ? rcu_is_watching+0x15/0xb0 [ 772.992830][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 772.992853][ C0] ? rcu_is_watching+0x15/0xb0 [ 772.992870][ C0] ? lock_release+0x4b/0x3c0 [ 772.992896][ C0] ? nf_hook_slow+0x182/0x220 [ 772.992916][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 772.992938][ C0] __netif_receive_skb_core+0x989/0x30b0 [ 772.992959][ C0] ? __netif_receive_skb_core+0x2100/0x30b0 [ 772.992994][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 772.993023][ C0] ? lock_acquire+0x5f/0x350 [ 772.993048][ C0] ? process_backlog+0x3c3/0x1860 [ 772.993070][ C0] ? rcu_is_watching+0x15/0xb0 [ 772.993089][ C0] ? process_backlog+0x3c3/0x1860 [ 772.993112][ C0] process_backlog+0x706/0x1860 [ 772.993135][ C0] ? process_backlog+0x3c3/0x1860 [ 772.993163][ C0] __napi_poll+0xaa/0x330 [ 772.993184][ C0] net_rx_action+0x61d/0xf50 [ 772.993211][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 772.993238][ C0] ? sched_balance_domains+0x770/0x880 [ 772.993267][ C0] handle_softirqs+0x225/0x840 [ 772.993292][ C0] ? do_softirq+0x76/0xd0 [ 772.993315][ C0] ? neigh_periodic_work+0xc23/0xe40 [ 772.993338][ C0] do_softirq+0x76/0xd0 [ 772.993359][ C0] [ 772.993365][ C0] [ 772.993372][ C0] __local_bh_enable_ip+0xf8/0x130 [ 772.993394][ C0] neigh_periodic_work+0xc23/0xe40 [ 772.993421][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 772.993443][ C0] process_scheduled_works+0xa8e/0x14e0 [ 772.993478][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 772.993500][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 772.993524][ C0] ? assign_work+0x3cf/0x5d0 [ 772.993547][ C0] worker_thread+0xa47/0xfb0 [ 772.993583][ C0] kthread+0x388/0x470 [ 772.993599][ C0] ? __pfx_worker_thread+0x10/0x10 [ 772.993621][ C0] ? __pfx_kthread+0x10/0x10 [ 772.993637][ C0] ret_from_fork+0x514/0xb70 [ 772.993656][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 772.993673][ C0] ? __switch_to+0xc89/0x1420 [ 772.993698][ C0] ? __pfx_kthread+0x10/0x10 [ 772.993715][ C0] ret_from_fork_asm+0x1a/0x30 [ 772.993743][ C0] [ 775.774540][ C1] net_ratelimit: 126909 callbacks suppressed [ 775.774565][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 775.792808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 775.805015][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 775.817272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 775.823108][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.829651][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 775.841462][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.853780][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 775.865476][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 775.877771][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 780.783678][ C1] net_ratelimit: 152497 callbacks suppressed [ 780.783702][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 780.801992][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 780.814147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 780.826553][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 780.832849][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.838883][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 780.850749][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.863099][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0) [ 780.874762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.887037][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:8e:fb:0c:43:26:22, vlan:0)