last executing test programs: 4.072400396s ago: executing program 1 (id=13706): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000040)=0x9, 0x4) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r3, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r6) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$NFT_MSG_GETGEN(r5, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x10, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x4044841) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r2, 0x40106e8c, &(0x7f00000002c0)=[0x80000001, 0x2]) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340), r6) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x98, r8, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xd}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd1}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x20}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x28, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xa217cbb405f69dee}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x99}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x60, 0x10}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_SERVICE={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc33}]}, 0x98}}, 0x4040080) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000500)=@get={0x1, &(0x7f00000004c0)=""/63, 0x9}) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r6, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x78, r7, 0x502, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x78}, 0x1, 0x0, 0x0, 0x200048c0}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r5) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_FT_IES(r9, &(0x7f0000000bc0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b80)={&(0x7f0000000740)={0x3d8, r10, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x6d4, 0x43}}}}, [@NL80211_ATTR_IE={0xee, 0x2a, [@tim={0x5, 0xe4, {0x20, 0x2d, 0xe, "63790c97056de9606840285eaf4feb3b513a707822fbf74866c58d1302325c1d5f3143ea28d00abe41d114304e6af28faed27616e708ed825ceb1927017bae29b815eeabbab3e7000dcf20601ad0df731f108421a7c5855fce1169a93660201620972ae43afe495f76e6efea4476422bbff301edbb640477873bb533e691807a6f38fd38daccd5483016b930e957e1ea8c517658b9af44f1d04c4829bdb6afaf95f81a2d5c6e89cdb41c22cfdd921e852f6d3cfba64ade9a9fcdb8407db0496933e07827c1b8b5c92f0d0c7f6cd30b2dacf65e5cfa46f2d6a4c8195392ba4b9c29"}}, @ibss={0x6, 0x2, 0xbda}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x9}, @NL80211_ATTR_IE={0x2af, 0x2a, [@perr={0x84, 0xf5, {0x7, 0xf, [{{0x0, 0x1}, @broadcast, 0x0, @value=@broadcast, 0x1e}, {{0x0, 0x1}, @device_a, 0xa3ab, @value=@device_b, 0x21}, {{}, @broadcast, 0x7fffffff, @void, 0x1c}, {{0x0, 0x1}, @broadcast, 0xffffffff, @value, 0x31}, {{0x0, 0x1}, @device_b, 0x8, @value=@device_b, 0x40}, {{}, @device_b, 0x2, @void, 0xa}, {{}, @broadcast, 0x2, @void, 0x2c}, {{0x0, 0x1}, @device_a, 0x5, @value, 0x15}, {{0x0, 0x1}, @device_a, 0x8, @value, 0x21}, {{}, @broadcast, 0xfffffff9, @void, 0x37}, {{}, @device_b, 0x9, @void, 0x4}, {{}, @broadcast, 0x1, @void, 0xd}, {{0x0, 0x1}, @device_b, 0x5, @value, 0x22}, {{0x0, 0x1}, @device_a, 0x8001, @value, 0x2d}, {{}, @broadcast, 0x800, @void, 0x9}]}}, @link_id={0x65, 0x12, {@from_mac}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x5, @device_b, 0x8, @value=@device_b, 0x0, 0xa, @device_a, 0x5}}, @tim={0x5, 0xcf, {0x4, 0xde, 0x7, "40db5fd8e903c17c481f37951d9ee3c601e2dfe51056fcceb3534f7816773d679bbcd32c5070c659ad3f8d4b2a98054b0ca58b57507daf2585ece38a3e06cb4397c5a99b71fa0bd88306483e879b3c3a959d34f659c1592379a2080798eed61fff84c98d359d65acbeea019f6d1820d41e7ae78c87d6cb74bfe9542092610550a1b1433222ab461bb470985a5270c0b9fca11652c9b2f98f8dcba1a2b07e01ae8e82a602f14cd90ba1cc2f49f00d2b3a2a08c4aca14f49123f8f671528d6037e0b6a4cc6f403f57aeb8d6a56"}}, @peer_mgmt={0x75, 0x16, {0x1, 0x7fff, @void, @val=0x37, @val="3f6098e9b22edb7440f9f48e32a404da"}}, @perr={0x84, 0x8e, {0x8, 0x8, [{{}, @broadcast, 0x1, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0x6, @value=@device_b, 0xa}, {{0x0, 0x1}, @device_a, 0x90000, @value=@broadcast, 0x15}, {{0x0, 0x1}, @device_b, 0x8, @value=@broadcast, 0x3a}, {{}, @broadcast, 0x2, @void, 0x3e}, {{0x0, 0x1}, @broadcast, 0xfffff000, @value=@device_b, 0x20}, {{0x0, 0x1}, @broadcast, 0x10, @value=@device_b, 0x2d}, {{0x0, 0x1}, @device_b, 0x10, @value, 0x30}]}}]}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x40}, 0x8028) getsockopt$inet_sctp6_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000c00)={0x0, 0xe, 0x4, 0x0, 0x5, 0xe, 0x2, 0x1000, {0x0, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0x8, 0x4, 0xc, 0x2}}, &(0x7f0000000cc0)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000d00)={r12, 0x401}, &(0x7f0000000d40)=0xc) recvmmsg$unix(r4, &(0x7f0000004600)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000d80)=""/52, 0x34}, {&(0x7f0000000dc0)=""/158, 0x9e}, {&(0x7f0000000e80)=""/83, 0x53}], 0x3, &(0x7f0000000f40)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x98}}, {{&(0x7f0000001000)=@abs, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001080)=""/145, 0x91}, {&(0x7f0000001140)=""/168, 0xa8}, {&(0x7f0000001200)=""/152, 0x98}, {&(0x7f00000012c0)=""/248, 0xf8}, {&(0x7f00000013c0)=""/7, 0x7}, {&(0x7f0000001400)=""/38, 0x26}], 0x6, &(0x7f00000014c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}}, {{&(0x7f0000001580)=@abs, 0x6e, &(0x7f0000001800)=[{&(0x7f0000001600)=""/160, 0xa0}, {&(0x7f00000016c0)=""/226, 0xe2}, {&(0x7f00000017c0)=""/19, 0x13}], 0x3, &(0x7f0000001840)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000001880), 0x6e, &(0x7f0000001900)}}, {{&(0x7f0000001940), 0x6e, &(0x7f0000002a80)=[{&(0x7f00000019c0)=""/31, 0x1f}, {&(0x7f0000001a00)=""/4096, 0x1000}, {&(0x7f0000002a00)=""/110, 0x6e}], 0x3}}, {{&(0x7f0000002ac0)=@abs, 0x6e, &(0x7f0000002e80)=[{&(0x7f0000002b40)=""/29, 0x1d}, {&(0x7f0000002b80)=""/1, 0x1}, {&(0x7f0000002bc0)=""/254, 0xfe}, {&(0x7f0000002cc0)=""/107, 0x6b}, {&(0x7f0000002d40)=""/101, 0x65}, {&(0x7f0000002dc0)=""/120, 0x78}, {&(0x7f0000002e40)=""/53, 0x35}], 0x7}}, {{&(0x7f0000002f00)=@abs, 0x6e, &(0x7f00000031c0)=[{&(0x7f0000002f80)=""/126, 0x7e}, {&(0x7f0000003000)}, {&(0x7f0000003040)=""/93, 0x5d}, {&(0x7f00000030c0)=""/142, 0x8e}, {&(0x7f0000003180)=""/53, 0x35}], 0x5, &(0x7f0000003240)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xf8}}, {{&(0x7f0000003340)=@abs, 0x6e, &(0x7f0000004540)=[{&(0x7f00000033c0)=""/28, 0x1c}, {&(0x7f0000003400)=""/4096, 0x1000}, {&(0x7f0000004400)=""/9, 0x9}, {&(0x7f0000004440)=""/228, 0xe4}], 0x4, &(0x7f0000004580)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x78}}], 0x8, 0x22, &(0x7f0000004800)={0x77359400}) sendmsg$NL80211_CMD_DEL_MPATH(r13, &(0x7f0000004940)={&(0x7f0000004840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000004900)={&(0x7f0000004880)={0x4c, r10, 0x400, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x3d}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r23 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000004980), r23) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r14, 0x89f0, &(0x7f0000004b40)={'syztnl0\x00', &(0x7f0000004ac0)={'syztnl2\x00', 0x0, 0x2f, 0x4, 0x86, 0x9, 0x1, @mcast2, @remote, 0x8, 0x10, 0x80000001, 0x1ff}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000004c40)={0x6, 0x11, &(0x7f00000049c0)=@raw=[@map_val={0x18, 0x1, 0x2, 0x0, r19, 0x0, 0x0, 0x0, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffff8}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}}, @call={0x85, 0x0, 0x0, 0xb4}, @alu={0x4, 0x0, 0x2, 0x6, 0xd, 0xfffffffffffffffc}], &(0x7f0000004a80)='syzkaller\x00', 0xf0, 0x0, 0x0, 0x41100, 0x50, '\x00', r24, 0x25, r22, 0x8, &(0x7f0000004b80)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000004bc0)={0x3, 0x4, 0xd26, 0x8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000004c00)=[r18, r15, r16, r17, r5, r22, r20], 0x0, 0x10, 0xfffff001}, 0x94) ioctl$EXT4_IOC_GROUP_EXTEND(r21, 0x40086607, &(0x7f0000004d00)=0x7) 3.619600234s ago: executing program 2 (id=13720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed00286cfffe8000000000000000000000000000aaff020000000000000000000000000011"], 0xfdef) 3.424195393s ago: executing program 2 (id=13725): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xfff5, 0x10}, {}, {0x8, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x80, 0x1, 0x7, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x24040810}, 0x20000000) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=@newqdisc={0x188, 0x24, 0x20, 0x70bd29, 0x8c, {0x0, 0x0, 0x0, r3, {0x72af6e9f19e2c63b, 0x6}, {0xe, 0x10}, {0xf, 0xb}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x38, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x38}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x80}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8de1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x400}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x3c, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x28}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}]}}, @q_dsmark={{0xb}, {0x14, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x7}]}}, @q_dsmark={{0xb}, {0x50, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xf5d2}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x88ef}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x36}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x1f}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x188}}, 0x1) 3.304500464s ago: executing program 0 (id=13731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000070000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000014000000d809000000000000b93b0000000000000074c50000000000010000000000332244000500fe8000000000000000000000000000bb0000000232"], 0xfc}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000080)) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r4, 0x4800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x1bf5b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000540)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac14142e08000700e0"], 0x48}, 0x1, 0x0, 0x0, 0x24040000}, 0x2000800) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 3.23669062s ago: executing program 2 (id=13732): r0 = socket(0x2d, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000440)={0x2d, 0x0, 0x1}, 0xc) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r1, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0100000007051dbcac8fde33188b00000001080c00024000000003000038eb0c000640000000000000000a"], 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x800) r2 = socket(0x10, 0x3, 0x0) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61", 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010000304000000000400000000007400", @ANYRES32=0x0, @ANYBLOB="0000000003120100280012800b00010062726964676500001800028005002c00020000000c002e"], 0x48}, 0x1, 0x0, 0x0, 0x20040884}, 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000000600)="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", 0x41}, {&(0x7f0000000140)="ce903baa49", 0xfffffe11}], 0x2, 0x80000001, 0x4dc7a87d) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, &(0x7f00000004c0)=0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.current\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f00000009c0)={'ip6tnl0\x00', &(0x7f0000000900)={'syztnl2\x00', 0x0, 0x4, 0xc8, 0x3, 0x10000, 0x28, @private0, @mcast2, 0x8000, 0x20, 0x1400, 0x1cbc8000}}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r8}, &(0x7f0000000540), &(0x7f0000000740)=r5}, 0x20) read(r1, &(0x7f0000000a00)=""/202, 0xca) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r8}, 0x4) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300002000068000000090a010400000000fcff00000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000212c0011800b00010074617267657400001c0002800400030008000240000000000a0001"], 0xb0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000b00)=ANY=[@ANYRES8=r6, @ANYRESHEX, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b708000200000000000000ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000001000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b700000002000000958df188630fc19ac1993df44bd5fff60815fe88dcd8de36b3aaffce7d9c7dcbd9127b1f9a8d22eb9ee3a131f356fbdd98038c5ae1565051f30802a0d009ee9e1b0f0ac8e1"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.145809863s ago: executing program 1 (id=13733): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvfrom(r0, 0x0, 0x0, 0x40002042, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x400, 0x0, 0x0, {}, [@IFLA_MAP={0x24, 0xe, {0x9, 0xb12, 0x8, 0x3, 0x45, 0x1}}]}, 0x44}}, 0x0) 3.050439874s ago: executing program 4 (id=13734): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x57, 0x10, &(0x7f0000000000), 0xffffffffffffffc9}, 0x48) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0xc, 0x0, 0xfffffffc, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)={0x1b, 0x0, 0x0, 0x7, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f3317000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400a0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4004010) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x24, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7f}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@call={0x85, 0x0, 0x0, 0xf}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit, @generic={0xde, 0xc, 0x4, 0x9, 0x3}, @call={0x85, 0x0, 0x0, 0xb6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x44b876de1f09e0fc}}}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x36, &(0x7f0000000400)=""/54, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000480)={0x0, 0xe, 0xa820, 0xa}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000004c0)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000500)=[{0x4, 0x1, 0x6}, {0x5, 0x2, 0xc, 0x1}, {0x5, 0x4, 0x4, 0x9}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000001c0)={@map=r5, r1, 0x2a, 0x0, 0x0, @void, @value=r7, @void, @void, r4}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x13c, 0x10, 0x713, 0x0, 0x25dfdbff, {{@in=@multicast1, @in6=@mcast2, 0x4, 0x0, 0x4e21, 0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0xee00}, {@in6=@dev={0xfe, 0x80, '\x00', 0x37}, 0x4d2, 0x32}, @in6=@private2, {0x5, 0x0, 0x0, 0x9, 0xffffffff00000001, 0x0, 0x80000001, 0x543}, {0x4, 0x7fffffffffffffff, 0x100, 0x1}, {}, 0x70bd2c, 0x3505, 0xa, 0x4, 0x0, 0x50}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}]}, 0x13c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r8, 0x0, 0x41, &(0x7f0000000540)=ANY=[], &(0x7f0000000000)=0x28) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e21, @multicast2}}, [0x3, 0x9, 0x1, 0xd00, 0x101, 0x2, 0x8ad1, 0x1, 0xf54c, 0xfffffffffffffffd, 0xbaa, 0x5, 0x5, 0x5, 0x6ac3]}, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000080)=ANY=[], 0x10448) r10 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r10, 0x10c, 0x9, &(0x7f0000000080)=0x13, 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) bpf$PROG_LOAD(0x23, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r11, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400192446b6f18b593a10562c84d8c033ed7afe7027243de829e0000000a2bc560322fc11270cc15860342259b394dfca00000f7f8900000020000000e42471283ec681", 0x48}], 0x1) syz_genetlink_get_family_id$ethtool(&(0x7f0000000880), r3) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000640)={'wg1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)=@mpls_delroute={0x3c, 0x19, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1c, 0x14, 0x0, 0x6, 0xfe, 0x1, 0xfd, 0x1, 0x3500}, [@RTA_MULTIPATH={0xc, 0x9, {0x800, 0x10, 0xa1, r12}}, @RTA_VIA={0x14, 0x12, {0x9, "953bd1be0b00d74796f1237801a2"}}]}, 0x3c}}, 0x20000000) 3.05011482s ago: executing program 0 (id=13735): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed00286cfffe8000000000000000000000000000aaff020000000000000000000000000012"], 0xfdef) 3.046818171s ago: executing program 3 (id=13736): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x7, @none, 0x73, 0x1}, 0xe) connect$packet(r0, &(0x7f0000000200)={0x1f, 0xf8, 0x0, 0x1, 0x2}, 0x14) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0], 0x0, 0x37}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="0900000004000000040000000700000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000050000000000000000", @ANYRES32=0x0, @ANYRES32=r1, @ANYBLOB="020000000100"/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x0, 0x0}, 0x10) bpf$ENABLE_STATS(0x20, &(0x7f0000000340), 0x4) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x8094) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp512-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg(r5, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000200)='*', 0x1}], 0x1}}], 0x1, 0x48040) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x401c010) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r6, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000208"], 0xe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x134, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xfc, 0x2, [@TCA_BASIC_EMATCHES={0x4}, @TCA_BASIC_EMATCHES={0xf4, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xf0, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x600}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="6762ab8b52fbbf7a5d28"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x5}, {0x7, 0x999, 0x1, 0x80000000}}}, @TCF_EM_META={0x3c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_LVALUE={0x23, 0x2, [@TCF_META_TYPE_VAR="e574caef423637975c", @TCF_META_TYPE_VAR="0393fc84346422bba61e", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8000, 0x9, 0x1}, {0x6, 0x9, 0x2}}}]}}, @TCF_EM_META={0x68, 0x1, 0x0, 0x0, {{0x8001, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="3b9aa19a5093e4d1c834", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ae2e", @TCF_META_TYPE_VAR='\a']}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="c5a29d0983a38c474fe4", @TCF_META_TYPE_VAR="b3690e"]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0027170019a81c1e78d4", @TCF_META_TYPE_VAR="ccbcd1cc4e2b", @TCF_META_TYPE_VAR="92", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}]}}]}]}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="020aff0007000000000000000000000005001a00ff020000000000000000000000000001fc0000000042da8f00000000000000000000010a000012dba01da00817c8ae651d9d5a20740a66bd5dc467768961119288e86505d27e6e69f8d4ef0a5c2ebb18c6d80b41585057a9882cd8fb8bf8967d5e00f63bb67706986ee8c287b59357bc6c8b04eff98f9f1ed09a2c68ca17b94c9058ce81268506c63f79529828d3c068ba595e83b45f3dbbc86fea96d3cb9a99467db37cadf75092504dc35f13abfdeceecd9cdb400047febc3fb023ca"], 0x38}}, 0x3400400c) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 3.046508381s ago: executing program 1 (id=13737): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000007c0)={0x15, 0x101, 0x7, 0x5, 0x3, 0x81}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f0000000300)="9e", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) sendmmsg$inet_sctp(r2, &(0x7f0000000380)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x4000}], 0x1, 0x20000840) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40801) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000018c0)={'gre0\x00', &(0x7f0000001880)=@ethtool_cmd={0x43}}) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000007c0)={0x15, 0x101, 0x7, 0x5, 0x3, 0x81}) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) sendto$inet(r1, &(0x7f0000000300)="9e", 0x1, 0x0, &(0x7f0000000380)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x23, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) sendmmsg$inet(r2, &(0x7f0000000fc0)=[{{&(0x7f0000000000)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000002b00)='1', 0x1}], 0x1}}], 0x1, 0x48c4) (async) sendmmsg$inet_sctp(r2, &(0x7f0000000380)=[{&(0x7f0000000040)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1, &(0x7f0000000300)=[@dstaddrv4={0x18, 0x84, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x18, 0x4000}], 0x1, 0x20000840) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r5, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0xf, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x40801) (async) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000018c0)={'gre0\x00', &(0x7f0000001880)=@ethtool_cmd={0x43}}) (async) 2.966594574s ago: executing program 3 (id=13738): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) r5 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r5, 0x29, 0xcb, 0x0, 0x76e6) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {0xfff1, 0xb}, {0x6}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040040}, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'team_slave_1\x00'}, @IFLA_MASTER={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a000000000000000000000001000000000000d22b40e93e2b72a5f882aa367b99344fc0fe81805f72b54c4f0b5b41f07bc92907ebc3d17762bdd8474499dcbec1a5804b4e45f2087d4f9b73ea76892e7cfbacb56b0d01b53f97daa5a1b24e2dc3c36d7f108843b0e0bbe5d26e14004f55a1fe1ad64f40c12cf3ed25d087f58da265c4a1f9afb3d8f1acb86093ccf61beaa80935c20c6089ce6cecc5c829b27d766693618c19a5d1bc42e544a7dcaeb5029e5cdabd"], &(0x7f00000006c0)=""/184, 0x32, 0xb8, 0x1}, 0x20) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r4, {0x9, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00'}) sendmsg$nl_xfrm(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=ANY=[], 0xc4}}, 0x408c0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x20, &(0x7f00000001c0)={&(0x7f0000000000)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2.941865966s ago: executing program 4 (id=13739): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r0, &(0x7f00000001c0), 0x10) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{{0x1, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}, {{0x2, 0x1}, {0x1, 0x0, 0x1}}], 0x10) close(r0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x33822}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xff7f, 0x2}, 0xfffffffffffffebb) r6 = socket$kcm(0xa, 0x1, 0x0) sendmsg$sock(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x4f, 0x3}}], 0x18}, 0x4004002) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0xa36297003c6e218e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x0, 0x1, 0xd, @vifc_lcl_ifindex, @empty}, 0x10) 2.850617525s ago: executing program 0 (id=13740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="540100001800010000000000000000001d0100001500030000000000000000008ca5be073cff296e020000001e01060001", @ANYRESOCT], 0x154}}, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000090000000000000000000083"], 0x0, 0x45, 0x0, 0x0, 0xa}, 0x20) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) r10 = socket(0x1, 0x803, 0x0) r11 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r11, 0xc004743e, &(0x7f0000000100)) ioctl$SIOCSIFMTU(r5, 0x8922, &(0x7f00000000c0)={'pim6reg\x00', 0x7}) ioctl$PPPIOCSCOMPRESS(r11, 0x4010744d) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="4400000000000000080200"/20, @ANYRES32=0x0, @ANYBLOB="46060900200000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r12, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000084400001c0012800e000100697036677265746170000000080002800400120008000a00", @ANYRES32=r7], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000001c260000c6000100250000008510000001000000950000000000000018400000020000000000000000000000950000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@deltclass={0x34, 0x29, 0x400, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0xd, 0x4}, {0x3, 0x2d483d81452807a0}, {0xfff2, 0xfff3}}, [@tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x36, 0x5, {0xc, 0x81}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r13 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r13, &(0x7f0000000000)=ANY=[], 0xfe33) 2.849439193s ago: executing program 1 (id=13741): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'wg0\x00', 0x2000}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000020000000000000000000000300000001"], 0x4c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=@deltaction={0x58, 0x31, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@TCA_ACT_TAB={0x24, 0x1, [{0x14, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x58}}, 0x20000000) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000440)=[{0x45, 0x0, 0x3, 0x6}, {}, {0x0, 0x1}, {}, {0x6}]}) 2.807628242s ago: executing program 4 (id=13742): r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000001c0)=0x80, 0x800) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x800) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r2, 0x0, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004000}, 0x800) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x20, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1}]}}}]}, 0x3c}}, 0x20000000) r10 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r10, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r10, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r11, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) 2.729938803s ago: executing program 3 (id=13743): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x8, 0x7, 0x1005, @vifc_lcl_addr=@empty, @remote}, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000080)={@rand_addr=0x64010102, @multicast2}, 0x8) r4 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="100000000000000000000000070000001400000000000000100100000a"], 0x28}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {0x0, @struct}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fddbdf250700000008000300", @ANYRES32=r6, @ANYBLOB="0cd2990001000100000000001400040064766d725b31000000000000000000000800050008000000"], 0x44}, 0x1, 0x0, 0x0, 0x4090}, 0x24044804) 2.662919551s ago: executing program 1 (id=13744): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newtaction={0x214, 0x30, 0x51b, 0x0, 0x0, {}, [{0x200, 0x1, [@m_skbmod={0x68, 0x1, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_SMAC={0x0, 0x4, @multicast}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0xa8, 0x0, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x68, 0x6, "9f9b3fc2ddc24af6f0e10a015de0eee6fc0900c6e7d94c24ec368c475d7486514b6d2677226afad90c7d6c3ad311a9dee1f031afe3919c34f8636d67f86e3ebd80589ce5f55db46e88a14f002788b194b3ccfdf8c4b86ba094bef19b3a0cddb8831b84bb"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_tunnel_key={0xec, 0x0, 0x0, 0x0, {{0xf}, {0x54, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_PARMS={0x1c}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_NO_CSUM={0xfffffffffffffede}]}, {0x69, 0x6, "9c52af17f462814d38170f632f883a02e6a90db7e490d2b8bd19fcb7872621f629a33220c9b5f21052aa40bb9616cbe2ae3debc7ea8dcc879c436c50c4b2e001d6b687516d71ee6b27e990693d6b67974963a28a690808e192e0ecf03e7f3535c9492c8e09"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x214}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value, &(0x7f0000000100)=0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x430881, 0x0) 2.632007782s ago: executing program 3 (id=13745): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xe, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x2, 0x5, 0x620, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0x268, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}], 0x1, 0x10000, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000006c0)={'HL\x00'}, &(0x7f0000000700)=0x1e) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000000)=0x80, 0x4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000140)={0x0, 0xf7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)={r4}, &(0x7f00000002c0)=0x8) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042800c00018006000600800a00000c00028008000d"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, 0x0, 0x700) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYRES16=r5, @ANYRES32=r8, @ANYRES16=r5], 0x3c}}, 0x40000) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0x503, 0x70bd2a, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3806}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x440b0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x12, 0x4, 0x8, 0xb}, 0x50) r10 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp=r10}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000340)={r9, &(0x7f0000000080)="1da676c997ef3bd3676bba754d20a6361065baf9f6dc88a381ed017307d9ec7e8ea4e962e7e83b443c12ea7355a1721d6c87d2add30aa498fa70238adf9b6e17b49a96d2d3add10d3a2c9a54f218e7ff1b76a4208f33e409e0d6e762f3febaa9edd5ccf8909cc7b9a4473495dcfa8c8276408fe17d570f814afcff6d274d9d1edc8f201ec40a3aedbf14a7fdb1821c89c653a98baab3076b9c021462e546c5773f3685", &(0x7f0000000280)=""/171}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r1) bind$rds(0xffffffffffffffff, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000b00)={@remote, @local}, &(0x7f0000000b40)=0xc) getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000b80)={@initdev}, &(0x7f0000000bc0)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000d00)={'syztnl0\x00', &(0x7f0000000c80)={'ip6gre0\x00', 0x0, 0x29, 0xf, 0x2, 0x0, 0xb, @mcast1, @private1, 0x8, 0x7800, 0x8, 0x9}}) 2.6211119s ago: executing program 4 (id=13746): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000de803000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 2.567006697s ago: executing program 1 (id=13747): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e001"], 0x190) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x13}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x31, 0x0, 0x0) close(0x3) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000080)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x140f, 0x1, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8d0}, 0x40810) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {0x0, 0x3}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x7, 0x2, 0x7f}}]}, 0x38}}, 0x4048010) 2.530853524s ago: executing program 0 (id=13748): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x1, @ANYBLOB], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000880)=ANY=[@ANYBLOB="c34e19a7d49ee681380d84a8423f4345af969769b8270dc8a524c3d094d8231af6c3846a46ed1c276ed13e3d924da17c02424761b42ab2bf9d8569e577d63a558d15c5a4a89a9514a6ed686e5c59b1e6bb0e2a3ab458938ff079e9b218e1e58a2d978686612e5905152b66e53c3c55a3cbcef55130c291df076bd5cdd997dc4a99cb5042bc3e4b1abdc8c421650c1691af406a5a2eed14292fa006c412d51caa2ab0506898de53569c90fc1ef4c4e6ba0f4d19e43bc64180ce34efd920a0c386ae14602d9cb6d8d87bdb6ab5b1df8a0bcb842184ab6415aa63e1b4db5ddae88b480e6383cd370b0e89"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044000}, 0x8094) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}}, &(0x7f0000000000)=0x9c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@delchain={0x124, 0x65, 0x300, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0xd}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x40}}, @filter_kind_options=@f_basic={{0xa}, {0xec, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0xf}, {{0x4, 0x0, 0x1}, {0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x4}]}, @TCA_BASIC_EMATCHES={0xc8, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0xc4, 0x2, 0x0, 0x1, [@TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x9, 0x4, 0x600}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_LVALUE={0x12, 0x2, [@TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_VAR="6762ab8b52fbbf7a5d28"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x4]}]}}, @TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x7}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}]}}, @TCF_EM_META={0x1c, 0x2, 0x0, 0x0, {{0x8, 0x4, 0x6}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x4, 0x9, 0x2188e8564924fac6}, {0x8, 0x5}}}, @TCA_EM_META_RVALUE={0x4}]}}, @TCF_EM_META={0x64, 0x1, 0x0, 0x0, {{0x8001, 0x4, 0x5}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_LVALUE={0x15, 0x2, [@TCF_META_TYPE_VAR="3b9aa19a5093e4d1c834", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_VAR="ae2e", @TCF_META_TYPE_VAR='\a']}, @TCA_EM_META_RVALUE={0x15, 0x3, [@TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="c5a29d0983a38c474fe4", @TCF_META_TYPE_VAR="b3690e"]}, @TCA_EM_META_LVALUE={0x21, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_VAR="0027170019a81c1e78d4", @TCF_META_TYPE_VAR="ccbcd1cc4e2b", @TCF_META_TYPE_VAR="92", @TCF_META_TYPE_INT, @TCF_META_TYPE_INT=0x1]}]}}]}]}]}}]}, 0x124}, 0x1, 0x0, 0x0, 0x40008c5}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 2.259630983s ago: executing program 0 (id=13749): syz_emit_ethernet(0x3e, &(0x7f0000000700)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr=0xe0000000}}}}}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x0, 0x1, 0xff, 0x0, 0xc}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_netfilter(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x10, 0xa, 0x101, 0x0, 0x0, {}, [@generic="c9"]}, 0x18}}, 0x0) 2.252324384s ago: executing program 4 (id=13750): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x23, 0x3, 0x1, 0x0, 0xffffffffffffffff, 0x37}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000100), 0x0}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x100}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000010c0)=@newtaction={0xd8, 0x30, 0xffff, 0x0, 0x0, {}, [{0xc4, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0xd6}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x54, 0x2, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18}, @TCA_GACT_PROB={0xc, 0x3, {0x1, 0xec6}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xd8}}, 0x0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x10, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="00000000000000b703000000000000000000008c000000b7000073f10000000000b30000000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r8 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800c0001006d6163766c616e000c00028028a37765730d2f91"], 0x3c}}, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff00000028711091000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) r9 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r9, &(0x7f00000017c0)=[{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="ed60af8a59c5", 0x6}], 0x1, 0x0, 0x0, 0x20000081}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20088800}], 0x2, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r4, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}}, 0x0) r10 = socket$kcm(0x10, 0x100000000002, 0x4) (async, rerun: 64) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54}, 0x42) (async, rerun: 64) r12 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x0, 0x300, 0x80, 0x0, 0x5}}) (async) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000040)=r11, 0x4) sendmsg$kcm(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 2.138279458s ago: executing program 2 (id=13751): r0 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) write$6lowpan_control(r0, &(0x7f00000002c0)='connect aa:aa:aa:aa:aa:10 2', 0x1b) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind(r1, &(0x7f0000000180)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e20, 0x5, @empty, 0x8fc7}}, 0x80) 2.136843808s ago: executing program 3 (id=13752): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) close(0x3) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r2) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d03e8000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.997957428s ago: executing program 4 (id=13753): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$XDP_UMEM_REG(r2, 0x118, 0x4, 0x0, 0x0) (async) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r3, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100", @ANYRES32=r3], 0x38}}, 0x0) (async) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400004000fcffffff000003e4", @ANYRES32=r3, @ANYBLOB="0000000002000000200012800800010073697400140002800800140001"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001080)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x0, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.990626475s ago: executing program 0 (id=13754): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000040)=0x7, 0x4) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x67) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x3, &(0x7f0000000180)=[{0x1d, 0x5, 0x4a, 0x4}, {0x3, 0x81, 0xd, 0x403}, {0x8, 0x0, 0x6, 0x1}]}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103000000001c0000000a"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r2, &(0x7f0000000500)=[{&(0x7f0000000540)=""/4112, 0x1010}], 0x1) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), r2) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r6, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x8, 0x40}}]}, 0x38}, 0x1, 0xf2ff, 0x0, 0x4000}, 0x44080) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x24, r3, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r6}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) epoll_create1(0x0) 1.990379051s ago: executing program 2 (id=13755): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xc], 0x0, [0x8, 0x6, 0x3c, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x20000217, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x800, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100800000000000000005000000180001801400020074756e6c3000000000000000000000000500070005"], 0x34}}, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) (async) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), r2) sendmsg$GTP_CMD_ECHOREQ(r3, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, r5, 0x400, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x2b}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}]}, 0x40}, 0x1, 0x0, 0x0, 0x44040}, 0x4880) 1.69351245s ago: executing program 2 (id=13756): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], 0x50) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) (async) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x5460, 0x0) (async) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x5460, 0x0) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) (async) connect$pppoe(r4, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c00012a000200000000008f68db4976ca9643000000806304fa"], 0x1c}, 0x1, 0x0, 0x0, 0x2044010}, 0x8000) socket(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r7, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500", @ANYRES8=r5], 0x7c}}, 0x24000004) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) (async) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x448b1}, 0x40084) (async) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRESHEX=r1, @ANYRESOCT=r1, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x448b1}, 0x40084) connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x3, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) (async) connect$pppoe(r4, &(0x7f0000000240)={0x18, 0x0, {0x3, @broadcast, 'veth1_to_batadv\x00'}}, 0x1e) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r8, 0x1, 0xe, &(0x7f0000f59ffc)=0xc, 0x4) (async) setsockopt$sock_int(r8, 0x1, 0xe, &(0x7f0000f59ffc)=0xc, 0x4) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b1300000000000020001280faff00006202000f00650000100002800c0020000000000000000000"], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="c23a667e18002580001481fd9835f67c040000003000000800aaf24de42b5533746ab43c4a0500"], 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 0s ago: executing program 3 (id=13757): socket(0x10, 0x80002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff00c}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f903", 0x11}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x90) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r5) sendmsg$IEEE802154_LLSEC_SETPARAMS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x28, r6, 0x1, 0x2, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xff}]}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x2000c0c0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) kernel console output (not intermixed with test programs): msg+0x10/0x10 [ 841.013891][T15512] ____sys_sendmsg+0x9b9/0xa20 [ 841.013928][T15512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.013959][T15512] ? lock_release+0x4b/0x3c0 [ 841.013990][T15512] ? import_iovec+0x73/0xa0 [ 841.014018][T15512] ___sys_sendmsg+0x2a5/0x360 [ 841.014045][T15512] ? rcu_is_watching+0x15/0xb0 [ 841.014065][T15512] ? get_pid_task+0x20/0x1f0 [ 841.014084][T15512] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.014115][T15512] ? rcu_is_watching+0x15/0xb0 [ 841.014149][T15512] ? __fget_files+0x2a/0x420 [ 841.014171][T15512] ? __fget_files+0x3a2/0x420 [ 841.014197][T15512] __x64_sys_sendmsg+0x1b1/0x290 [ 841.014227][T15512] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.014264][T15512] ? rcu_is_watching+0x15/0xb0 [ 841.014285][T15512] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.014305][T15512] do_syscall_64+0x174/0x580 [ 841.014331][T15512] ? trace_irq_disable+0x3b/0x140 [ 841.014358][T15512] ? clear_bhb_loop+0x40/0x90 [ 841.014380][T15512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.014398][T15512] RIP: 0033:0x7f7a33f9ce59 [ 841.014417][T15512] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 841.014434][T15512] RSP: 002b:00007f7a34ef0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.014457][T15512] RAX: ffffffffffffffda RBX: 00007f7a34215fa0 RCX: 00007f7a33f9ce59 [ 841.014472][T15512] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 841.014513][T15512] RBP: 00007f7a34ef0090 R08: 0000000000000000 R09: 0000000000000000 [ 841.014526][T15512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 841.014539][T15512] R13: 00007f7a34216038 R14: 00007f7a34215fa0 R15: 00007fff858de698 [ 841.014563][T15512] [ 841.029554][T15022] veth1_vlan: entered promiscuous mode [ 841.312744][ T5730] net_ratelimit: 9 callbacks suppressed [ 841.312799][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 841.477746][T15022] veth0_macvtap: entered promiscuous mode [ 841.493581][T15022] veth1_macvtap: entered promiscuous mode [ 841.528834][T15022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 841.550821][T15022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 841.572982][T10850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.586089][T10850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.600500][T10850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.613573][T10850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 841.747584][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.774076][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.807118][T10853] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 841.815559][T10853] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 841.985429][T15555] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 842.011180][T15547] syzkaller0: entered promiscuous mode [ 842.027016][T15547] syzkaller0: entered allmulticast mode [ 842.141667][T15564] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 842.172474][T15564] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 842.186252][T15564] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 842.199363][T15567] netlink: 'syz.0.12593': attribute type 5 has an invalid length. [ 842.218852][T15568] IPv6: NLM_F_CREATE should be specified when creating new route [ 842.233552][T15568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 842.240875][T15568] IPv6: NLM_F_CREATE should be set when creating new route [ 842.278982][T15572] xt_CT: You must specify a L4 protocol and not use inversions on it [ 842.319956][T15561] xfrm0 speed is unknown, defaulting to 1000 [ 842.339973][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 842.397374][T15578] netlink: 'syz.2.12598': attribute type 11 has an invalid length. [ 842.448242][T15583] x_tables: duplicate underflow at hook 3 [ 842.750046][T15611] netlink: 'syz.2.12603': attribute type 2 has an invalid length. [ 842.782365][T15611] netlink: 'syz.2.12603': attribute type 2 has an invalid length. [ 842.887682][T15618] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 842.910780][T15618] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 842.923741][T15618] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 843.254259][T15641] netlink: 'syz.0.12617': attribute type 1 has an invalid length. [ 843.378516][ T6345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.453116][T15657] netlink: 'syz.1.12621': attribute type 1 has an invalid length. [ 843.462181][T15660] IPVS: set_ctl: invalid protocol: 12 172.30.0.5:20001 [ 843.618342][ T5193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 843.701597][T15667] openvswitch: netlink: Missing valid actions attribute. [ 843.721816][T15667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 844.064839][T15704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.128674][T15704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.150165][T15710] syzkaller0: entered promiscuous mode [ 844.155786][T15710] syzkaller0: entered allmulticast mode [ 844.168932][T15704] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 844.192598][T15713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.301724][T15713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.339265][T15713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 844.745028][T15754] syzkaller0: entered promiscuous mode [ 844.758541][T15754] syzkaller0: entered allmulticast mode [ 844.837590][T15760] syzkaller0: entered promiscuous mode [ 844.849931][T15760] syzkaller0: entered allmulticast mode [ 844.865938][T15760] tipc: Enabled bearer , priority 0 [ 844.885014][T15759] tipc: Resetting bearer [ 844.914196][T15759] tipc: Disabling bearer [ 844.942704][T15767] __nla_validate_parse: 24 callbacks suppressed [ 844.942723][T15767] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12653'. [ 844.983412][T15767] netlink: 'syz.1.12653': attribute type 1 has an invalid length. [ 844.996348][T15770] netlink: 'syz.2.12654': attribute type 1 has an invalid length. [ 845.006729][T15767] netlink: 228 bytes leftover after parsing attributes in process `syz.1.12653'. [ 845.021329][T15767] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12653'. [ 845.041844][T15770] bond2: option mode: invalid value (10) [ 845.063141][T15770] bond2 (unregistering): Released all slaves [ 845.101626][T15775] netlink: 'syz.2.12654': attribute type 10 has an invalid length. [ 845.135005][T15775] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12654'. [ 845.146519][T15781] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 845.159667][T15781] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 845.171009][T15781] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 845.188685][T15775] dummy0: entered promiscuous mode [ 845.216303][T15784] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 845.265030][T15786] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12659'. [ 845.289085][T15786] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12659'. [ 845.311902][T15789] netlink: 21 bytes leftover after parsing attributes in process `syz.4.12661'. [ 845.322058][T15786] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12659'. [ 845.334620][T15790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.347607][T15790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.362959][T15790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 845.520589][T15800] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12664'. [ 845.539205][T15797] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12664'. [ 845.722764][T15813] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 845.747893][T15813] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 845.759239][T15813] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 845.776012][T15820] netlink: 'syz.1.12671': attribute type 10 has an invalid length. [ 846.081425][T15838] syzkaller0: entered promiscuous mode [ 846.106135][T15838] syzkaller0: entered allmulticast mode [ 846.409540][T15851] veth1_to_bond: entered allmulticast mode [ 846.509586][ T5730] net_ratelimit: 33 callbacks suppressed [ 846.509607][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.663077][ T5194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 846.694006][T15846] veth1_to_bond: left allmulticast mode [ 846.834608][T15874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.850674][T15874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 846.881348][T15874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 847.327849][T15912] geneve2: entered allmulticast mode [ 847.415950][T15919] xt_TCPMSS: Only works on TCP SYN packets [ 847.541253][ T6345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.561776][T15927] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.606130][T15934] netlink: 'syz.0.12706': attribute type 24 has an invalid length. [ 847.673149][T15927] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.788357][T15927] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.843723][ T5194] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.855047][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 847.877039][T15927] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 847.967436][T15956] netlink: 'syz.3.12713': attribute type 1 has an invalid length. [ 848.027445][T14883] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.059787][ T9426] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.086628][ T9426] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.134777][ T9426] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.421718][ T5803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.548304][T15994] xt_recent: Unsupported userspace flags (000000b1) [ 848.579851][ T6345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 848.769813][T16011] openvswitch: netlink: Tunnel attr 0 has unexpected len 3 expected 8 [ 848.790165][T16017] tipc: Enabling of bearer rejected, failed to enable media [ 848.824432][T16017] smc: net device team0 applied user defined pnetid SYZ2 [ 849.034592][T16039] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 849.050544][T16037] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 849.113620][T16046] syzkaller0: entered promiscuous mode [ 849.123314][T16046] syzkaller0: entered allmulticast mode [ 849.158687][T16046] tipc: Enabled bearer , priority 0 [ 849.171104][T16045] tipc: Resetting bearer [ 849.190818][T16045] tipc: Disabling bearer [ 849.354937][T16069] netlink: 'syz.1.12750': attribute type 21 has an invalid length. [ 849.392146][ T12] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.405197][T16069] netlink: 'syz.1.12750': attribute type 21 has an invalid length. [ 849.423471][ T12] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.437510][ T12] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.449769][ T12] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.491154][T16079] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 849.498462][T16079] IPv6: NLM_F_CREATE should be set when creating new route [ 849.505757][T16079] IPv6: NLM_F_CREATE should be set when creating new route [ 849.619794][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 849.724277][T16093] FAULT_INJECTION: forcing a failure. [ 849.724277][T16093] name failslab, interval 1, probability 0, space 0, times 0 [ 849.747286][T16093] CPU: 1 UID: 0 PID: 16093 Comm: syz.2.12759 Not tainted syzkaller #0 PREEMPT(full) [ 849.747315][T16093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 849.747327][T16093] Call Trace: [ 849.747335][T16093] [ 849.747344][T16093] dump_stack_lvl+0xe8/0x150 [ 849.747371][T16093] should_fail_ex+0x40c/0x560 [ 849.747395][T16093] should_failslab+0xa8/0x100 [ 849.747427][T16093] __kmalloc_noprof+0xe8/0x750 [ 849.747452][T16093] ? __x64_sys_sendmsg+0x1b1/0x290 [ 849.747482][T16093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.747502][T16093] ? ieee80211_register_hw+0x272e/0x4a50 [ 849.747533][T16093] ieee80211_register_hw+0x272e/0x4a50 [ 849.747562][T16093] ? ieee80211_register_hw+0x1aa1/0x4a50 [ 849.747590][T16093] ? ieee80211_register_hw+0x1aa1/0x4a50 [ 849.747617][T16093] ? ieee80211_register_hw+0x1ba1/0x4a50 [ 849.747646][T16093] ? ieee80211_register_hw+0x19a1/0x4a50 [ 849.747688][T16093] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 849.747718][T16093] ? __asan_memset+0x22/0x50 [ 849.747741][T16093] ? __hrtimer_setup+0x1b7/0x260 [ 849.747769][T16093] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 849.747800][T16093] mac80211_hwsim_new_radio+0x3238/0x5680 [ 849.747843][T16093] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 849.747871][T16093] ? rcu_is_watching+0x15/0xb0 [ 849.747893][T16093] ? trace_kmalloc+0x2a/0xf0 [ 849.747922][T16093] hwsim_new_radio_nl+0xd8b/0xf90 [ 849.747955][T16093] genl_family_rcv_msg_doit+0x233/0x340 [ 849.747985][T16093] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 849.748025][T16093] ? bpf_lsm_capable+0x9/0x20 [ 849.748044][T16093] ? security_capable+0x7e/0x2c0 [ 849.748079][T16093] genl_rcv_msg+0x614/0x7a0 [ 849.748107][T16093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 849.748129][T16093] ? ref_tracker_free+0x689/0x830 [ 849.748152][T16093] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 849.748179][T16093] ? __pfx_ref_tracker_free+0x10/0x10 [ 849.748209][T16093] netlink_rcv_skb+0x226/0x4a0 [ 849.748240][T16093] ? __pfx_genl_rcv_msg+0x10/0x10 [ 849.748264][T16093] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 849.748302][T16093] ? down_read+0x2be/0x330 [ 849.748334][T16093] genl_rcv+0x28/0x40 [ 849.748355][T16093] netlink_unicast+0x7bb/0x940 [ 849.748389][T16093] netlink_sendmsg+0x813/0xb40 [ 849.748425][T16093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.748458][T16093] ? aa_sock_msg_perm+0xf1/0x1b0 [ 849.748478][T16093] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 849.748504][T16093] ? __pfx_netlink_sendmsg+0x10/0x10 [ 849.748536][T16093] ____sys_sendmsg+0x9b9/0xa20 [ 849.748572][T16093] ? __pfx_____sys_sendmsg+0x10/0x10 [ 849.748602][T16093] ? lock_release+0x4b/0x3c0 [ 849.748634][T16093] ? import_iovec+0x73/0xa0 [ 849.748663][T16093] ___sys_sendmsg+0x2a5/0x360 [ 849.748692][T16093] ? rcu_is_watching+0x15/0xb0 [ 849.748712][T16093] ? get_pid_task+0x20/0x1f0 [ 849.748733][T16093] ? __pfx____sys_sendmsg+0x10/0x10 [ 849.748765][T16093] ? rcu_is_watching+0x15/0xb0 [ 849.748802][T16093] ? __fget_files+0x2a/0x420 [ 849.748823][T16093] ? __fget_files+0x3a2/0x420 [ 849.748852][T16093] __x64_sys_sendmsg+0x1b1/0x290 [ 849.748884][T16093] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 849.748921][T16093] ? rcu_is_watching+0x15/0xb0 [ 849.748944][T16093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.748967][T16093] do_syscall_64+0x174/0x580 [ 849.748994][T16093] ? trace_irq_disable+0x3b/0x140 [ 849.749029][T16093] ? clear_bhb_loop+0x40/0x90 [ 849.749053][T16093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 849.749074][T16093] RIP: 0033:0x7f442099ce59 [ 849.749093][T16093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 849.749113][T16093] RSP: 002b:00007f4421838028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 849.749136][T16093] RAX: ffffffffffffffda RBX: 00007f4420c15fa0 RCX: 00007f442099ce59 [ 849.749152][T16093] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 849.749166][T16093] RBP: 00007f4421838090 R08: 0000000000000000 R09: 0000000000000000 [ 849.749179][T16093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 849.749192][T16093] R13: 00007f4420c16038 R14: 00007f4420c15fa0 R15: 00007ffc9ff27848 [ 849.749218][T16093] [ 850.190081][T16098] ip6gre0: Master is either lo or non-ether device [ 850.226522][T16098] __nla_validate_parse: 39 callbacks suppressed [ 850.226541][T16098] netlink: 192 bytes leftover after parsing attributes in process `syz.3.12760'. [ 850.345031][T16104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 850.353996][T16104] bridge0: port 3(bond1) entered blocking state [ 850.362240][T16104] bridge0: port 3(bond1) entered disabled state [ 850.370335][T16104] bond1: entered allmulticast mode [ 850.377245][T16104] bond1: entered promiscuous mode [ 850.383511][T16104] bridge0: port 3(bond1) entered blocking state [ 850.389908][T16104] bridge0: port 3(bond1) entered forwarding state [ 850.566562][T16122] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 850.655680][T10851] bridge0: port 3(bond1) entered disabled state [ 850.848953][T16146] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12774'. [ 850.887884][T16145] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12774'. [ 850.914741][T16148] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12775'. [ 850.920193][T16145] netlink: 'syz.4.12774': attribute type 7 has an invalid length. [ 850.958709][T16152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 850.967695][T16146] netlink: 'syz.4.12774': attribute type 7 has an invalid length. [ 850.979806][T16148] 0·: renamed from hsr0 (while UP) [ 850.990553][T16148] 0·: entered allmulticast mode [ 850.991496][T16146] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12774'. [ 851.006274][T16148] hsr_slave_0: entered allmulticast mode [ 851.012929][T16152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.025643][T16145] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12774'. [ 851.040130][T16152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 851.064260][T16153] syzkaller0: entered promiscuous mode [ 851.070480][T16153] syzkaller0: entered allmulticast mode [ 851.092838][T16153] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12776'. [ 851.199180][T16159] ipt_ECN: cannot use operation on non-tcp rule [ 851.319359][T16171] xt_l2tp: missing protocol rule (udp|l2tpip) [ 851.644653][T16200] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.12789'. [ 851.659250][T16197] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 851.670468][ T5193] IPVS: starting estimator thread 0... [ 851.683616][T16204] netlink: 'syz.3.12790': attribute type 62 has an invalid length. [ 851.712644][T16206] netlink: 'syz.3.12790': attribute type 62 has an invalid length. [ 851.768362][T16203] IPVS: using max 40 ests per chain, 96000 per kthread [ 851.783845][ T5730] net_ratelimit: 5 callbacks suppressed [ 851.783864][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 851.817759][T16209] xt_TCPMSS: Only works on TCP SYN packets [ 851.856158][T16209] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12792'. [ 851.914646][ T9426] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 851.924563][ T9426] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 851.940091][ T5730] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 851.951642][T16215] geneve3: entered allmulticast mode [ 851.989440][ T5284] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.009602][T16214] syzkaller1: entered promiscuous mode [ 852.020256][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.028422][T16214] syzkaller1: entered allmulticast mode [ 852.143732][T16236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.150553][T16227] syzkaller1: entered promiscuous mode [ 852.188438][ T5730] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 852.202546][T16227] syzkaller1: entered allmulticast mode [ 852.212571][T16236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.226772][T16236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 852.243441][T16231] netlink: 'syz.0.12798': attribute type 1 has an invalid length. [ 852.265926][T16231] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12798'. [ 852.277432][T16231] netlink: 'syz.0.12798': attribute type 1 has an invalid length. [ 852.498656][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.659099][ T5730] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 852.715962][T16278] ip6gretap0: default FDB implementation only supports local addresses [ 852.774255][T16285] veth0_to_bond: entered allmulticast mode [ 852.817465][T16288] openvswitch: netlink: Flow key attr not present in new flow. [ 852.826180][ T6345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 852.966069][T16301] netlink: 'syz.2.12820': attribute type 83 has an invalid length. [ 852.979675][T10853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 853.115308][T16321] openvswitch: netlink: Unexpected mask (mask=200840, allowed=10048) [ 853.142565][T16321] sock: sock_set_timeout: `syz.2.12824' (pid 16321) tries to set negative timeout [ 853.532485][T16352] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 853.606253][T16354] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.613805][T16354] bridge0: port 1(bridge_slave_0) entered disabled state [ 853.663317][T16357] macsec1: entered promiscuous mode [ 853.864723][ T5730] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 854.055498][T16394] xt_policy: output policy not valid in PREROUTING and INPUT [ 854.222537][T16392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 854.262585][T16407] FAULT_INJECTION: forcing a failure. [ 854.262585][T16407] name failslab, interval 1, probability 0, space 0, times 0 [ 854.277766][T16407] CPU: 1 UID: 0 PID: 16407 Comm: syz.2.12849 Not tainted syzkaller #0 PREEMPT(full) [ 854.277795][T16407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 854.277807][T16407] Call Trace: [ 854.277815][T16407] [ 854.277823][T16407] dump_stack_lvl+0xe8/0x150 [ 854.277850][T16407] should_fail_ex+0x40c/0x560 [ 854.277876][T16407] should_failslab+0xa8/0x100 [ 854.277910][T16407] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 854.277938][T16407] ? alloc_unbound_pwq+0xaa6/0xe00 [ 854.277965][T16407] alloc_unbound_pwq+0xaa6/0xe00 [ 854.278005][T16407] apply_wqattrs_prepare+0x389/0xdc0 [ 854.278030][T16407] ? pcpu_alloc_noprof+0x100f/0x1900 [ 854.278068][T16407] __alloc_workqueue+0x10bf/0x1f70 [ 854.278096][T16407] alloc_workqueue_noprof+0xe3/0x210 [ 854.278118][T16407] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 854.278150][T16407] ? __kmalloc_noprof+0x379/0x750 [ 854.278180][T16407] ieee80211_register_hw+0x3611/0x4a50 [ 854.278209][T16407] ? ieee80211_register_hw+0x1aa1/0x4a50 [ 854.278236][T16407] ? ieee80211_register_hw+0x1aa1/0x4a50 [ 854.278261][T16407] ? ieee80211_register_hw+0x1ba1/0x4a50 [ 854.278289][T16407] ? ieee80211_register_hw+0x19a1/0x4a50 [ 854.278340][T16407] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 854.278367][T16407] ? __asan_memset+0x22/0x50 [ 854.278388][T16407] ? __hrtimer_setup+0x1b7/0x260 [ 854.278410][T16407] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 854.278438][T16407] mac80211_hwsim_new_radio+0x3238/0x5680 [ 854.278478][T16407] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 854.278504][T16407] ? rcu_is_watching+0x15/0xb0 [ 854.278524][T16407] ? trace_kmalloc+0x2a/0xf0 [ 854.278549][T16407] hwsim_new_radio_nl+0xd8b/0xf90 [ 854.278581][T16407] genl_family_rcv_msg_doit+0x233/0x340 [ 854.278608][T16407] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 854.278637][T16407] ? bpf_lsm_capable+0x9/0x20 [ 854.278654][T16407] ? security_capable+0x7e/0x2c0 [ 854.278685][T16407] genl_rcv_msg+0x614/0x7a0 [ 854.278708][T16407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 854.278729][T16407] ? ref_tracker_free+0x689/0x830 [ 854.278749][T16407] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 854.278773][T16407] ? __pfx_ref_tracker_free+0x10/0x10 [ 854.278798][T16407] netlink_rcv_skb+0x226/0x4a0 [ 854.278826][T16407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 854.278847][T16407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 854.278882][T16407] ? down_read+0x2be/0x330 [ 854.278910][T16407] genl_rcv+0x28/0x40 [ 854.278930][T16407] netlink_unicast+0x7bb/0x940 [ 854.278960][T16407] netlink_sendmsg+0x813/0xb40 [ 854.279003][T16407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.279033][T16407] ? aa_sock_msg_perm+0xf1/0x1b0 [ 854.279053][T16407] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 854.279076][T16407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 854.279105][T16407] ____sys_sendmsg+0x9b9/0xa20 [ 854.279137][T16407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 854.279166][T16407] ? lock_release+0x4b/0x3c0 [ 854.279195][T16407] ? import_iovec+0x73/0xa0 [ 854.279221][T16407] ___sys_sendmsg+0x2a5/0x360 [ 854.279247][T16407] ? rcu_is_watching+0x15/0xb0 [ 854.279266][T16407] ? get_pid_task+0x20/0x1f0 [ 854.279284][T16407] ? __pfx____sys_sendmsg+0x10/0x10 [ 854.279313][T16407] ? rcu_is_watching+0x15/0xb0 [ 854.279346][T16407] ? __fget_files+0x2a/0x420 [ 854.279366][T16407] ? __fget_files+0x3a2/0x420 [ 854.279391][T16407] __x64_sys_sendmsg+0x1b1/0x290 [ 854.279420][T16407] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 854.279453][T16407] ? rcu_is_watching+0x15/0xb0 [ 854.279472][T16407] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.279492][T16407] do_syscall_64+0x174/0x580 [ 854.279517][T16407] ? trace_irq_disable+0x3b/0x140 [ 854.279542][T16407] ? clear_bhb_loop+0x40/0x90 [ 854.279563][T16407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.279581][T16407] RIP: 0033:0x7f442099ce59 [ 854.279598][T16407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.279615][T16407] RSP: 002b:00007f4421838028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 854.279635][T16407] RAX: ffffffffffffffda RBX: 00007f4420c15fa0 RCX: 00007f442099ce59 [ 854.279650][T16407] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 854.279663][T16407] RBP: 00007f4421838090 R08: 0000000000000000 R09: 0000000000000000 [ 854.279675][T16407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 854.279686][T16407] R13: 00007f4420c16038 R14: 00007f4420c15fa0 R15: 00007ffc9ff27848 [ 854.279709][T16407] [ 854.818284][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 855.268351][ T6345] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 855.336255][T16451] __nla_validate_parse: 11 callbacks suppressed [ 855.336273][T16451] netlink: 248 bytes leftover after parsing attributes in process `syz.2.12862'. [ 855.491581][T16465] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12862'. [ 855.563854][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12869'. [ 855.574039][T16472] netlink: 256 bytes leftover after parsing attributes in process `syz.1.12869'. [ 855.671239][T16475] 8021q: adding VLAN 0 to HW filter on device bond2 [ 855.694294][T16481] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12871'. [ 855.722781][T16475] bond0: (slave bond2): Enslaving as an active interface with an up link [ 855.734479][T16481] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12871'. [ 855.746144][T16476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12871'. [ 855.826879][T16482] 8021q: adding VLAN 0 to HW filter on device bond3 [ 855.836294][T16482] bond0: (slave bond3): Enslaving as an active interface with an up link [ 855.852794][T16489] netlink: 'syz.3.12874': attribute type 1 has an invalid length. [ 855.909883][ T6340] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 855.970225][T16509] syzkaller1: entered promiscuous mode [ 856.001306][T16509] syzkaller1: entered allmulticast mode [ 856.042740][T16516] batadv1: entered allmulticast mode [ 856.099315][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 858.821588][T16495] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 858.933610][T16535] netlink: 32 bytes leftover after parsing attributes in process `syz.4.12886'. [ 858.985272][T16540] netlink: 112 bytes leftover after parsing attributes in process `syz.2.12888'. [ 859.024805][T16549] netlink: 'syz.4.12890': attribute type 13 has an invalid length. [ 859.033320][T16549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12890'. [ 859.049452][T15457] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.049619][T16549] netlink: 'syz.4.12890': attribute type 13 has an invalid length. [ 859.069137][T15457] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.088148][T15457] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.106275][T15457] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 859.225844][T16565] net_ratelimit: 7 callbacks suppressed [ 859.225863][T16565] openvswitch: netlink: IPv4 tunnel dst address is zero [ 859.398448][T16583] syzkaller0: entered promiscuous mode [ 859.404155][T16583] syzkaller0: entered allmulticast mode [ 860.069547][T16593] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 860.098448][ T5193] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 860.638175][ T5193] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 861.975061][T16540] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 862.037802][T16601] openvswitch: netlink: IPv4 tun info is not correct [ 862.207493][T16617] __nla_validate_parse: 4 callbacks suppressed [ 862.207516][T16617] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12911'. [ 862.269061][T16619] netlink: 'syz.1.12913': attribute type 29 has an invalid length. [ 862.308591][T16624] syzkaller0: entered promiscuous mode [ 862.324749][T16625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12911'. [ 862.334598][T16624] syzkaller0: entered allmulticast mode [ 862.365317][T16617] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12911'. [ 862.401786][T16624] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12914'. [ 862.428828][T16634] netlink: 'syz.0.12917': attribute type 1 has an invalid length. [ 862.433919][T16629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12915'. [ 862.446805][T16624] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 862.455049][T16634] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 862.466330][T16629] syzkaller1: entered promiscuous mode [ 862.485526][T16629] syzkaller1: entered allmulticast mode [ 862.655275][T16652] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12922'. [ 862.746564][T16654] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12921'. [ 862.786817][T16654] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12921'. [ 862.814989][T16652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12922'. [ 862.934738][T16675] ipt_rpfilter: unknown options [ 863.086809][T16681] syzkaller0: entered promiscuous mode [ 863.122770][T16681] syzkaller0: entered allmulticast mode [ 863.179704][T16688] netlink: 'syz.3.12930': attribute type 1 has an invalid length. [ 863.209606][T16688] openvswitch: netlink: Invalid VLAN frame [ 863.262004][T16688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 863.307844][T16696] syzkaller0: entered promiscuous mode [ 863.314399][T16696] syzkaller0: entered allmulticast mode [ 863.562485][T16710] syzkaller0: entered promiscuous mode [ 863.581527][T16710] syzkaller0: entered allmulticast mode [ 863.602091][T16710] x_tables: duplicate underflow at hook 3 [ 863.633326][T16723] netlink: 'syz.3.12939': attribute type 1 has an invalid length. [ 863.730173][T16723] 8021q: adding VLAN 0 to HW filter on device bond4 [ 863.807229][T16723] bond4: (slave veth0_to_bond): making interface the new active one [ 863.842418][T16723] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 863.859711][T16723] netlink: 'syz.3.12939': attribute type 1 has an invalid length. [ 863.873084][T16736] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 863.898127][T16736] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 863.928832][T16743] netlink: 'syz.3.12944': attribute type 2 has an invalid length. [ 863.956682][T16746] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 863.990786][T16742] netlink: 'syz.1.12942': attribute type 268 has an invalid length. [ 864.130945][T16760] netlink: 72 bytes leftover after parsing attributes in process `syz.3.12948'. [ 864.217381][T16765] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 864.231733][T16765] syzkaller1: Refused to change device type [ 864.418109][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.460064][T16773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.475673][T16773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.492639][T16773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 864.560481][T16775] netlink: 'syz.1.12954': attribute type 1 has an invalid length. [ 864.580167][T16775] 8021q: adding VLAN 0 to HW filter on device bond3 [ 864.599907][T16775] bond3: (slave veth3): Enslaving as an active interface with a down link [ 864.615664][T16775] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 864.623104][T16775] bond3: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 864.833666][T16788] hsr_slave_1 (unregistering): left promiscuous mode [ 867.733023][T16780] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 867.851573][T16861] __nla_validate_parse: 7 callbacks suppressed [ 867.851593][T16861] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12978'. [ 867.899831][T16861] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12978'. [ 867.915406][T16864] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 868.183061][T16891] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12984'. [ 868.300172][T16893] netlink: 332 bytes leftover after parsing attributes in process `syz.3.12986'. [ 868.374966][T16897] syzkaller0: entered promiscuous mode [ 868.381532][T16897] syzkaller0: entered allmulticast mode [ 868.600821][T16902] syzkaller0: entered promiscuous mode [ 868.606762][T16902] syzkaller0: entered allmulticast mode [ 868.647032][T16906] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 868.656054][T16906] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 868.713867][T16909] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12991'. [ 868.723049][T16909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12991'. [ 868.742739][T16909] xt_TCPMSS: Only works on TCP SYN packets [ 868.756805][ T5193] IPVS: starting estimator thread 0... [ 868.868638][T16910] IPVS: using max 37 ests per chain, 88800 per kthread [ 868.899063][ C1] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 868.937481][T16927] netlink: 132 bytes leftover after parsing attributes in process `syz.2.12997'. [ 869.085565][T16935] syzkaller0: entered promiscuous mode [ 869.092407][T16935] syzkaller0: entered allmulticast mode [ 869.098567][T16934] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13000'. [ 869.098567][T16940] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13000'. [ 869.287677][T16936] syzkaller1: entered promiscuous mode [ 869.295543][T16936] syzkaller1: entered allmulticast mode [ 869.346485][T16940] xfrm1: entered promiscuous mode [ 869.354084][T16940] xfrm1: entered allmulticast mode [ 869.363833][T16946] tipc: Enabled bearer , priority 0 [ 869.426863][T16929] tipc: Resetting bearer [ 869.454073][T16929] tipc: Disabling bearer [ 869.572039][T16966] mac80211_hwsim hwsim125 ÿ: renamed from wlan1 [ 869.822891][T16993] netlink: 'syz.3.13014': attribute type 2 has an invalid length. [ 869.830909][T16993] netlink: 'syz.3.13014': attribute type 8 has an invalid length. [ 869.839546][T16993] netlink: 132 bytes leftover after parsing attributes in process `syz.3.13014'. [ 869.936218][T16998] netlink: 'syz.0.13015': attribute type 2 has an invalid length. [ 870.603031][T17049] lo: entered allmulticast mode [ 870.622005][T17049] tunl0: entered allmulticast mode [ 870.630236][T17049] gre0: entered allmulticast mode [ 870.658514][T17037] nbd3: detected capacity change from 0 to 63 [ 870.669395][T17049] gretap0: entered allmulticast mode [ 870.683890][T32244] block nbd3: Receive control failed (result -104) [ 870.685139][T14429] block nbd3: Receive control failed (result -32) [ 870.714222][T17049] erspan0: entered allmulticast mode [ 870.724769][T17049] ip_vti0: entered allmulticast mode [ 870.730746][T17053] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input12 [ 870.748971][T17049] ip6_vti0: entered allmulticast mode [ 870.766504][T17049] sit0: entered allmulticast mode [ 870.787858][T17049] ip6tnl0: entered allmulticast mode [ 870.823003][T17049] ip6gre0: entered allmulticast mode [ 870.831490][T17049] syz_tun: entered allmulticast mode [ 870.841844][T17057] 8021q: VLANs not supported on lo [ 870.930041][T17068] sctp: [Deprecated]: syz.4.13033 (pid 17068) Use of int in max_burst socket option. [ 870.930041][T17068] Use struct sctp_assoc_value instead [ 870.944566][T17070] netlink: 'syz.0.13034': attribute type 10 has an invalid length. [ 870.970608][T17068] sctp: [Deprecated]: syz.4.13033 (pid 17068) Use of int in max_burst socket option. [ 870.970608][T17068] Use struct sctp_assoc_value instead [ 871.769755][T17133] syzkaller1: entered promiscuous mode [ 871.783293][T17133] syzkaller1: entered allmulticast mode [ 871.916455][T17148] netlink: 'syz.2.13060': attribute type 1 has an invalid length. [ 871.964439][T17148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 871.999126][T17156] netlink: Unknown conntrack attr (0) [ 872.006334][T17156] xt_CT: You must specify a L4 protocol and not use inversions on it [ 872.016213][T17148] bond2: (slave gretap2): making interface the new active one [ 872.033679][T17148] bond2: (slave gretap2): Enslaving as an active interface with an up link [ 872.069636][T17159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.082835][T17159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.100741][T17159] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 872.230413][T17173] netlink: 'syz.1.13070': attribute type 61 has an invalid length. [ 872.398341][T17184] netlink: 'syz.4.13075': attribute type 13 has an invalid length. [ 872.406410][T17184] netlink: 'syz.4.13075': attribute type 58 has an invalid length. [ 872.423209][T17186] netlink: 'syz.1.13076': attribute type 2 has an invalid length. [ 872.684854][T17209] netlink: 'syz.4.13086': attribute type 1 has an invalid length. [ 872.715516][T17209] bond4: entered promiscuous mode [ 872.721232][T17209] 8021q: adding VLAN 0 to HW filter on device bond4 [ 872.757678][T17219] FAULT_INJECTION: forcing a failure. [ 872.757678][T17219] name failslab, interval 1, probability 0, space 0, times 0 [ 872.770907][T17219] CPU: 0 UID: 0 PID: 17219 Comm: syz.1.13087 Not tainted syzkaller #0 PREEMPT(full) [ 872.770936][T17219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 872.770950][T17219] Call Trace: [ 872.770958][T17219] [ 872.770967][T17219] dump_stack_lvl+0xe8/0x150 [ 872.770995][T17219] should_fail_ex+0x40c/0x560 [ 872.771021][T17219] should_failslab+0xa8/0x100 [ 872.771052][T17219] ? __kernfs_new_node+0xe6/0x980 [ 872.771081][T17219] kmem_cache_alloc_noprof+0x87/0x650 [ 872.771107][T17219] ? lock_release+0x4b/0x3c0 [ 872.771137][T17219] ? kernfs_root+0x1c/0x230 [ 872.771166][T17219] __kernfs_new_node+0xe6/0x980 [ 872.771192][T17219] ? up_write+0x19f/0x4a0 [ 872.771219][T17219] ? __pfx___kernfs_new_node+0x10/0x10 [ 872.771246][T17219] ? rcu_is_watching+0x15/0xb0 [ 872.771268][T17219] ? kernfs_root+0x1c/0x230 [ 872.771294][T17219] ? rcu_is_watching+0x15/0xb0 [ 872.771314][T17219] ? kernfs_root+0x1c/0x230 [ 872.771339][T17219] ? lock_release+0x4b/0x3c0 [ 872.771369][T17219] ? sysfs_create_dir_ns+0x12f/0x2a0 [ 872.771391][T17219] ? kernfs_root+0x1c/0x230 [ 872.771415][T17219] ? kernfs_root+0x1c/0x230 [ 872.771444][T17219] kernfs_new_node+0xea/0x140 [ 872.771475][T17219] __kernfs_create_file+0x4b/0x2e0 [ 872.771516][T17219] sysfs_add_file_mode_ns+0x237/0x300 [ 872.771544][T17219] sysfs_create_file_ns+0x12b/0x1b0 [ 872.771568][T17219] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 872.771592][T17219] ? __dev_fwnode+0x50/0x80 [ 872.771623][T17219] ? device_create_file+0xf4/0x1b0 [ 872.771646][T17219] device_add+0x432/0xb80 [ 872.771668][T17219] wiphy_register+0x1fc8/0x2ff0 [ 872.771703][T17219] ? __pfx_wiphy_register+0x10/0x10 [ 872.771726][T17219] ? __pfx_netdev_run_todo+0x10/0x10 [ 872.771745][T17219] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 872.771768][T17219] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 872.771797][T17219] ieee80211_register_hw+0x3d3d/0x4a50 [ 872.771832][T17219] ? ieee80211_register_hw+0x19a1/0x4a50 [ 872.771876][T17219] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 872.771905][T17219] ? __asan_memset+0x22/0x50 [ 872.771929][T17219] ? __hrtimer_setup+0x1b7/0x260 [ 872.771952][T17219] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 872.771983][T17219] mac80211_hwsim_new_radio+0x3238/0x5680 [ 872.772027][T17219] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 872.772055][T17219] ? rcu_is_watching+0x15/0xb0 [ 872.772076][T17219] ? trace_kmalloc+0x2a/0xf0 [ 872.772105][T17219] hwsim_new_radio_nl+0xd8b/0xf90 [ 872.772138][T17219] genl_family_rcv_msg_doit+0x233/0x340 [ 872.772168][T17219] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 872.772200][T17219] ? bpf_lsm_capable+0x9/0x20 [ 872.772218][T17219] ? security_capable+0x7e/0x2c0 [ 872.772252][T17219] genl_rcv_msg+0x614/0x7a0 [ 872.772279][T17219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.772301][T17219] ? ref_tracker_free+0x689/0x830 [ 872.772325][T17219] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 872.772352][T17219] ? __pfx_ref_tracker_free+0x10/0x10 [ 872.772380][T17219] netlink_rcv_skb+0x226/0x4a0 [ 872.772411][T17219] ? __pfx_genl_rcv_msg+0x10/0x10 [ 872.772435][T17219] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 872.772472][T17219] ? down_read+0x2be/0x330 [ 872.772504][T17219] genl_rcv+0x28/0x40 [ 872.772526][T17219] netlink_unicast+0x7bb/0x940 [ 872.772560][T17219] netlink_sendmsg+0x813/0xb40 [ 872.772606][T17219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.772639][T17219] ? aa_sock_msg_perm+0xf1/0x1b0 [ 872.772661][T17219] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 872.772687][T17219] ? __pfx_netlink_sendmsg+0x10/0x10 [ 872.772719][T17219] ____sys_sendmsg+0x9b9/0xa20 [ 872.772754][T17219] ? __pfx_____sys_sendmsg+0x10/0x10 [ 872.772786][T17219] ? lock_release+0x4b/0x3c0 [ 872.772818][T17219] ? import_iovec+0x73/0xa0 [ 872.772847][T17219] ___sys_sendmsg+0x2a5/0x360 [ 872.772875][T17219] ? rcu_is_watching+0x15/0xb0 [ 872.772894][T17219] ? get_pid_task+0x20/0x1f0 [ 872.772914][T17219] ? __pfx____sys_sendmsg+0x10/0x10 [ 872.772947][T17219] ? rcu_is_watching+0x15/0xb0 [ 872.772984][T17219] ? __fget_files+0x2a/0x420 [ 872.773007][T17219] ? __fget_files+0x3a2/0x420 [ 872.773036][T17219] __x64_sys_sendmsg+0x1b1/0x290 [ 872.773068][T17219] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 872.773106][T17219] ? rcu_is_watching+0x15/0xb0 [ 872.773128][T17219] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.773151][T17219] do_syscall_64+0x174/0x580 [ 872.773177][T17219] ? trace_irq_disable+0x3b/0x140 [ 872.773205][T17219] ? clear_bhb_loop+0x40/0x90 [ 872.773229][T17219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 872.773249][T17219] RIP: 0033:0x7f54ccd9ce59 [ 872.773268][T17219] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 872.773287][T17219] RSP: 002b:00007f54cdcfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 872.773309][T17219] RAX: ffffffffffffffda RBX: 00007f54cd015fa0 RCX: 00007f54ccd9ce59 [ 872.773324][T17219] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 872.773338][T17219] RBP: 00007f54cdcfc090 R08: 0000000000000000 R09: 0000000000000000 [ 872.773351][T17219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 872.773363][T17219] R13: 00007f54cd016038 R14: 00007f54cd015fa0 R15: 00007ffc955cb628 [ 872.773388][T17219] [ 872.775707][T17209] bond4: entered allmulticast mode [ 873.029339][T17224] __nla_validate_parse: 13 callbacks suppressed [ 873.029421][T17224] netlink: 5 bytes leftover after parsing attributes in process `syz.1.13088'. [ 873.339630][T17221] bond4: (slave bridge2): making interface the new active one [ 873.347228][T17221] bridge2: entered promiscuous mode [ 873.363604][T17221] bridge2: entered allmulticast mode [ 873.370535][T17221] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 873.404306][T17229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13089'. [ 873.441927][T17224] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13088'. [ 873.451348][T17232] bond2 (unregistering): Released all slaves [ 873.706066][T17258] netlink: 212344 bytes leftover after parsing attributes in process `syz.1.13095'. [ 873.812128][T17269] tipc: Started in network mode [ 873.817216][T17269] tipc: Node identity ba7b98280665, cluster identity 4711 [ 873.826164][T17269] tipc: Enabled bearer , priority 0 [ 873.872397][T17269] syzkaller0: entered promiscuous mode [ 873.878225][T17269] syzkaller0: entered allmulticast mode [ 873.884560][T17269] tipc: Resetting bearer [ 873.978637][T17281] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13102'. [ 873.989840][T17281] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13102'. [ 874.004295][T17281] gretap0: entered promiscuous mode [ 874.011562][T17281] gretap0: left promiscuous mode [ 874.121881][T17293] atomic_op ffff888068e75198 conn xmit_atomic 0000000000000000 [ 874.285750][T17307] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13112'. [ 874.334510][T17320] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13113'. [ 874.382512][T17322] smc: net device macvlan1 applied user defined pnetid SYZ0 [ 874.397527][T17324] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13117'. [ 874.416625][T17324] FAULT_INJECTION: forcing a failure. [ 874.416625][T17324] name failslab, interval 1, probability 0, space 0, times 0 [ 874.431588][T17324] CPU: 0 UID: 0 PID: 17324 Comm: syz.1.13117 Not tainted syzkaller #0 PREEMPT(full) [ 874.431616][T17324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 874.431629][T17324] Call Trace: [ 874.431637][T17324] [ 874.431646][T17324] dump_stack_lvl+0xe8/0x150 [ 874.431674][T17324] should_fail_ex+0x40c/0x560 [ 874.431698][T17324] should_failslab+0xa8/0x100 [ 874.431729][T17324] ? __kernfs_new_node+0xe6/0x980 [ 874.431757][T17324] kmem_cache_alloc_noprof+0x87/0x650 [ 874.431783][T17324] ? lock_acquire+0x5f/0x350 [ 874.431818][T17324] __kernfs_new_node+0xe6/0x980 [ 874.431846][T17324] ? rcu_is_watching+0x15/0xb0 [ 874.431869][T17324] ? rcu_is_watching+0x15/0xb0 [ 874.431888][T17324] ? __pfx___kernfs_new_node+0x10/0x10 [ 874.431913][T17324] ? kernfs_root+0x1c/0x230 [ 874.431938][T17324] ? rcu_is_watching+0x15/0xb0 [ 874.431959][T17324] ? kernfs_root+0x1c/0x230 [ 874.431985][T17324] ? rcu_is_watching+0x15/0xb0 [ 874.432005][T17324] ? kernfs_root+0x1c/0x230 [ 874.432030][T17324] ? lock_release+0x4b/0x3c0 [ 874.432061][T17324] ? kernfs_root+0x1c/0x230 [ 874.432086][T17324] ? kernfs_root+0x1c/0x230 [ 874.432114][T17324] kernfs_new_node+0xea/0x140 [ 874.432145][T17324] kernfs_create_link+0xa7/0x200 [ 874.432169][T17324] sysfs_do_create_link_sd+0x83/0x110 [ 874.432197][T17324] device_add_class_symlinks+0x133/0x240 [ 874.432222][T17324] device_add+0x467/0xb80 [ 874.432245][T17324] wiphy_register+0x1fc8/0x2ff0 [ 874.432280][T17324] ? __pfx_wiphy_register+0x10/0x10 [ 874.432305][T17324] ? __pfx_netdev_run_todo+0x10/0x10 [ 874.432325][T17324] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 874.432349][T17324] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 874.432378][T17324] ieee80211_register_hw+0x3d3d/0x4a50 [ 874.432421][T17324] ? ieee80211_register_hw+0x19a1/0x4a50 [ 874.432463][T17324] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 874.432498][T17324] ? __asan_memset+0x22/0x50 [ 874.432521][T17324] ? __hrtimer_setup+0x1b7/0x260 [ 874.432545][T17324] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 874.432576][T17324] mac80211_hwsim_new_radio+0x3238/0x5680 [ 874.432620][T17324] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 874.432647][T17324] ? rcu_is_watching+0x15/0xb0 [ 874.432669][T17324] ? trace_kmalloc+0x2a/0xf0 [ 874.432697][T17324] hwsim_new_radio_nl+0xd8b/0xf90 [ 874.432730][T17324] genl_family_rcv_msg_doit+0x233/0x340 [ 874.432759][T17324] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 874.432790][T17324] ? bpf_lsm_capable+0x9/0x20 [ 874.432808][T17324] ? security_capable+0x7e/0x2c0 [ 874.432843][T17324] genl_rcv_msg+0x614/0x7a0 [ 874.432869][T17324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.432891][T17324] ? ref_tracker_free+0x689/0x830 [ 874.432915][T17324] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 874.432942][T17324] ? __pfx_ref_tracker_free+0x10/0x10 [ 874.432971][T17324] netlink_rcv_skb+0x226/0x4a0 [ 874.433002][T17324] ? __pfx_genl_rcv_msg+0x10/0x10 [ 874.433026][T17324] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 874.433063][T17324] ? down_read+0x2be/0x330 [ 874.433095][T17324] genl_rcv+0x28/0x40 [ 874.433115][T17324] netlink_unicast+0x7bb/0x940 [ 874.433149][T17324] netlink_sendmsg+0x813/0xb40 [ 874.433185][T17324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.433218][T17324] ? aa_sock_msg_perm+0xf1/0x1b0 [ 874.433239][T17324] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 874.433265][T17324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 874.433297][T17324] ____sys_sendmsg+0x9b9/0xa20 [ 874.433331][T17324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 874.433363][T17324] ? lock_release+0x4b/0x3c0 [ 874.433394][T17324] ? import_iovec+0x73/0xa0 [ 874.433430][T17324] ___sys_sendmsg+0x2a5/0x360 [ 874.433458][T17324] ? rcu_is_watching+0x15/0xb0 [ 874.433478][T17324] ? get_pid_task+0x20/0x1f0 [ 874.433499][T17324] ? __pfx____sys_sendmsg+0x10/0x10 [ 874.433531][T17324] ? rcu_is_watching+0x15/0xb0 [ 874.433567][T17324] ? __fget_files+0x2a/0x420 [ 874.433589][T17324] ? __fget_files+0x3a2/0x420 [ 874.433618][T17324] __x64_sys_sendmsg+0x1b1/0x290 [ 874.433649][T17324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 874.433687][T17324] ? rcu_is_watching+0x15/0xb0 [ 874.433709][T17324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.433730][T17324] do_syscall_64+0x174/0x580 [ 874.433757][T17324] ? trace_irq_disable+0x3b/0x140 [ 874.433785][T17324] ? clear_bhb_loop+0x40/0x90 [ 874.433809][T17324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.433830][T17324] RIP: 0033:0x7f54ccd9ce59 [ 874.433849][T17324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 874.433868][T17324] RSP: 002b:00007f54cdcfc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 874.433890][T17324] RAX: ffffffffffffffda RBX: 00007f54cd015fa0 RCX: 00007f54ccd9ce59 [ 874.433905][T17324] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000004 [ 874.433920][T17324] RBP: 00007f54cdcfc090 R08: 0000000000000000 R09: 0000000000000000 [ 874.433933][T17324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 874.433946][T17324] R13: 00007f54cd016038 R14: 00007f54cd015fa0 R15: 00007ffc955cb628 [ 874.433971][T17324] [ 874.955756][T10853] tipc: Resetting bearer [ 874.962274][ T6340] tipc: Node number set to 3156121640 [ 874.968278][T17268] tipc: Resetting bearer [ 875.025189][T17268] tipc: Disabling bearer [ 875.037143][T17330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.045288][T17330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.056376][T17330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.064485][T17330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.154580][T17340] macvlan0: entered promiscuous mode [ 875.412749][T17369] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13131'. [ 875.452568][T17374] syzkaller0: entered promiscuous mode [ 875.459914][T17375] validate_nla: 4 callbacks suppressed [ 875.459933][T17375] netlink: 'syz.4.13135': attribute type 5 has an invalid length. [ 875.473892][T17374] syzkaller0: entered allmulticast mode [ 875.486967][T17375] geneve4: entered promiscuous mode [ 875.494715][T17375] geneve4: entered allmulticast mode [ 875.504077][T14883] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 875.520604][T17374] tipc: Started in network mode [ 875.535672][T17374] tipc: Node identity 7ec05249166a, cluster identity 4711 [ 875.542843][T17378] netlink: 'syz.1.13136': attribute type 1 has an invalid length. [ 875.558410][T17374] tipc: Enabled bearer , priority 0 [ 875.576175][T14883] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 875.591914][T17378] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 875.597247][T17371] tipc: Resetting bearer [ 875.628553][T17371] tipc: Disabling bearer [ 875.649104][T14883] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 875.658797][T17388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 875.667649][T14883] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 875.682398][T17391] xt_cluster: you have exceeded the maximum number of cluster nodes (2048 > 32) [ 875.849599][T17403] syzkaller0: entered promiscuous mode [ 875.855330][T17403] syzkaller0: entered allmulticast mode [ 876.212197][T17431] bridge2: entered allmulticast mode [ 876.473709][T17459] veth1_to_bridge: entered allmulticast mode [ 876.986052][T17491] netlink: 'syz.0.13168': attribute type 6 has an invalid length. [ 876.994266][T17491] netlink: 'syz.0.13168': attribute type 5 has an invalid length. [ 877.004217][T17499] netlink: 'syz.4.13171': attribute type 23 has an invalid length. [ 877.015603][T17491] IPv6: addrconf: prefix option has invalid lifetime [ 877.040580][T17501] bridge3: entered promiscuous mode [ 877.046009][T17501] bridge3: entered allmulticast mode [ 877.162855][T17509] netlink: zone id is out of range [ 877.189849][T17509] netlink: zone id is out of range [ 877.201626][T17509] netlink: zone id is out of range [ 877.206803][T17509] netlink: zone id is out of range [ 877.214851][T17509] netlink: zone id is out of range [ 877.220666][T17510] syzkaller0: entered promiscuous mode [ 877.226312][T17509] netlink: zone id is out of range [ 877.233607][T17509] netlink: zone id is out of range [ 877.239001][T17509] netlink: zone id is out of range [ 877.244169][T17509] netlink: zone id is out of range [ 877.250417][T17510] syzkaller0: entered allmulticast mode [ 877.479484][T17528] vcan1: entered promiscuous mode [ 877.494110][T17528] vcan1: entered allmulticast mode [ 877.548310][T17535] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 877.564260][T17535] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 877.575296][T17535] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 878.042598][T17583] netlink: 'syz.3.13200': attribute type 1 has an invalid length. [ 878.120827][T17583] 8021q: adding VLAN 0 to HW filter on device bond5 [ 878.252554][T17583] bond5: (slave ip6gretap0): making interface the new active one [ 878.276468][T17583] bond5: (slave ip6gretap0): Enslaving as an active interface with an up link [ 878.429419][T17614] __nla_validate_parse: 23 callbacks suppressed [ 878.429441][T17614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13207'. [ 878.490210][T17621] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13208'. [ 878.520750][T17624] netlink: 14 bytes leftover after parsing attributes in process `syz.3.13206'. [ 878.539345][T17626] netlink: 220 bytes leftover after parsing attributes in process `syz.2.13211'. [ 878.551066][T17623] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13210'. [ 878.661640][T17630] IPVS: persistence engine module ip_vs_pe_• not found [ 878.706792][ T6336] IPVS: starting estimator thread 0... [ 878.715064][T17639] xt_hashlimit: size too large, truncated to 1048576 [ 878.783511][T17636] tipc: Enabled bearer , priority 0 [ 878.796457][T17651] x_tables: duplicate underflow at hook 3 [ 878.802511][T17643] IPVS: using max 40 ests per chain, 96000 per kthread [ 878.820042][T17636] syzkaller0: entered promiscuous mode [ 878.827209][T17636] syzkaller0: entered allmulticast mode [ 878.845074][T17636] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 878.867627][T17635] tipc: Resetting bearer [ 878.886072][T17635] tipc: Disabling bearer [ 878.925746][T17655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13219'. [ 878.998423][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.039242][T17655] bridge_slave_1 (unregistering): left allmulticast mode [ 879.056760][T17655] bridge_slave_1 (unregistering): left promiscuous mode [ 879.070578][T17655] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.083143][T17662] netlink: 'syz.2.13221': attribute type 1 has an invalid length. [ 879.155832][T17662] 8021q: adding VLAN 0 to HW filter on device bond3 [ 879.169268][T17660] veth0_to_bond: left allmulticast mode [ 879.192528][T17660] bond3: (slave veth0_to_bond): making interface the new active one [ 879.203012][T17660] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 879.226485][T17662] bond3: entered promiscuous mode [ 879.247788][T17669] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13223'. [ 879.253333][T17662] veth0_to_bond: entered promiscuous mode [ 879.296404][T17662] bond3: entered allmulticast mode [ 879.309686][T17671] netlink: 'syz.1.13224': attribute type 3 has an invalid length. [ 879.323162][T17662] veth0_to_bond: entered allmulticast mode [ 879.381997][T17676] netlink: 'syz.4.13226': attribute type 3 has an invalid length. [ 879.421390][T17676] netlink: 'syz.4.13226': attribute type 3 has an invalid length. [ 879.457589][T17676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13226'. [ 879.502421][T17691] netlink: 184 bytes leftover after parsing attributes in process `syz.2.13231'. [ 879.550628][T17695] netlink: 7064 bytes leftover after parsing attributes in process `syz.3.13229'. [ 879.574647][T17698] ip6t_rpfilter: unknown options [ 879.833287][T17720] xt_CT: You must specify a L4 protocol and not use inversions on it [ 879.845751][T17715] can: request_module (can-proto-0) failed. [ 879.889274][T17726] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 880.104201][T17745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 880.613510][T17799] validate_nla: 4 callbacks suppressed [ 880.614455][T17799] netlink: 'syz.2.13262': attribute type 5 has an invalid length. [ 880.647809][T17805] syzkaller0: entered promiscuous mode [ 880.667451][T17805] syzkaller0: entered allmulticast mode [ 880.711165][T17805] tipc: Enabled bearer , priority 0 [ 880.725537][T17802] tipc: Resetting bearer [ 880.761367][T17802] tipc: Disabling bearer [ 880.886605][T17822] bridge0: port 3(bond5) entered blocking state [ 880.906227][T17822] bridge0: port 3(bond5) entered disabled state [ 880.917480][T17822] bond5: entered allmulticast mode [ 880.933300][T17822] bond5: entered promiscuous mode [ 881.021863][T17839] vlan0: entered promiscuous mode [ 881.058129][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 881.381621][T17876] syzkaller0: entered promiscuous mode [ 881.388590][T17876] syzkaller0: entered allmulticast mode [ 881.400638][T17878] netlink: 'syz.3.13279': attribute type 10 has an invalid length. [ 881.411541][T17876] tipc: Enabled bearer , priority 0 [ 881.424070][T17875] tipc: Resetting bearer [ 881.439054][T17875] tipc: Disabling bearer [ 881.665793][T17903] netlink: 'syz.1.13289': attribute type 1 has an invalid length. [ 881.764886][T17914] netlink: 'syz.1.13292': attribute type 1 has an invalid length. [ 881.965895][T17935] netlink: 'syz.0.13298': attribute type 9 has an invalid length. [ 882.087840][T17946] netlink: 'syz.3.13300': attribute type 1 has an invalid length. [ 882.109755][T17946] netlink: 'syz.3.13300': attribute type 1 has an invalid length. [ 882.221444][T17948] syzkaller0: entered promiscuous mode [ 882.227382][T17948] syzkaller0: entered allmulticast mode [ 882.280823][T17961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.317356][T17967] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 882.331827][T17961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 883.100380][T18024] syzkaller0: entered promiscuous mode [ 883.106107][T18024] syzkaller0: entered allmulticast mode [ 883.490918][T18052] net_ratelimit: 128 callbacks suppressed [ 883.490941][T18052] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 884.005007][T18072] sctp: [Deprecated]: syz.3.13338 (pid 18072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 884.005007][T18072] Use struct sctp_sack_info instead [ 885.632782][T18001] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 885.831586][T18089] __nla_validate_parse: 27 callbacks suppressed [ 885.831606][T18089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13342'. [ 885.865185][T18084] syzkaller0: entered promiscuous mode [ 885.879791][T18084] syzkaller0: entered allmulticast mode [ 886.312406][T18129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.352754][T18129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.382011][T18134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.390204][T18133] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 886.420411][T18138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.440884][T18129] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.448753][T18133] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 886.481401][T18134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 886.481482][T18133] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 886.514366][T18141] syzkaller0: entered promiscuous mode [ 886.529886][T18141] syzkaller0: entered allmulticast mode [ 886.612971][T18151] Cannot find del_set index 3 as target [ 886.810657][T18167] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13364'. [ 886.881077][T10851] bond0: (slave bond_slave_0): interface is now down [ 886.896985][T10851] bond0: (slave bond_slave_1): interface is now down [ 886.915342][T10851] bond0: (slave team0): interface is now down [ 886.928089][T10851] bond0: (slave bond2): interface is now down [ 886.940113][T10851] bond0: (slave bond3): interface is now down [ 886.955646][T18180] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.13366'. [ 886.967688][T10851] bond0: now running without any active interface! [ 887.104585][T18190] x_tables: duplicate underflow at hook 1 [ 887.141920][T18192] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13369'. [ 887.163351][T18196] syzkaller0: entered promiscuous mode [ 887.173737][T18196] syzkaller0: entered allmulticast mode [ 887.194301][T18199] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13372'. [ 887.212227][T18192] veth0_macvtap: left promiscuous mode [ 887.287483][T18207] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 887.412011][T18214] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13375'. [ 887.785303][T18251] syzkaller0: entered promiscuous mode [ 887.798463][T18251] syzkaller0: entered allmulticast mode [ 887.846991][T18253] syzkaller0: entered promiscuous mode [ 887.853569][T18253] syzkaller0: entered allmulticast mode [ 887.920942][T18258] netlink: 'syz.1.13390': attribute type 12 has an invalid length. [ 887.960065][T18258] netlink: 'syz.1.13390': attribute type 29 has an invalid length. [ 887.971490][T18258] netlink: 148 bytes leftover after parsing attributes in process `syz.1.13390'. [ 887.983102][T18258] netlink: 59 bytes leftover after parsing attributes in process `syz.1.13390'. [ 888.174249][T18275] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13399'. [ 888.195404][T18282] netlink: 'syz.2.13400': attribute type 39 has an invalid length. [ 888.226459][T18275] bridge3: port 1(veth5) entered blocking state [ 888.233416][T18275] bridge3: port 1(veth5) entered disabled state [ 888.241977][T18275] veth5: entered allmulticast mode [ 888.249424][T18275] veth5: entered promiscuous mode [ 888.269554][T18271] ip6t_srh: unknown srh match flags 4000 [ 888.279238][T18277] ip6t_srh: unknown srh match flags 4000 [ 888.290846][T18275] bridge3: port 2(veth0_to_bond) entered blocking state [ 888.301317][T18275] bridge3: port 2(veth0_to_bond) entered disabled state [ 888.310194][T18275] veth0_to_bond: entered allmulticast mode [ 888.321925][T18275] veth0_to_bond: entered promiscuous mode [ 888.331022][T18275] bridge3: port 2(veth0_to_bond) entered blocking state [ 888.338112][T18275] bridge3: port 2(veth0_to_bond) entered forwarding state [ 888.409191][T18289] syzkaller0: entered promiscuous mode [ 888.414758][T18289] syzkaller0: entered allmulticast mode [ 888.494395][T18296] netlink: 52 bytes leftover after parsing attributes in process `syz.2.13405'. [ 888.593602][T18300] bond6: Removing last ns target with arp_interval on [ 888.629249][T18304] macvlan2: entered allmulticast mode [ 888.632800][T18300] sctp: [Deprecated]: syz.4.13406 (pid 18300) Use of struct sctp_assoc_value in delayed_ack socket option. [ 888.632800][T18300] Use struct sctp_sack_info instead [ 888.646340][T18304] dummy0: entered allmulticast mode [ 888.661869][T18304] dummy0: entered promiscuous mode [ 888.887583][T18340] netlink: 'syz.3.13418': attribute type 1 has an invalid length. [ 888.928740][T18340] 8021q: adding VLAN 0 to HW filter on device bond6 [ 888.937408][T18336] syzkaller0: entered promiscuous mode [ 888.951567][T18336] syzkaller0: entered allmulticast mode [ 888.968373][T18340] nbd: illegal input index 2958377 [ 889.051926][T18340] ip_vti0: entered promiscuous mode [ 889.096900][T18333] netlink: 'syz.2.13414': attribute type 1 has an invalid length. [ 889.127263][T18355] netlink: 'syz.3.13422': attribute type 2 has an invalid length. [ 889.135921][T18333] 8021q: adding VLAN 0 to HW filter on device bond5 [ 889.186449][T18333] bond5: (slave veth7): Enslaving as an active interface with a down link [ 889.218455][ T5730] IPVS: starting estimator thread 0... [ 889.218455][T18357] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 889.296664][T18372] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 889.341639][T18365] IPVS: using max 36 ests per chain, 86400 per kthread [ 889.356640][T18347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 889.365226][T18347] bond5: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 889.436402][T18376] netlink: 'syz.1.13428': attribute type 29 has an invalid length. [ 889.494765][T18383] bond7 (unregistering): Released all slaves [ 889.513063][T18376] pim6reg527: entered allmulticast mode [ 889.520506][T18386] tipc: Enabled bearer , priority 24 [ 889.527297][T18381] syzkaller0: entered promiscuous mode [ 889.533497][T18381] syzkaller0: entered allmulticast mode [ 889.772894][T18404] bond7: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0) [ 889.785477][T18404] bond7 (unregistering): Released all slaves [ 889.939858][T18424] tipc: Enabling of bearer rejected, failed to enable media [ 890.020275][T18431] netlink: 'syz.3.13444': attribute type 1 has an invalid length. [ 890.084649][T18436] syzkaller0: entered promiscuous mode [ 890.091313][T18436] syzkaller0: entered allmulticast mode [ 890.549962][T18473] syzkaller0: entered promiscuous mode [ 890.562052][T18473] syzkaller0: entered allmulticast mode [ 890.686811][T18480] 8021q: adding VLAN 0 to HW filter on device bond7 [ 890.889989][T10853] bond3 (unregistering): (slave gretap1): Releasing active interface [ 890.964272][T10853] team0: Port device bridge3 removed [ 890.997045][T10853] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 891.007341][T10853] bond_slave_0: left allmulticast mode [ 891.014696][T10853] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 891.024295][T10853] bond_slave_1: left allmulticast mode [ 891.031623][T10853] bond0 (unregistering): (slave team0): Releasing backup interface [ 891.040602][T10853] team0: left allmulticast mode [ 891.045598][T10853] team_slave_0: left allmulticast mode [ 891.051472][T10853] team_slave_1: left allmulticast mode [ 891.061081][T10853] bond0 (unregistering): Released all slaves [ 891.070753][T10853] bond1 (unregistering): Released all slaves [ 891.081896][T10853] bond2 (unregistering): Released all slaves [ 891.093157][T10853] bond3 (unregistering): Released all slaves [ 891.104176][T10853] bond4 (unregistering): Released all slaves [ 891.115589][T10853] bond5 (unregistering): (slave veth5): Releasing active interface [ 891.127466][T10853] bond5 (unregistering): Released all slaves [ 891.142502][T10853] bond6 (unregistering): Released all slaves [ 891.154013][T10853] bond7 (unregistering): Released all slaves [ 891.240572][T18528] __nla_validate_parse: 8 callbacks suppressed [ 891.240592][T18528] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13473'. [ 891.284244][T10853] tipc: Left network mode [ 891.295365][T18526] netlink: 256 bytes leftover after parsing attributes in process `syz.3.13472'. [ 891.317045][T10853] IPVS: stopping backup sync thread 32413 ... [ 891.329084][T18526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13472'. [ 891.403059][T18537] syzkaller0: entered promiscuous mode [ 891.411354][T18537] syzkaller0: entered allmulticast mode [ 891.686728][T18562] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13483'. [ 891.714452][T18562] netlink: 'syz.1.13483': attribute type 30 has an invalid length. [ 891.743876][T18562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13483'. [ 891.831027][T18566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13482'. [ 891.933583][T18576] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13487'. [ 891.985611][T18583] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13487'. [ 892.005107][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13487'. [ 892.057690][T18582] syzkaller0: entered promiscuous mode [ 892.070310][T18582] syzkaller0: entered allmulticast mode [ 892.084983][T18584] tipc: MTU too low for tipc bearer [ 892.167291][T10853] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 892.360961][T18607] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13493'. [ 892.601642][T10853] team0 (unregistering): Port device team_slave_1 removed [ 892.653543][T10853] team0 (unregistering): Port device team_slave_0 removed [ 892.832245][T18625] syzkaller0: entered promiscuous mode [ 892.852000][T18625] syzkaller0: entered allmulticast mode [ 892.888003][T18618] netlink: 'syz.3.13495': attribute type 1 has an invalid length. [ 893.210926][T18662] syzkaller0: entered promiscuous mode [ 893.216763][T18662] syzkaller0: entered allmulticast mode [ 893.263821][T14429] Bluetooth: hci1: link tx timeout [ 893.271084][T14429] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 893.282936][T18662] tipc: Enabled bearer , priority 0 [ 893.296969][T10853] IPVS: stop unused estimator thread 0... [ 893.323839][T18661] tipc: Resetting bearer [ 893.352020][T18661] tipc: Disabling bearer [ 893.383114][T18678] syzkaller0: entered promiscuous mode [ 893.390431][T18678] syzkaller0: entered allmulticast mode [ 894.074385][T18720] bond0: (slave bond_slave_0): Releasing backup interface [ 894.277448][T18729] 8021q: adding VLAN 0 to HW filter on device bond6 [ 894.287794][T18729] bridge0: port 3(bond6) entered blocking state [ 894.294333][T18729] bridge0: port 3(bond6) entered disabled state [ 894.302074][T18729] bond6: entered allmulticast mode [ 894.310554][T18729] bond6: entered promiscuous mode [ 894.334022][T18729] netlink: 'syz.2.13516': attribute type 1 has an invalid length. [ 894.371219][T18736] syzkaller0: entered promiscuous mode [ 894.376851][T18736] syzkaller0: entered allmulticast mode [ 894.424301][T18729] 8021q: adding VLAN 0 to HW filter on device bond7 [ 894.541683][T18747] bond7: (slave batadv_slave_1): Enslaving as a backup interface with an up link [ 894.914842][T32244] Bluetooth: hci1: link tx timeout [ 894.920799][T32244] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 895.066139][T18785] xfrm0 speed is unknown, defaulting to 1000 [ 895.146186][T18795] netlink: 'syz.1.13527': attribute type 16 has an invalid length. [ 895.174906][T18791] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.184141][T18795] netlink: 'syz.1.13527': attribute type 17 has an invalid length. [ 895.206633][T18791] bridge3: port 2(veth0_to_bond) entered disabled state [ 895.298856][T32244] Bluetooth: hci1: command 0x0405 tx timeout [ 895.380057][T18797] bond8: invalid ARP target 0.0.0.0 specified for addition [ 895.395284][T18797] bond8: option arp_ip_target: invalid value (0) [ 895.413764][T18797] bond8 (unregistering): Released all slaves [ 895.472674][T18795] erspan0: left allmulticast mode [ 895.505585][T18795] bridge0: port 1(bridge_slave_0) entered blocking state [ 895.512920][T18795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 895.523955][T18795] bridge3: port 2(veth0_to_bond) entered blocking state [ 895.531075][T18795] bridge3: port 2(veth0_to_bond) entered forwarding state [ 895.560329][T18795] 0·: left allmulticast mode [ 895.565280][T18795] hsr_slave_0: left allmulticast mode [ 895.591706][T18795] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 895.865941][T18821] can: request_module (can-proto-0) failed. [ 896.136939][T18847] netlink: 'syz.0.13539': attribute type 1 has an invalid length. [ 896.264284][T18847] 8021q: adding VLAN 0 to HW filter on device bond2 [ 896.473289][T18866] netlink: 'syz.0.13539': attribute type 10 has an invalid length. [ 896.507086][T18866] __nla_validate_parse: 20 callbacks suppressed [ 896.507107][T18866] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13539'. [ 896.594948][T18872] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13545'. [ 896.626986][T18851] bond2: (slave veth3): Enslaving as an active interface with a down link [ 896.656416][T18854] syzkaller1: entered promiscuous mode [ 896.681585][T18854] syzkaller1: entered allmulticast mode [ 896.704599][T18866] dummy0: entered promiscuous mode [ 896.754223][T18872] bridge_slave_1 (unregistering): left promiscuous mode [ 896.781921][T18872] bridge0: port 2(bridge_slave_1) entered disabled state [ 896.966372][T18883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13546'. [ 896.991904][T18883] veth0_macvtap: left promiscuous mode [ 897.135677][T18892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13549'. [ 897.230409][T18896] netlink: 'syz.2.13551': attribute type 33 has an invalid length. [ 897.287885][T18896] bond8: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 897.308931][T18896] bond8 (unregistering): Released all slaves [ 897.472228][T18918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13557'. [ 897.485456][T18901] syzkaller0: entered promiscuous mode [ 897.493120][T18901] syzkaller0: entered allmulticast mode [ 897.504370][T18919] syzkaller0: entered promiscuous mode [ 897.510339][T18921] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13558'. [ 897.521392][T18919] syzkaller0: entered allmulticast mode [ 897.606994][T18924] netlink: 60 bytes leftover after parsing attributes in process `syz.3.13559'. [ 897.621755][T18928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13560'. [ 897.623455][T18918] block nbd0: Unsupported socket: should be TCP or UNIX. [ 897.649981][T18928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13560'. [ 897.800912][T18938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13561'. [ 897.943813][T18952] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.963120][T18952] bridge_slave_1 (unregistering): left allmulticast mode [ 897.978438][T18952] bridge_slave_1 (unregistering): left promiscuous mode [ 897.994336][T18952] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.283482][T18971] syzkaller0: entered promiscuous mode [ 898.293484][T18971] syzkaller0: entered allmulticast mode [ 898.480157][T19003] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 898.511958][T19003] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 898.533559][T19003] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 898.712549][T19018] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 898.725300][T19018] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 898.734140][T19018] gretap1: entered promiscuous mode [ 898.739626][T19018] gretap1: entered allmulticast mode [ 898.954220][T19043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.065001][T19046] syzkaller0: entered promiscuous mode [ 899.070852][T19046] syzkaller0: entered allmulticast mode [ 899.102133][T19059] FAULT_INJECTION: forcing a failure. [ 899.102133][T19059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 899.115763][T19059] CPU: 0 UID: 0 PID: 19059 Comm: syz.3.13597 Not tainted syzkaller #0 PREEMPT(full) [ 899.115793][T19059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 899.115808][T19059] Call Trace: [ 899.115816][T19059] [ 899.115825][T19059] dump_stack_lvl+0xe8/0x150 [ 899.115855][T19059] should_fail_ex+0x40c/0x560 [ 899.115880][T19059] _copy_to_user+0x31/0xb0 [ 899.115909][T19059] simple_read_from_buffer+0xe1/0x170 [ 899.115938][T19059] proc_fail_nth_read+0x1bb/0x230 [ 899.115968][T19059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 899.115997][T19059] ? rw_verify_area+0x24a/0x4c0 [ 899.116024][T19059] ? l2cap_sock_setsockopt+0x15cb/0x20d0 [ 899.116052][T19059] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 899.116079][T19059] vfs_read+0x213/0xa80 [ 899.116104][T19059] ? __local_bh_enable_ip+0xd0/0x130 [ 899.116134][T19059] ? __pfx___mutex_lock+0x10/0x10 [ 899.116163][T19059] ? __pfx_vfs_read+0x10/0x10 [ 899.116195][T19059] ? __fget_files+0x3a2/0x420 [ 899.116218][T19059] ? __fget_files+0x2a/0x420 [ 899.116245][T19059] ksys_read+0x150/0x270 [ 899.116274][T19059] ? __pfx_ksys_read+0x10/0x10 [ 899.116303][T19059] ? rcu_is_watching+0x15/0xb0 [ 899.116327][T19059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.116349][T19059] do_syscall_64+0x174/0x580 [ 899.116376][T19059] ? trace_irq_disable+0x3b/0x140 [ 899.116412][T19059] ? clear_bhb_loop+0x40/0x90 [ 899.116435][T19059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.116456][T19059] RIP: 0033:0x7f970115d68e [ 899.116475][T19059] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 899.116493][T19059] RSP: 002b:00007f9701f93fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 899.116515][T19059] RAX: ffffffffffffffda RBX: 00007f9701f946c0 RCX: 00007f970115d68e [ 899.116531][T19059] RDX: 000000000000000f RSI: 00007f9701f940a0 RDI: 0000000000000003 [ 899.116544][T19059] RBP: 00007f9701f94090 R08: 0000000000000000 R09: 0000000000000000 [ 899.116558][T19059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.116570][T19059] R13: 00007f9701416128 R14: 00007f9701416090 R15: 00007ffe678a1698 [ 899.116596][T19059] [ 899.546172][T19066] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 899.650034][T19087] IPVS: set_ctl: invalid protocol: 36 127.0.0.1:20001 [ 899.670154][T19083] bond8 (unregistering): Released all slaves [ 899.691571][T19079] syzkaller0: entered promiscuous mode [ 899.697170][T19079] syzkaller0: entered allmulticast mode [ 900.091072][T19116] syzkaller0: entered promiscuous mode [ 900.119124][T19116] syzkaller0: entered allmulticast mode [ 900.320407][T19139] gretap3: entered promiscuous mode [ 900.326168][T19139] gretap3: entered allmulticast mode [ 900.347582][T19139] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 900.374348][T19139] block nbd0: Unsupported socket: should be TCP or UNIX. [ 900.526360][T19154] gtp0: entered promiscuous mode [ 900.542006][T19154] gtp0: entered allmulticast mode [ 901.011696][T19175] netlink: 'syz.2.13633': attribute type 21 has an invalid length. [ 901.100477][T19175] bond8: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 901.255437][T19175] bond8 (unregistering): Released all slaves [ 901.358816][T19191] syzkaller0: entered promiscuous mode [ 901.375553][T19191] syzkaller0: entered allmulticast mode [ 901.452765][T19208] netlink: 'syz.3.13640': attribute type 1 has an invalid length. [ 901.535105][T19208] bond8: entered promiscuous mode [ 901.540817][T19208] 8021q: adding VLAN 0 to HW filter on device bond8 [ 901.548805][T19211] __nla_validate_parse: 14 callbacks suppressed [ 901.548823][T19211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13641'. [ 901.625688][T19208] 8021q: adding VLAN 0 to HW filter on device bond8 [ 901.650000][T19208] bond8: (slave vti0): The slave device specified does not support setting the MAC address [ 901.662855][T19223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13644'. [ 901.681062][T19208] bond8: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 901.693067][T19208] bond8: (slave vti0): making interface the new active one [ 901.701707][T19208] vti0: entered promiscuous mode [ 901.712761][T19208] vti0: left promiscuous mode [ 901.927113][T19247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13647'. [ 902.032127][T19252] syzkaller0: entered promiscuous mode [ 902.037726][T19252] syzkaller0: entered allmulticast mode [ 902.232606][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13660'. [ 902.286383][T19273] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13652'. [ 902.449332][T19283] netlink: 148 bytes leftover after parsing attributes in process `syz.0.13663'. [ 902.462493][T19280] netlink: 'syz.1.13662': attribute type 11 has an invalid length. [ 902.478980][T19280] netlink: 224 bytes leftover after parsing attributes in process `syz.1.13662'. [ 902.564467][T19294] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.13668'. [ 902.762982][T19310] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13673'. [ 902.811196][T19315] netlink: 'syz.4.13671': attribute type 5 has an invalid length. [ 902.826505][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13675'. [ 903.531816][T19368] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 903.554717][T19371] netlink: 'syz.4.13692': attribute type 11 has an invalid length. [ 903.827813][T19388] netlink: 'syz.2.13699': attribute type 2 has an invalid length. [ 903.870734][T19396] netlink: 'syz.3.13702': attribute type 11 has an invalid length. [ 903.976340][T19400] syzkaller0: entered promiscuous mode [ 904.005730][T19400] syzkaller0: entered allmulticast mode [ 904.052798][T19414] netlink: 'syz.3.13709': attribute type 1 has an invalid length. [ 904.631514][T19468] openvswitch: netlink: IP tunnel dst address not specified [ 904.758970][T19479] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.766557][T19479] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.801652][T19479] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.808996][T19479] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.816503][T19479] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.823919][T19479] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.832260][T19479] bridge0: entered promiscuous mode [ 904.868161][T19479] bridge0: entered allmulticast mode [ 905.108709][T19501] team_slave_1: entered promiscuous mode [ 905.123562][T19501] team0: Port device team_slave_1 removed [ 905.175427][T19504] 8021q: adding VLAN 0 to HW filter on device bond7 [ 905.184060][T19504] bond0: (slave bond7): Enslaving as an active interface with a down link [ 905.221855][T19507] netlink: 'syz.0.13740': attribute type 1 has an invalid length. [ 905.231802][T19507] bridge0: port 4(veth1_to_bridge) entered blocking state [ 905.243865][T19507] bridge0: port 4(veth1_to_bridge) entered disabled state [ 905.252043][T19507] veth1_to_bridge: entered allmulticast mode [ 905.259811][T19507] veth1_to_bridge: entered promiscuous mode [ 905.266209][T19507] bridge0: port 4(veth1_to_bridge) entered blocking state [ 905.273483][T19507] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 905.457687][T19525] syzkaller0: entered promiscuous mode [ 905.473067][T19525] syzkaller0: entered allmulticast mode [ 905.506884][T19525] tipc: Enabled bearer , priority 0 [ 905.516741][T19522] tipc: Resetting bearer [ 905.531317][T19522] tipc: Disabling bearer [ 905.538562][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.551187][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.563929][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.576235][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.588646][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.601092][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.613523][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.625856][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.966137][T19543] syzkaller0: entered promiscuous mode [ 905.991181][T19543] syzkaller0: entered allmulticast mode [ 906.013991][T19543] tipc: Enabled bearer , priority 0 [ 906.036497][T19540] tipc: Resetting bearer [ 906.112720][T19540] tipc: Disabling bearer [ 908.538024][ C1] net_ratelimit: 21154 callbacks suppressed [ 908.538047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.538075][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 908.544731][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.558642][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.568778][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.580499][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.592458][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.604629][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 908.618354][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 908.628643][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.547965][ C1] net_ratelimit: 40506 callbacks suppressed [ 913.547988][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.548027][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.554710][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.566652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.578565][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.590493][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 913.602426][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.614365][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.626300][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 913.638274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 914.344421][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 917.777932][ C0] sched: DL replenish lagged too much [ 918.558002][ C1] net_ratelimit: 41154 callbacks suppressed [ 918.558026][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 918.558040][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.558686][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.564644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.576623][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.588806][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.600879][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.612889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 918.625758][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 918.636511][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.567939][ C1] net_ratelimit: 41689 callbacks suppressed [ 923.567962][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.568187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.574585][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.586537][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.598485][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.610455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.622430][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.634458][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 923.646248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 923.658238][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.623838][T32244] Bluetooth: hci2: command 0x0406 tx timeout [ 928.577961][ C0] net_ratelimit: 41524 callbacks suppressed [ 928.577983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.578103][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.584580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 928.596582][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.608734][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.620481][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.632514][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.644470][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.656467][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 928.668396][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.588106][ C0] net_ratelimit: 41175 callbacks suppressed [ 933.588129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.588131][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.588886][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.594798][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.606811][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.618815][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.630789][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.642758][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.654701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 933.666771][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 936.544293][T32244] Bluetooth: hci3: command 0x0406 tx timeout [ 938.597929][ C1] net_ratelimit: 40498 callbacks suppressed [ 938.597952][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.598300][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.604599][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.616628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.628555][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.641293][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.653226][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.665205][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.677090][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 938.689071][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 943.607953][ C0] net_ratelimit: 42183 callbacks suppressed [ 943.607976][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.608250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.614644][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.626548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.638463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.650408][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.662399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 943.674383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.686171][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 943.698196][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.617944][ C0] net_ratelimit: 42070 callbacks suppressed [ 948.617983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 948.618266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.624638][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.636531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.648483][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.660535][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.672433][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.684308][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.696488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 948.708307][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.627902][ C0] net_ratelimit: 41895 callbacks suppressed [ 953.627924][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 953.627994][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.634648][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.646457][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.659114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.670944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.683024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.694893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.706812][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 953.718788][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.638006][ C0] net_ratelimit: 41808 callbacks suppressed [ 958.638028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.638162][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.644713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 958.656591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.668661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.680622][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.692608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.704512][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.716518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 958.728447][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.648078][ C0] net_ratelimit: 39961 callbacks suppressed [ 963.648100][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 963.648990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:e8:39:51:a3:23, vlan:0) [ 963.654718][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.666648][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.678729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.690733][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.702726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.714775][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.726646][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 963.738520][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.657934][ C1] net_ratelimit: 37510 callbacks suppressed [ 968.657957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.658271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.664521][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.676725][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 968.688549][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.700514][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.712402][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.724470][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.736513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 968.748469][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.667983][ C1] net_ratelimit: 37655 callbacks suppressed [ 973.668006][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.668006][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:e8:39:51:a3:23, vlan:0) [ 973.668683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.674584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 973.686711][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.698636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.710737][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.724975][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.734598][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 973.746638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.677915][ C0] net_ratelimit: 38032 callbacks suppressed [ 978.677937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.679098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.684648][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.696594][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.708633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 978.721250][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:e8:39:51:a3:23, vlan:0) [ 978.732624][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.744383][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.756457][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 978.768446][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 982.822551][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 983.687907][ C0] net_ratelimit: 38339 callbacks suppressed [ 983.687929][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 983.688293][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.694541][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.707282][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:e8:39:51:a3:23, vlan:0) [ 983.718537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.730461][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.742715][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.754415][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.766390][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 983.778342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.697959][ C0] net_ratelimit: 38200 callbacks suppressed [ 988.697983][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 988.697986][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.698641][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.704568][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.717310][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:e8:39:51:a3:23, vlan:0) [ 988.728630][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.740519][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.752763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.764600][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 988.776543][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.708036][ C1] net_ratelimit: 38274 callbacks suppressed [ 993.708060][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.708100][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.715530][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:e8:39:51:a3:23, vlan:0) [ 993.726706][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.738665][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.750671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 993.762657][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.774639][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 993.786637][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 993.798512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.717926][ C0] net_ratelimit: 38911 callbacks suppressed [ 998.717950][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.717983][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.724743][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.736700][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.748756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.760641][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.772713][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.784511][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 998.796509][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 998.808553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.727891][ C1] net_ratelimit: 38467 callbacks suppressed [ 1003.727902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.727913][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.728650][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.734689][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.747410][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.758673][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.770619][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.782640][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.794582][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1003.806469][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1008.738033][ C1] net_ratelimit: 38281 callbacks suppressed [ 1008.738056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.738082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1008.744769][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.756932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1008.768819][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.780798][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.792703][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.804696][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.816682][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1008.828577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.747882][ C1] net_ratelimit: 38286 callbacks suppressed [ 1013.747905][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.748196][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.754544][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.766704][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1013.778592][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.790454][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1013.802399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.814376][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.826316][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1013.838345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.757912][ C1] net_ratelimit: 37932 callbacks suppressed [ 1018.757934][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.757943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1018.758680][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1018.764631][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.777346][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.789142][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.801107][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.813093][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.825097][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1018.837172][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.767957][ C1] net_ratelimit: 37755 callbacks suppressed [ 1023.767979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:e8:39:51:a3:23, vlan:0) [ 1023.768223][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1023.774822][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.787087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1023.799046][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.811008][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.822844][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.835157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.849362][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1023.858961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.777964][ C0] net_ratelimit: 38414 callbacks suppressed [ 1028.777969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.777988][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1028.784607][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.796501][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.808380][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.820415][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.832433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.844391][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.856304][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1028.868361][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.787895][ C0] net_ratelimit: 38413 callbacks suppressed [ 1033.787918][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1033.788041][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.794587][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.806698][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.818810][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.830703][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.844366][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.855003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.866969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1033.878918][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1036.417864][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1036.424870][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13573/1:b..l [ 1036.432898][ C0] rcu: (detected by 0, t=10503 jiffies, g=220673, q=2025 ncpus=2) [ 1036.440938][ C0] task:syz-executor state:R running task stack:23016 pid:13573 tgid:13573 ppid:13561 task_flags:0x400140 flags:0x00080000 [ 1036.454478][ C0] Call Trace: [ 1036.457787][ C0] [ 1036.460748][ C0] __schedule+0x17d9/0x56c0 [ 1036.465308][ C0] ? lock_release+0x4b/0x3c0 [ 1036.469952][ C0] ? __mutex_unlock_slowpath+0x724/0x8e0 [ 1036.475634][ C0] ? __pfx___schedule+0x10/0x10 [ 1036.480529][ C0] ? rcu_is_watching+0x15/0xb0 [ 1036.485331][ C0] preempt_schedule_irq+0x4d/0xa0 [ 1036.490403][ C0] irqentry_exit+0x14f/0x8f0 [ 1036.495052][ C0] ? trace_irq_disable+0x3b/0x140 [ 1036.500119][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1036.506136][ C0] RIP: 0010:unwind_next_frame+0x15c/0x2550 [ 1036.511986][ C0] Code: 42 0f b6 04 20 84 c0 0f 85 9b 1c 00 00 f6 03 03 0f 85 fa 19 00 00 49 8d 5e 35 48 89 d8 48 c1 e8 03 48 89 04 24 42 0f b6 04 20 <84> c0 0f 85 92 1c 00 00 4c 89 7c 24 10 4c 89 6c 24 50 0f b6 1b 48 [ 1036.531622][ C0] RSP: 0018:ffffc90004fef3c0 EFLAGS: 00000a07 [ 1036.537729][ C0] RAX: 0000000000000000 RBX: ffffc90004fef49d RCX: 0000000080000001 [ 1036.545735][ C0] RDX: 0000000000000000 RSI: ffffffff8c291100 RDI: ffffffff8c2910c0 [ 1036.553736][ C0] RBP: 1ffff920009fde94 R08: 0000000000000000 R09: 0000000000000000 [ 1036.561742][ C0] R10: ffffc90004fef4b8 R11: ffffffff81b10630 R12: dffffc0000000000 [ 1036.569742][ C0] R13: ffffffff8176a21f R14: ffffc90004fef468 R15: 1ffff920009fde8d [ 1036.577747][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1036.582898][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1036.589111][ C0] ? call_rcu+0x43/0x8b0 [ 1036.593383][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1036.598535][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1036.604726][ C0] arch_stack_walk+0x11b/0x150 [ 1036.609526][ C0] ? call_rcu+0x43/0x8b0 [ 1036.613804][ C0] ? fill_pool+0x165/0x610 [ 1036.618263][ C0] stack_trace_save+0xa9/0x100 [ 1036.623068][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1036.628490][ C0] ? stack_depot_save_flags+0x33/0x800 [ 1036.633996][ C0] ? fill_pool+0x165/0x610 [ 1036.638459][ C0] kasan_save_track+0x3e/0x80 [ 1036.643175][ C0] ? kasan_save_track+0x3e/0x80 [ 1036.648067][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1036.653125][ C0] ? kmem_cache_alloc_noprof+0x2b8/0x650 [ 1036.658813][ C0] ? fill_pool+0x165/0x610 [ 1036.663262][ C0] ? debug_object_activate+0x37e/0x410 [ 1036.668760][ C0] ? call_rcu+0x43/0x8b0 [ 1036.673065][ C0] ? fill_pool+0x165/0x610 [ 1036.677512][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1036.682404][ C0] kmem_cache_alloc_noprof+0x2b8/0x650 [ 1036.687911][ C0] ? fill_pool+0x165/0x610 [ 1036.692388][ C0] ? kmem_cache_alloc_noprof+0x156/0x650 [ 1036.698063][ C0] fill_pool+0x165/0x610 [ 1036.702350][ C0] ? __pfx_fill_pool+0x10/0x10 [ 1036.707153][ C0] ? rcu_is_watching+0x15/0xb0 [ 1036.711971][ C0] ? debug_object_activate+0x355/0x410 [ 1036.717469][ C0] debug_object_activate+0x37e/0x410 [ 1036.722796][ C0] ? __pfx_rcu_free_slab+0x10/0x10 [ 1036.727951][ C0] call_rcu+0x43/0x8b0 [ 1036.732077][ C0] ? rcu_is_watching+0x15/0xb0 [ 1036.736874][ C0] ? trace_irq_enable+0x3b/0x140 [ 1036.741858][ C0] __slab_free+0x274/0x2c0 [ 1036.746319][ C0] ? qlist_free_all+0x8e/0x100 [ 1036.751131][ C0] qlist_free_all+0x99/0x100 [ 1036.755762][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1036.761267][ C0] __kasan_kmalloc+0x22/0xb0 [ 1036.765904][ C0] __kmalloc_cache_noprof+0x318/0x660 [ 1036.771319][ C0] ? ref_tracker_alloc+0x15b/0x4b0 [ 1036.776469][ C0] ? __kmalloc_cache_noprof+0x157/0x660 [ 1036.782077][ C0] ref_tracker_alloc+0x15b/0x4b0 [ 1036.787055][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1036.792558][ C0] ? trace_kmalloc+0x2a/0xf0 [ 1036.797197][ C0] ? __kmalloc_noprof+0x379/0x750 [ 1036.802263][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 1036.807594][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 1036.812920][ C0] get_net_track+0x16e/0x230 [ 1036.817557][ C0] sk_alloc+0x1da/0x390 [ 1036.821761][ C0] inet_create+0x7a9/0xff0 [ 1036.826224][ C0] ? inet_create+0x9d/0xff0 [ 1036.830769][ C0] __sock_create+0x4b3/0x9d0 [ 1036.835404][ C0] __sys_socket+0xd6/0x1b0 [ 1036.839854][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.845959][ C0] __x64_sys_socket+0x7a/0x90 [ 1036.850671][ C0] do_syscall_64+0x174/0x580 [ 1036.855305][ C0] ? trace_irq_disable+0x3b/0x140 [ 1036.860374][ C0] ? clear_bhb_loop+0x40/0x90 [ 1036.865087][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.871098][ C0] RIP: 0033:0x7f970119e6c7 [ 1036.875543][ C0] RSP: 002b:00007ffe678a1338 EFLAGS: 00000202 ORIG_RAX: 0000000000000029 [ 1036.884008][ C0] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f970119e6c7 [ 1036.892007][ C0] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000002 [ 1036.900004][ C0] RBP: 00007ffe678a1a3c R08: 0000000000000000 R09: 0000000000000000 [ 1036.908007][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000013e [ 1036.916008][ C0] R13: 00000000000927c0 R14: 00000000000dd2be R15: 00007ffe678a1a90 [ 1036.924022][ C0] [ 1036.927159][ C0] rcu: rcu_preempt kthread starved for 1691 jiffies! g220673 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1036.938390][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1036.948384][ C0] rcu: RCU grace-period kthread stack dump: [ 1036.954289][ C0] task:rcu_preempt state:R running task stack:28040 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1036.967834][ C0] Call Trace: [ 1036.971138][ C0] [ 1036.974105][ C0] __schedule+0x17d9/0x56c0 [ 1036.978660][ C0] ? rcu_is_watching+0x15/0xb0 [ 1036.983466][ C0] ? rcu_is_watching+0x15/0xb0 [ 1036.988302][ C0] ? __pfx___schedule+0x10/0x10 [ 1036.993187][ C0] ? schedule+0x90/0x360 [ 1036.997465][ C0] ? rcu_is_watching+0x15/0xb0 [ 1037.002265][ C0] ? lock_release+0x4b/0x3c0 [ 1037.006901][ C0] schedule+0x164/0x360 [ 1037.011102][ C0] schedule_timeout+0x152/0x2c0 [ 1037.015983][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1037.021388][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1037.026713][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1037.032548][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1037.038139][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1037.043040][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1037.049317][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1037.054637][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1037.059873][ C0] ? trace_irq_enable+0x3b/0x140 [ 1037.064851][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1037.069539][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1037.074778][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1037.079753][ C0] ? __kthread_parkme+0x196/0x1f0 [ 1037.084907][ C0] kthread+0x388/0x470 [ 1037.089008][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1037.094249][ C0] ? __pfx_kthread+0x10/0x10 [ 1037.098864][ C0] ret_from_fork+0x514/0xb70 [ 1037.103494][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.108634][ C0] ? __switch_to+0xc89/0x1420 [ 1037.113352][ C0] ? __pfx_kthread+0x10/0x10 [ 1037.117969][ C0] ret_from_fork_asm+0x1a/0x30 [ 1037.122789][ C0] [ 1037.125844][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1037.132192][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1037.137432][ C1] NMI backtrace for cpu 1 [ 1037.137449][ C1] CPU: 1 UID: 0 PID: 14884 Comm: kworker/u8:25 Not tainted syzkaller #0 PREEMPT(full) [ 1037.137469][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1037.137481][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 1037.137504][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x8/0xf0 [ 1037.137530][ C1] Code: c3 cc cc cc cc cc 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 46 08 <48> 8d 48 ff 48 89 c2 48 31 ca 48 39 ca 0f 86 c6 00 00 00 f3 48 0f [ 1037.137546][ C1] RSP: 0018:ffffc90000a08278 EFLAGS: 00000246 [ 1037.137561][ C1] RAX: 0000000000000020 RBX: ffffc90000a08398 RCX: ffff888034689f00 [ 1037.137574][ C1] RDX: 0000000000000100 RSI: ffffffff8ff2e2e0 RDI: 0000000000000003 [ 1037.137586][ C1] RBP: 0000000061f4bcf0 R08: 00000000000002ff R09: 0200000000000000 [ 1037.137599][ C1] R10: 00000000000002ff R11: 0200000000000000 R12: 000000001a2615d6 [ 1037.137612][ C1] R13: 00000000024db2f0 R14: 0000000000000003 R15: ffffc90000a0838c [ 1037.137625][ C1] FS: 0000000000000000(0000) GS:ffff88812537c000(0000) knlGS:0000000000000000 [ 1037.137640][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.137652][ C1] CR2: 00005555931024e8 CR3: 0000000079b46000 CR4: 00000000003526f0 [ 1037.137669][ C1] Call Trace: [ 1037.137675][ C1] [ 1037.137683][ C1] jhash2+0x196/0x2f0 [ 1037.137709][ C1] br_mdb_ip_get_rcu+0x10a/0x650 [ 1037.137741][ C1] br_mdb_entry_skb_get+0x587/0x7c0 [ 1037.137769][ C1] ? __pfx_br_mdb_entry_skb_get+0x10/0x10 [ 1037.137797][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 1037.137816][ C1] ? rcu_is_watching+0x15/0xb0 [ 1037.137837][ C1] ? trace_irq_enable+0x3b/0x140 [ 1037.137863][ C1] br_handle_frame_finish+0xde6/0x1990 [ 1037.137886][ C1] ? skb_ext_add+0x148/0x8e0 [ 1037.137916][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1037.137943][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 1037.137961][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 1037.137979][ C1] ? nf_hook_slow+0x176/0x220 [ 1037.137999][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1037.138022][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 1037.138045][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1037.138076][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1037.138100][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1037.138124][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1037.138150][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1037.138174][ C1] ? rcu_is_watching+0x15/0xb0 [ 1037.138195][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1037.138220][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1037.138247][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1037.138273][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1037.138298][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1037.138325][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1037.138350][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 1037.138377][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1037.138399][ C1] br_handle_frame+0x127f/0x1510 [ 1037.138433][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1037.138458][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1037.138481][ C1] ? trace_irq_enable+0x3b/0x140 [ 1037.138508][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 1037.138531][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 1037.138555][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1037.138577][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 1037.138601][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1037.138621][ C1] ? ip6_rcv_finish+0x265/0x280 [ 1037.138643][ C1] ? NF_HOOK+0x336/0x3c0 [ 1037.138669][ C1] ? lock_acquire+0x5f/0x350 [ 1037.138694][ C1] ? process_backlog+0x3c3/0x1860 [ 1037.138718][ C1] ? process_backlog+0x3c3/0x1860 [ 1037.138740][ C1] process_backlog+0x706/0x1860 [ 1037.138764][ C1] ? process_backlog+0x3c3/0x1860 [ 1037.138792][ C1] __napi_poll+0xaa/0x330 [ 1037.138813][ C1] net_rx_action+0x61d/0xf50 [ 1037.138840][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1037.138875][ C1] handle_softirqs+0x225/0x840 [ 1037.138899][ C1] ? do_softirq+0x76/0xd0 [ 1037.138923][ C1] ? __alloc_skb+0x189/0x7a0 [ 1037.138945][ C1] ? __alloc_skb+0x189/0x7a0 [ 1037.138966][ C1] do_softirq+0x76/0xd0 [ 1037.138987][ C1] [ 1037.138993][ C1] [ 1037.139000][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1037.139022][ C1] __alloc_skb+0x1ad/0x7a0 [ 1037.139046][ C1] nsim_dev_trap_report_work+0x25f/0xb40 [ 1037.139071][ C1] ? process_scheduled_works+0xa20/0x14e0 [ 1037.139093][ C1] process_scheduled_works+0xa8e/0x14e0 [ 1037.139128][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1037.139149][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 1037.139174][ C1] ? assign_work+0x3cf/0x5d0 [ 1037.139197][ C1] worker_thread+0xa47/0xfb0 [ 1037.139226][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1037.139254][ C1] kthread+0x388/0x470 [ 1037.139270][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1037.139291][ C1] ? __pfx_kthread+0x10/0x10 [ 1037.139308][ C1] ret_from_fork+0x514/0xb70 [ 1037.139326][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1037.139342][ C1] ? __switch_to+0xc89/0x1420 [ 1037.139367][ C1] ? __pfx_kthread+0x10/0x10 [ 1037.139384][ C1] ret_from_fork_asm+0x1a/0x30 [ 1037.139417][ C1] [ 1038.797964][ C0] net_ratelimit: 29935 callbacks suppressed [ 1038.797988][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.798911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.804565][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.816532][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.828489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.841248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:de:e8:39:51:a3:23, vlan:0) [ 1038.852407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1038.864426][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1038.876405][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1038.888410][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.807906][ C0] net_ratelimit: 38637 callbacks suppressed [ 1043.807935][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1043.808107][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.814573][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.826480][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.838540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.850452][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.862566][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.874301][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.886386][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1043.898296][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)