last executing test programs: 42.845028676s ago: executing program 4 (id=4790): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000f8ff00b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.886708488s ago: executing program 4 (id=4800): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="19000000040000000400000002000000000000", @ANYRES32=0x1, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c0002", @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000100)=""/7}, 0x20) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @local}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/153, 0x99}, 0xdb31}], 0x1, 0x40002102, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES8=r1, @ANYBLOB="7d2a55dd73c1832200d9492ac06d91e713743b43e574024ff1a7a806e6cc09c13c8c649950d85bc4c26a58f131894245", @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) close(0x3) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 31.826503058s ago: executing program 4 (id=4844): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$nci(0xffffffffffffff9c, &(0x7f0000001640), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x2) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000340)=0x152, 0x4) setsockopt$inet6_int(r2, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="d0000000120067fb27bd7000ffdbdf2500000000", @ANYRES32, @ANYBLOB="820000007002080008000f00080000001800128008000100736974000c0002", @ANYBLOB="0400140008001d000200000008002e"], 0xd0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4800) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, 0x0, &(0x7f0000000100)=""/7}, 0x20) sendmmsg$inet6(r2, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @local}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r2, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=""/153, 0x99}, 0xdb31}], 0x1, 0x40002102, 0x0) r5 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/13], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2e}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES8=0x0, @ANYRES8=r1, @ANYBLOB="7d2a55dd73c1832200d9492ac06d91e713743b43e574024ff1a7a806e6cc09c13c8c649950d85bc4c26a58f131894245", @ANYRES32=0x0, @ANYRES32, @ANYRES8], 0x50) close(0x3) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x4e21, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1ff}, 0x1c) sendmsg$sock(r5, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 29.365535128s ago: executing program 4 (id=4862): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x228}], 0x1, 0x0, 0x0, 0x0) close(0x3) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000002c0)={0x8408001e}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000001a80)}, 0x9}], 0x1, 0x100, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00011100ffffffffffffff81"], 0x30}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}]}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x0, 0x0, r8, 0xf19f7e5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r9, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000001200010029bd7000ffdbdf2500167980", @ANYRES32=0x0, @ANYBLOB="4db20200201a0100140003006e657464657673696d30"], 0x70}, 0x1, 0x0, 0x0, 0xc1}, 0x880) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8}, 0x50) socket$packet(0x11, 0x1, 0x300) r11 = socket(0x10, 0x3, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r12, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) sendmmsg(r11, &(0x7f0000000000), 0x4000000000001f2, 0x2000000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r10}, @ldst={0x1, 0x0, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x94) 27.536865471s ago: executing program 4 (id=4880): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000240)="01", 0x1}], 0x1}, 0x240448c1) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x6}, @TCA_TBF_PARMS={0x28, 0x1, {{0x40, 0x1, 0xb, 0xdc8a, 0x800, 0xc}, {0x2, 0x0, 0x9, 0xa272, 0x4, 0x7fff}, 0xfffffbff, 0xe6d7, 0x1bc4}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x25c17e713ef0760f}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newtclass={0x24, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x1, 0xfff1}, {0x1, 0xfff1}}}, 0x24}}, 0x0) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r6}, 0x8) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x8, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r2, @ANYRES8=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r8, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f0000000200)=r9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r10, 0xffffffffffffffff}, &(0x7f0000000500)=0x2000000, &(0x7f0000000540)=r9}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000014c0)={r11, &(0x7f00000017c0)="80006d", 0x0}, 0x20) sendto$packet(r2, &(0x7f0000000340)="05036d1ee8fe091c6202a0ffffffff0060031200000088fb143488a87f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 23.807448156s ago: executing program 2 (id=4922): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b70300000000000085000000d4000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.675348557s ago: executing program 2 (id=4924): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x420, 0x388, 0x98, 0x98, 0x300, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@private=0xa010101, @remote, 0x0, 0x0, 'sit0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2, 0x0, 0x29}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'sit0\x00', 'veth1_virt_wifi\x00', 0x2, 0x4, 0x5, 0x9, 0x1d1, 0x8, {0x4}, {0x9}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x10, 0x7, 0x1100, 0xd]}, {0x0, [0x2, 0x0, 0x0, 0x6, 0x4, 0x1]}}}}, {{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@private=0xa010102, [0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xff, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}, [0xff000000, 0xff000000, 0x0, 0xffffff00], 0x3ff, 0x6d43, 0x88, 0x4e20, 0x4e24, 0x4e23, 0x4e20, 0x1801, 0x36f4}, 0x140, 0x900}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x140, 0x0, [0x11, 0x40, 0x6, 0x31, 0x19, 0x2a, 0x20, 0x2f, 0x1b, 0x23, 0x5, 0x2, 0x21, 0xc, 0x21, 0x40], 0x1, 0x10, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 23.572395285s ago: executing program 3 (id=4926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000030000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 23.496663038s ago: executing program 2 (id=4928): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYRESHEX, @ANYRES32=0x0], 0x28}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00494500000000000000000000467c74959400000000e1aca945cc15000000d12765aa80930966398f12e173dd56ebebb54640b918ef69e46d52799c28f075e43b78c2caa809f4", @ANYBLOB="0300"/20, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="00000000000000000200"/28], 0x50) close(r1) socketpair$unix(0x1, 0xabd3abd76163a2fd, 0x0, &(0x7f0000000200)) (async) socketpair$unix(0x1, 0xabd3abd76163a2fd, 0x0, &(0x7f0000000200)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000800)=@raw={'raw\x00', 0x21, 0x3, 0x280, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1b0, 0xffffffff, 0xffffffff, 0x1b0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0x8fff, 0x3}}}, {{@ipv6={@remote, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [0xff0000ff], 'batadv0\x00', 'veth1\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x1}, {0x1, 0x1, 0x5}, {0x1, 0x3, 0x6}, 0xfffffffa, 0xfffffff7}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket(0x1e, 0x5, 0x0) (async) socket(0x1e, 0x5, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), 0xffffffffffffffff) socket$kcm(0xa, 0x4, 0x0) (async) socket$kcm(0xa, 0x4, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept(r6, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f1", 0x17}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) (async) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f1", 0x17}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r7, &(0x7f000000b680)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, 0x0}, 0x840f0) (async) sendmsg$kcm(r5, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, 0x0}, 0x840f0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) (async) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) close(0x3) (async) close(0x3) 23.493630325s ago: executing program 1 (id=4929): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000880)=@newsa={0x158, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x70bd2d, 0x70bd2b, 0x70bd2b, 0x70bd2b, 0x8, [0x5]}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40}, 0x24000058) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000080)={0x0, 0xfffffdbf, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2d, 0x0, {0x1b}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x31}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="380000000314334427bd7000fbdbdf250900020000007a31000000000800410073697700140033"], 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) r6 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$INCFS_IOC_FILL_BLOCKS(r6, 0x80106720, &(0x7f0000000740)={0x4, &(0x7f00000006c0)=[{0x8, 0x0, &(0x7f00000000c0)}, {0xd, 0x6, &(0x7f0000000140)="47b57133058b", 0x0, 0x1}, {0x7fffffff, 0xb9, &(0x7f0000000580)="f49ef0d5c5fc7101d4392ffc6d68b82d94f31c103bf7bc25c831eeeb1b492b79c11eaacbf66f7b76cc56f771fac998881bf9232f19688ab1b5d1a8e623269b3992bd9cf32501ee7022708cdd9fa3a40b77ef1f3192d4499322e90ea1033f02d5d846a59e27fdb0a383c2d51240c3131ec2d5cb5eb82e06272bc05d4cdfff08efa677f807c2e309ca536017eb93df337f93f1781620fefd339341a80e1badccd761340995b5bd0e15c6334359c71fc978c4b0b2351a0aa66d6a", 0x1, 0x1}, {0x9db, 0x76, &(0x7f0000000640)="0758c615b889dd14b336d1bfbfbaa9c903564d2b38f208ca1eb06a9407d72545ddd8230bf7f18233e24f5a49342bf77283e172b2c8a04a6cd2aff62f96abc5be51daca11af961733e2a3707257ad2cf0e829ab404bf0ab4c4330a83172eb117fbaae92f0cbd5d8d225bd57d48ba86c099daa65db9213"}]}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)={0x64, r4, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_KEY={0x48, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "403a050c5baee2004ef2b6d713459a7a"}, @NL802154_KEY_ATTR_ID={0x28, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x300}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x555d}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x64}}, 0x0) 23.445536997s ago: executing program 3 (id=4930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b40)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x20}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) 23.224739933s ago: executing program 3 (id=4932): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000002c0)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000001880)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000004c0)="e46d12", 0x3}], 0x4}], 0x1, 0x40800) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x3, 0x3, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x2b, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000180)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x8000000, 0x0, 0xff, 0x1, 0x0, 0x1000}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x8000000, 0x2, 0x0, 0x0, 0x3, 0x200}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) clock_gettime(0xfffffffffffffffd, &(0x7f0000000480)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x1b, &(0x7f0000000980)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000000107000004000000186600000b000000000000000500", @ANYRES32=0x1, @ANYBLOB="000000000000b5c963a47f00000000008500000086000000d0080000f0ffffff18110000", @ANYRESHEX=r5, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bf8200000000000007020000f8ffffffb703000008000000b73620ad96b1024448e029f05f8b66df216bd2", @ANYRES32, @ANYBLOB="0000000000000000b7020000000000008500000086000000180000000700000000000000ffffffff85100000fbffffff9500000000000000"], 0x0, 0x6, 0xbd, &(0x7f0000000500)=""/189, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x2, 0xf, 0x8, 0xfffffffa}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000640)=[0x1, 0x1, 0x1, 0xffffffffffffffff], &(0x7f00000006c0)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x1, 0x3, 0xe, 0x4}, {0x5, 0x6, 0xb, 0x9}], 0x10, 0x1ff}, 0x94) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) close(r7) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x7c}}, 0x2000c450) setsockopt$sock_attach_bpf(r8, 0x1, 0x10, &(0x7f0000001280), 0x4) bind$unix(r7, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) recvmsg(r8, 0x0, 0x2002) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000900)={@map=r7, 0x2e, 0x1, 0xba22, &(0x7f0000000800), 0x0, 0x0, &(0x7f0000000840)=[0x0], 0x0, &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80021000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)=@delchain={0x2c, 0x65, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xfff1}, {0xe, 0x8}, {0xd, 0x14}}, [@TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20048080) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000940)={@ifindex, r6, 0x2, 0x8, 0x0, @void, @value, @void, @void, r9}, 0x20) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r11, 0x0, 0xd1, &(0x7f0000000000)=0xb, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x10, 0x9, 0x40, {{0x9, 0x4, 0x2, 0x4, 0x24, 0x66, 0x0, 0x9, 0x0, 0x0, @multicast1, @broadcast, {[@generic={0x88, 0xb, "409811ececffc1d450"}, @rr={0x7, 0x3, 0x42}]}}}}}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x44}, 0x1, 0x2000000000000000}, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000680)=ANY=[@ANYRES32=0x1, @ANYRES32=r2, @ANYBLOB="335607bcef7ab235", @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) 23.077716664s ago: executing program 1 (id=4935): socket(0x11, 0x2, 0xffc) socket$nl_route(0x10, 0x3, 0x0) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x2, 0x2, 0x3, 0x9, 0x800, 0x1, 0x0, 0x86c}}}}]}, 0x58}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'bridge_slave_1\x00'}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000580)={&(0x7f0000000080)=@deltclass={0x24, 0x29, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0xe}, {0x3, 0xa}, {0xffff, 0x10}}, [@TCA_RATE={0x0, 0x5, {0x7, 0xd9}}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008091}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) r11 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r11, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r11, 0x29, 0x15, &(0x7f00000000c0), 0xb9) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, 0x0) epoll_create1(0x0) 22.613325115s ago: executing program 4 (id=4937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x9, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (fail_nth: 6) 18.838340226s ago: executing program 3 (id=4938): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x23, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x9}}, 0x0) (async) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x9}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffc0, 0x0, 0x0, 0x0, 0xa}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0xa0900}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280", @ANYRES8=r2], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000001c0)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x7, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x8000}, [@map_fd={0x18, 0x1, 0x1, 0x0, r4}, @exit={0x95, 0x0, 0x7b00}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x50}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c00000010000304004000000021000000000400", @ANYRES32=r5, @ANYBLOB="46060900000000001c00128009000100626f6e64000000000c00028005000d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000200), 0x4) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r7, 0x84, 0xc, &(0x7f0000000200), 0x4) unshare(0x20040600) pipe(&(0x7f0000000240)) (async) pipe(&(0x7f0000000240)={0xffffffffffffffff}) tee(r8, r8, 0x200, 0x0) getsockname(r7, 0x0, &(0x7f00000002c0)) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x40}}, 0x20008800) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 18.748485111s ago: executing program 2 (id=4940): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000070000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32=r2], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 18.650338486s ago: executing program 2 (id=4942): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80100, 0x0) close(r6) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}}, 0x4890) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x50bd2d, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xfffc}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x7, 0x8005, 0x5, 0xfffffdff, 0x4006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 18.500988158s ago: executing program 0 (id=4943): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000003800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3eb4}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.401726055s ago: executing program 0 (id=4944): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000009000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 18.386894159s ago: executing program 1 (id=4945): socket$inet(0x2, 0x1, 0x100) close(0x3) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200)=0xf, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x11, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f0000000080)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x6, 0xd9, &(0x7f0000000f80)=""/217, 0x41100, 0x8, '\x00', 0x0, 0x0, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) 18.184338619s ago: executing program 1 (id=4946): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) syz_emit_ethernet(0xbe, &(0x7f0000000080)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0xfd, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6c, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x36}, {[@cipso={0x86, 0x71, 0x0, [{0x0, 0xc, "e256b28c04000000fb52"}, {0x0, 0x9, "789607675ca638"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x6, 0x7, "cfa11cab1a"}, {0x0, 0x10, "c600"/14}, {0x0, 0xa, "65807fe97612fe86"}, {0x0, 0x12, "73bc2300ad9d19a30000000000000000"}, {0x6, 0xc, "c8f46976e79e56c7a95e"}]}, @cipso={0x86, 0xc, 0x2, [{0x1, 0x6, "7f36c525"}]}]}}}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x805) sendmsg$can_bcm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x8004) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r5, 0x0, 0xfffffffffffffcee, 0xffffffffffffff0b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$can_bcm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x4000011}, 0x2004c800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "713686b7664e40e55aaff1ab0d83d6460459649ae1386d59e8b18d03c9a12d58c765ab6a4e19fdb06bccadd2e6dd7b9f350d770baa41772ab98b79c788844c368e"}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) 18.184100902s ago: executing program 0 (id=4947): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000e00)=ANY=[@ANYBLOB="ec000000210001000040000000000000fc0200000000000000000000000000000000000000000000000000000000000100000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c0011007f000001000000000000000000000000fc000060000000000000000000000001fc020000000000000000000000000000fe8000000001000000000000000000aa33000000fffffffb0200020000000000000000000000ffff7f000001fc0200000000000000"], 0xec}, 0x1, 0x0, 0x0, 0x40}, 0x0) 18.134373035s ago: executing program 0 (id=4948): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0x10e0}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001680)={0x3, 0x1c, &(0x7f0000001740)=ANY=[@ANYRES16=r0, @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRES32=r2, @ANYBLOB="006b7c57674b4ca2a74daf0b1a00000000000000b70500000800000046080100000000007ea00000000000005608c500000800008500000081000000b70000000095000000"], &(0x7f0000001500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008004) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000140)={0x0, {0x2, 0x4e24, @private=0xa010100}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x19}}, {0x2, 0x4e22, @local}, 0x83, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='syzkaller0\x00', 0x9, 0x9, 0x4}) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000001840)="ebe3a047b73eabf0d91c02e88280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9884e7cb51726b360fbb37b4fe035bbb0958730484d29832aeeec098b2d27ebb48efede5c6bfac54a045912c04c01e832c74ead10117e3d7b0a24a65865f8900cc8bc3792066d56f7ede64ae65212361c800f6c", 0x7f}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482abe97b4dc33a47d3a158da988456d30026b433187617ea1ef8dec56eeb636f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1050038cd0b157653c5e87828c993778d1605b818af7d0f92962c8050924104d2da8b968000000000000000c436712e17d3fdc928f02f3dbad19d3e66eebda27a3f3f46ef4511cee26d7b4824184700"/201, 0xc9}], 0x3, &(0x7f0000000380), 0x0, 0x20000050}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000640)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(anubis)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmsg$OSF_MSG_ADD(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x175c}, 0x1, 0x0, 0x0, 0x4044084}, 0x1dc8b08251aa3334) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYRES16=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x29}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4048014) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 17.718259042s ago: executing program 3 (id=4949): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x24000000}, 0x440d0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x8890}, 0x20000000) recvmmsg(r0, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000780)=""/211, 0xd3}, {&(0x7f0000000200)=""/129, 0x81}, {&(0x7f0000001640)=""/4089, 0xff9}, {&(0x7f0000000340)=""/224, 0xe0}, {&(0x7f00000000c0)=""/132, 0x84}, {&(0x7f0000000440)=""/110, 0x6e}, {&(0x7f00000002c0)=""/115, 0x73}], 0x7}, 0x4}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x2020, 0x0) 17.627753771s ago: executing program 2 (id=4950): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "56db7a2700f91000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "ffff19df", "df0701bf7b6c7e81"}, 0x38) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r8 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r8, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$sock_buf(r8, 0x1, 0x1c, 0x0, &(0x7f0000000900)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r11 = accept4(r10, 0x0, 0x0, 0x80800) sendmmsg$alg(r11, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r11, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r7}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x4000040}, 0x4008011) syz_emit_ethernet(0x82, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x4, 0x0, 0xfe, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x5, 0x1, 0x0, 0xe0, 0x1, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, {[@cipso={0x86, 0x6, 0x3}, @timestamp_prespec={0x44, 0x3c, 0xfd, 0x3, 0x4, [{@multicast1, 0x5102}, {@dev={0xac, 0x14, 0x14, 0x14}}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@rand_addr=0x64010100, 0xfffffffe}, {@empty, 0x1}, {@remote, 0x4}, {@multicast1}]}]}}}}}}}, 0x0) 17.624756276s ago: executing program 0 (id=4951): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000c40)=@mangle={'mangle\x00', 0x44, 0x6, 0x558, 0x420, 0x388, 0x98, 0x98, 0x1d00, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@private=0xa010101, @remote, 0x0, 0x0, 'sit0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x2, 0x0, 0x29}, 0x0, 0x100, 0x160, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'sit0\x00', 'veth1_virt_wifi\x00', 0x2, 0x4, 0x5, 0x9, 0x1d1, 0x8, {0x4}, {0x9}}}, @inet=@rpfilter={{0x28}, {0xb}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x10, 0x7, 0x1100, 0xd]}, {0x0, [0x2, 0x0, 0x0, 0x6, 0x4, 0x1]}}}}, {{@uncond, 0x0, 0x130, 0x190, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@private=0xa010102, [0xffffffff], @ipv4=@multicast1, [0xffffffff, 0xff000000, 0xffffff00, 0xffffff00], @ipv4=@multicast1, [0xff, 0xff000000, 0xffffffff, 0xffffffff], @ipv4=@dev={0xac, 0x14, 0x14, 0x2c}, [0xff000000, 0xff000000, 0x0, 0xffffff00], 0x3ff, 0x6d43, 0x88, 0x4e20, 0x4e24, 0x4e23, 0x4e20, 0x1801, 0x36f4}, 0x140, 0x900}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, 0x140, 0x0, [0x11, 0x40, 0x6, 0x31, 0x19, 0x2a, 0x20, 0x2f, 0x1b, 0x23, 0x5, 0x2, 0x21, 0xc, 0x21, 0x40], 0x1, 0x10, 0x8}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x8000, 0x400, @remote, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5b8) 17.536877713s ago: executing program 3 (id=4952): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f0000000300)={r0, &(0x7f0000000100)='memory.events\x00', 0x2, &(0x7f0000000180)={@align=0x3, {0x4, 0x0, 0x1, 0x81}}, 0xc, &(0x7f00000001c0), &(0x7f00000002c0)=0x3}) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@fallback=r1, 0x6, 0x1, 0x7014, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0], &(0x7f0000000440)=[0x0, 0x0]}, 0x40) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000008000"], 0x48) getsockopt$inet_mreqn(r3, 0x0, 0xd8c26603db724597, &(0x7f00000004c0)={@initdev, @broadcast, 0x0}, &(0x7f00000005c0)=0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x11, &(0x7f0000000740)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newlink={0x4c, 0x10, 0x401, 0x0, 0xf, {0x0, 0x0, 0x0, 0x0, 0x40000, 0xce5ba66a3b447375}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x6d}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x9}]}}}]}, 0x4c}}, 0x40000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) write$cgroup_int(r4, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r3, 0x0) close(0x3) 17.464621122s ago: executing program 0 (id=4953): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000800000000000061"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, r0, 0x8, 0x0, 0x0, 0x14}, 0x94) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0xc, 0x2, 0x2, 0x1, 0x28}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0x40305839, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x21, &(0x7f0000000000)=0x2, 0x2) sendmmsg(r3, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 17.160030045s ago: executing program 1 (id=4954): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901ffd774f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000640)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) sendmsg$key(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x9, 0x1, 0x3, 0x11, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x1, 0x0, 0x6e6bb1, 0x1, {0x6, 0x3c, 0x5, 0x10, 0x0, 0x8, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@dev={0xac, 0x14, 0x14, 0x2f}}}, @sadb_address={0x3, 0x7, 0x2b, 0x0, 0x0, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x32}}}, @sadb_ident={0x2, 0xb, 0x779, 0x0, 0x84d}, @sadb_spirange={0x2, 0x10, 0x4d4, 0x4d5}]}, 0x88}}, 0x0) 17.025546826s ago: executing program 1 (id=4955): bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000002500)={0xffffffffffffffff, 0x0, 0x0}, 0x20) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000140)=0x3, 0x3) (async) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000140)=0x3, 0x3) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002d80)={0x0, 0x0, 0x0, 0x0, 0x6, r4, 0x4}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r6, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r3}, 0x20) close(r6) (async) close(r6) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESDEC=r7, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r10, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYRES64=r0], 0xfc}}, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) 0s ago: executing program 32 (id=4937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0x9, 0xfff1}, {0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) (fail_nth: 6) kernel console output (not intermixed with test programs): 614.586192][T20880] netlink_sendmsg+0x6c0/0xb40 [ 614.586222][T20880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.586247][T20880] ? aa_sock_msg_perm+0xf1/0x1b0 [ 614.586271][T20880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.586291][T20880] sock_sendmsg_nosec+0x13a/0x180 [ 614.586315][T20880] ____sys_sendmsg+0x54e/0x850 [ 614.586338][T20880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.586364][T20880] ? import_iovec+0x73/0xa0 [ 614.586389][T20880] ___sys_sendmsg+0x2a5/0x360 [ 614.586409][T20880] ? __lock_acquire+0x683/0x2cf0 [ 614.586434][T20880] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.586487][T20880] ? __fget_files+0x2a/0x420 [ 614.586520][T20880] ? __fget_files+0x3a2/0x420 [ 614.586549][T20880] __x64_sys_sendmsg+0x1b1/0x290 [ 614.586572][T20880] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.586610][T20880] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.586629][T20880] do_syscall_64+0x174/0x580 [ 614.586652][T20880] ? trace_irq_disable+0x3b/0x140 [ 614.586672][T20880] ? clear_bhb_loop+0x70/0xc0 [ 614.586692][T20880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.586709][T20880] RIP: 0033:0x7f13a339e0d9 [ 614.586724][T20880] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.586738][T20880] RSP: 002b:00007f13a15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.586757][T20880] RAX: ffffffffffffffda RBX: 00007f13a3625fa0 RCX: 00007f13a339e0d9 [ 614.586769][T20880] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 614.586779][T20880] RBP: 00007f13a15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 614.586789][T20880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.586798][T20880] R13: 00007f13a3626038 R14: 00007f13a3625fa0 R15: 00007ffd91ceedc8 [ 614.586827][T20880] [ 615.052198][T20890] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3860'. [ 615.110521][T20891] hsr0: entered promiscuous mode [ 615.743459][T20903] netlink: 'syz.2.3866': attribute type 8 has an invalid length. [ 615.826153][T20913] lo speed is unknown, defaulting to 1000 [ 615.849823][T20913] virt_wifi0 speed is unknown, defaulting to 1000 [ 616.048008][T20917] netlink: 'syz.1.3870': attribute type 7 has an invalid length. [ 616.064382][T20917] netlink: 'syz.1.3870': attribute type 8 has an invalid length. [ 616.088844][T20917] netlink: 'syz.1.3870': attribute type 13 has an invalid length. [ 616.631164][T20923] FAULT_INJECTION: forcing a failure. [ 616.631164][T20923] name failslab, interval 1, probability 0, space 0, times 0 [ 616.690726][T20923] CPU: 0 UID: 0 PID: 20923 Comm: syz.1.3872 Not tainted syzkaller #0 PREEMPT(full) [ 616.690752][T20923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 616.690762][T20923] Call Trace: [ 616.690769][T20923] [ 616.690777][T20923] dump_stack_lvl+0xe8/0x150 [ 616.690805][T20923] should_fail_ex+0x40c/0x560 [ 616.690831][T20923] should_failslab+0xa8/0x100 [ 616.690856][T20923] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 616.690878][T20923] ? skb_clone+0x212/0x3a0 [ 616.690898][T20923] ? skb_clone+0x212/0x3a0 [ 616.690924][T20923] skb_clone+0x212/0x3a0 [ 616.690948][T20923] __netlink_deliver_tap+0x413/0x860 [ 616.690982][T20923] ? netlink_deliver_tap+0x2e/0x1b0 [ 616.691005][T20923] netlink_deliver_tap+0x19c/0x1b0 [ 616.691027][T20923] netlink_unicast+0x77f/0x940 [ 616.691057][T20923] netlink_sendmsg+0x813/0xb40 [ 616.691088][T20923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.691113][T20923] ? aa_sock_msg_perm+0xf1/0x1b0 [ 616.691136][T20923] ? __pfx_netlink_sendmsg+0x10/0x10 [ 616.691156][T20923] sock_sendmsg_nosec+0x13a/0x180 [ 616.691183][T20923] ____sys_sendmsg+0x54e/0x850 [ 616.691208][T20923] ? __pfx_____sys_sendmsg+0x10/0x10 [ 616.691238][T20923] ? import_iovec+0x73/0xa0 [ 616.691264][T20923] ___sys_sendmsg+0x2a5/0x360 [ 616.691283][T20923] ? __lock_acquire+0x683/0x2cf0 [ 616.691309][T20923] ? __pfx____sys_sendmsg+0x10/0x10 [ 616.691371][T20923] ? __fget_files+0x2a/0x420 [ 616.691391][T20923] ? __fget_files+0x3a2/0x420 [ 616.691420][T20923] __x64_sys_sendmsg+0x1b1/0x290 [ 616.691444][T20923] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 616.691482][T20923] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.691501][T20923] do_syscall_64+0x174/0x580 [ 616.691523][T20923] ? trace_irq_disable+0x3b/0x140 [ 616.691543][T20923] ? clear_bhb_loop+0x70/0xc0 [ 616.691564][T20923] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.691581][T20923] RIP: 0033:0x7f57f5b9e0d9 [ 616.691597][T20923] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 616.691611][T20923] RSP: 002b:00007f57f69ab028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 616.691630][T20923] RAX: ffffffffffffffda RBX: 00007f57f5e25fa0 RCX: 00007f57f5b9e0d9 [ 616.691641][T20923] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 616.691652][T20923] RBP: 00007f57f69ab090 R08: 0000000000000000 R09: 0000000000000000 [ 616.691662][T20923] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.691672][T20923] R13: 00007f57f5e26038 R14: 00007f57f5e25fa0 R15: 00007ffc19b73ca8 [ 616.691700][T20923] [ 617.110601][T20932] syzkaller0: entered promiscuous mode [ 617.119059][T20932] syzkaller0: entered allmulticast mode [ 617.132285][T20932] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 617.383203][T20940] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3876'. [ 617.450845][T20943] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3876'. [ 617.482733][T20945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3879'. [ 617.516836][T20940] bridge0: port 3(gretap0) entered disabled state [ 617.523635][T20940] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.531037][T20940] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.575628][T20948] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3878'. [ 617.660411][T20952] netlink: 136 bytes leftover after parsing attributes in process `syz.3.3880'. [ 617.867543][T20959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3882'. [ 617.903570][T20959] netlink: 'syz.1.3882': attribute type 1 has an invalid length. [ 618.172728][T20970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3884'. [ 618.244986][T20973] FAULT_INJECTION: forcing a failure. [ 618.244986][T20973] name failslab, interval 1, probability 0, space 0, times 0 [ 618.285349][T20973] CPU: 0 UID: 0 PID: 20973 Comm: syz.0.3885 Not tainted syzkaller #0 PREEMPT(full) [ 618.285374][T20973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.285382][T20973] Call Trace: [ 618.285388][T20973] [ 618.285395][T20973] dump_stack_lvl+0xe8/0x150 [ 618.285423][T20973] should_fail_ex+0x40c/0x560 [ 618.285445][T20973] should_failslab+0xa8/0x100 [ 618.285468][T20973] kmem_cache_alloc_lru_noprof+0xa7/0x5f0 [ 618.285485][T20973] ? __d_lookup+0x66/0x790 [ 618.285504][T20973] ? __d_alloc+0x37/0x6f0 [ 618.285520][T20973] ? __d_alloc+0x37/0x6f0 [ 618.285542][T20973] __d_alloc+0x37/0x6f0 [ 618.285565][T20973] d_alloc+0x4b/0x190 [ 618.285580][T20973] ? lookup_one_qstr_excl+0xc4/0x360 [ 618.285603][T20973] lookup_one_qstr_excl+0xd8/0x360 [ 618.285620][T20973] ? lookup_noperm_common+0x245/0x430 [ 618.285643][T20973] start_dirop+0x5c/0x90 [ 618.285663][T20973] simple_start_creating+0xcc/0x110 [ 618.285684][T20973] ? __pfx_simple_start_creating+0x10/0x10 [ 618.285705][T20973] ? do_raw_spin_unlock+0xf5/0x210 [ 618.285722][T20973] ? mntput+0x65/0xc0 [ 618.285744][T20973] debugfs_start_creating+0xdb/0x1a0 [ 618.285886][T20973] __debugfs_create_file+0x6f/0x400 [ 618.285911][T20973] debugfs_create_file_full+0x3f/0x60 [ 618.285936][T20973] ref_tracker_dir_debugfs+0x197/0x360 [ 618.285993][T20973] ? __pfx_ref_tracker_dir_debugfs+0x10/0x10 [ 618.286033][T20973] ? __kvmalloc_node_noprof+0x55a/0x860 [ 618.286056][T20973] ? __kvmalloc_node_noprof+0x35c/0x860 [ 618.286078][T20973] ? __raw_spin_lock_init+0x45/0x100 [ 618.286099][T20973] alloc_netdev_mqs+0x275/0x12a0 [ 618.286156][T20973] ? __pfx_snprintf+0x10/0x10 [ 618.286173][T20973] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 618.286249][T20973] rtnl_create_link+0x321/0xd70 [ 618.286326][T20973] rtnl_newlink_create+0x258/0x7b0 [ 618.286390][T20973] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 618.286414][T20973] ? __pfx___mutex_lock+0x10/0x10 [ 618.286447][T20973] ? ns_capable+0x89/0xe0 [ 618.286468][T20973] rtnl_newlink+0x166d/0x1c30 [ 618.286502][T20973] ? __pfx_rtnl_newlink+0x10/0x10 [ 618.286520][T20973] ? __lock_acquire+0x683/0x2cf0 [ 618.286547][T20973] ? __lock_acquire+0x683/0x2cf0 [ 618.286570][T20973] ? __lock_acquire+0x683/0x2cf0 [ 618.286594][T20973] ? unwind_next_frame+0x8f/0x2550 [ 618.286627][T20973] ? is_bpf_text_address+0x26/0x2b0 [ 618.286657][T20973] ? is_bpf_text_address+0x26/0x2b0 [ 618.286682][T20973] ? __lock_acquire+0x683/0x2cf0 [ 618.286704][T20973] ? kernel_text_address+0xa5/0xe0 [ 618.286727][T20973] ? __kernel_text_address+0xd/0x30 [ 618.286747][T20973] ? unwind_get_return_address+0x4d/0x90 [ 618.286763][T20973] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 618.286786][T20973] ? arch_stack_walk+0xfb/0x150 [ 618.286830][T20973] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 618.286860][T20973] ? __pfx_rtnl_newlink+0x10/0x10 [ 618.286877][T20973] rtnetlink_rcv_msg+0x802/0xc00 [ 618.286894][T20973] ? netlink_sendmsg+0x5d4/0xb40 [ 618.286920][T20973] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 618.286938][T20973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 618.286958][T20973] ? __lock_acquire+0x683/0x2cf0 [ 618.286991][T20973] netlink_rcv_skb+0x226/0x4a0 [ 618.287014][T20973] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 618.287034][T20973] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 618.287069][T20973] ? netlink_deliver_tap+0x2e/0x1b0 [ 618.287089][T20973] ? netlink_deliver_tap+0x2e/0x1b0 [ 618.287115][T20973] netlink_unicast+0x7bb/0x940 [ 618.287154][T20973] netlink_sendmsg+0x813/0xb40 [ 618.287190][T20973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.287216][T20973] ? aa_sock_msg_perm+0xf1/0x1b0 [ 618.287239][T20973] ? __pfx_netlink_sendmsg+0x10/0x10 [ 618.287259][T20973] sock_sendmsg_nosec+0x13a/0x180 [ 618.287287][T20973] ____sys_sendmsg+0x54e/0x850 [ 618.287313][T20973] ? __pfx_____sys_sendmsg+0x10/0x10 [ 618.287344][T20973] ? import_iovec+0x73/0xa0 [ 618.287371][T20973] ___sys_sendmsg+0x2a5/0x360 [ 618.287391][T20973] ? __lock_acquire+0x683/0x2cf0 [ 618.287415][T20973] ? __pfx____sys_sendmsg+0x10/0x10 [ 618.287471][T20973] ? __fget_files+0x2a/0x420 [ 618.287491][T20973] ? __fget_files+0x3a2/0x420 [ 618.287521][T20973] __x64_sys_sendmsg+0x1b1/0x290 [ 618.287545][T20973] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 618.287585][T20973] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.287603][T20973] do_syscall_64+0x174/0x580 [ 618.287624][T20973] ? trace_irq_disable+0x3b/0x140 [ 618.287644][T20973] ? clear_bhb_loop+0x70/0xc0 [ 618.287665][T20973] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.287682][T20973] RIP: 0033:0x7fe8d9b9e0d9 [ 618.287699][T20973] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.287713][T20973] RSP: 002b:00007fe8da9cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 618.287732][T20973] RAX: ffffffffffffffda RBX: 00007fe8d9e25fa0 RCX: 00007fe8d9b9e0d9 [ 618.287743][T20973] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 618.287754][T20973] RBP: 00007fe8da9cb090 R08: 0000000000000000 R09: 0000000000000000 [ 618.287764][T20973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.287774][T20973] R13: 00007fe8d9e26038 R14: 00007fe8d9e25fa0 R15: 00007fff410d5ef8 [ 618.287803][T20973] [ 620.030517][T20990] xt_CT: No such helper "syz1" [ 620.305838][T21000] FAULT_INJECTION: forcing a failure. [ 620.305838][T21000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.344486][T21000] CPU: 1 UID: 0 PID: 21000 Comm: syz.2.3893 Not tainted syzkaller #0 PREEMPT(full) [ 620.344511][T21000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.344521][T21000] Call Trace: [ 620.344528][T21000] [ 620.344535][T21000] dump_stack_lvl+0xe8/0x150 [ 620.344563][T21000] should_fail_ex+0x40c/0x560 [ 620.344588][T21000] _copy_from_user+0x2d/0xb0 [ 620.344611][T21000] __sys_connect+0x155/0x460 [ 620.344633][T21000] ? __pfx___sys_connect+0x10/0x10 [ 620.344663][T21000] ? __pfx_ksys_write+0x10/0x10 [ 620.344689][T21000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.344706][T21000] __x64_sys_connect+0x7a/0x90 [ 620.344725][T21000] do_syscall_64+0x174/0x580 [ 620.344745][T21000] ? trace_irq_disable+0x3b/0x140 [ 620.344763][T21000] ? clear_bhb_loop+0x70/0xc0 [ 620.344782][T21000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.344798][T21000] RIP: 0033:0x7f87f239e0d9 [ 620.344814][T21000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.344828][T21000] RSP: 002b:00007f87f31fa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 620.344846][T21000] RAX: ffffffffffffffda RBX: 00007f87f2626090 RCX: 00007f87f239e0d9 [ 620.344857][T21000] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000b [ 620.344867][T21000] RBP: 00007f87f31fa090 R08: 0000000000000000 R09: 0000000000000000 [ 620.344878][T21000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.344887][T21000] R13: 00007f87f2626128 R14: 00007f87f2626090 R15: 00007ffc10b5d678 [ 620.344914][T21000] [ 620.603448][T21004] __nla_validate_parse: 5 callbacks suppressed [ 620.603466][T21004] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3894'. [ 620.838562][T21012] netlink: 'syz.1.3894': attribute type 1 has an invalid length. [ 621.202285][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3899'. [ 621.232363][T21023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3899'. [ 621.262058][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3899'. [ 621.279800][T21023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3899'. [ 621.322954][T21028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3900'. [ 621.515581][T21028] bond0: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 621.536711][T21028] bond0 (unregistering): Released all slaves [ 621.926054][T21041] netlink: 'syz.2.3905': attribute type 1 has an invalid length. [ 622.040669][T21041] 8021q: adding VLAN 0 to HW filter on device bond2 [ 622.188029][T21048] bond2: (slave veth5): Enslaving as an active interface with a down link [ 622.250707][T21052] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 622.310282][T21052] bond2: (slave batadv2): making interface the new active one [ 622.342423][T21052] batadv2: entered promiscuous mode [ 622.414442][T21052] bond2: (slave batadv2): Enslaving as an active interface with an up link [ 623.140517][T21073] netlink: 220 bytes leftover after parsing attributes in process `syz.2.3913'. [ 623.841763][T21094] x_tables: duplicate underflow at hook 1 [ 624.559652][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3902'. [ 624.571298][T21098] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3902'. [ 624.880556][T21103] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3920'. [ 628.544648][T21097] FAULT_INJECTION: forcing a failure. [ 628.544648][T21097] name failslab, interval 1, probability 0, space 0, times 0 [ 628.586289][T21097] CPU: 0 UID: 0 PID: 21097 Comm: syz.2.3918 Not tainted syzkaller #0 PREEMPT(full) [ 628.586313][T21097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 628.586323][T21097] Call Trace: [ 628.586330][T21097] [ 628.586338][T21097] dump_stack_lvl+0xe8/0x150 [ 628.586367][T21097] should_fail_ex+0x40c/0x560 [ 628.586390][T21097] ? alloc_netdev_mqs+0xa9/0x12a0 [ 628.586414][T21097] should_failslab+0xa8/0x100 [ 628.586439][T21097] __kvmalloc_node_noprof+0x176/0x860 [ 628.586466][T21097] ? alloc_netdev_mqs+0xa9/0x12a0 [ 628.586493][T21097] alloc_netdev_mqs+0xa9/0x12a0 [ 628.586515][T21097] ? __pfx_snprintf+0x10/0x10 [ 628.586533][T21097] ? __pfx_ipip6_tunnel_setup+0x10/0x10 [ 628.586562][T21097] rtnl_create_link+0x321/0xd70 [ 628.586591][T21097] rtnl_newlink_create+0x258/0x7b0 [ 628.586619][T21097] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 628.586644][T21097] ? __pfx___mutex_lock+0x10/0x10 [ 628.586678][T21097] ? ns_capable+0x89/0xe0 [ 628.586701][T21097] rtnl_newlink+0x166d/0x1c30 [ 628.586735][T21097] ? __pfx_rtnl_newlink+0x10/0x10 [ 628.586752][T21097] ? do_syscall_64+0x174/0x580 [ 628.586773][T21097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.586825][T21097] ? kasan_quarantine_put+0xbb/0x1f0 [ 628.586845][T21097] ? lockdep_hardirqs_on+0x7a/0x110 [ 628.586871][T21097] ? nlmon_xmit+0xb0/0x100 [ 628.586981][T21097] ? kmem_cache_free+0x182/0x650 [ 628.587019][T21097] ? __lock_acquire+0x683/0x2cf0 [ 628.587045][T21097] ? __dev_queue_xmit+0x29b/0x3820 [ 628.587101][T21097] ? __local_bh_enable_ip+0xd0/0x130 [ 628.587120][T21097] ? lockdep_hardirqs_on+0x7a/0x110 [ 628.587140][T21097] ? __dev_queue_xmit+0x29b/0x3820 [ 628.587160][T21097] ? __local_bh_enable_ip+0xd0/0x130 [ 628.587176][T21097] ? __dev_queue_xmit+0x29b/0x3820 [ 628.587202][T21097] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 628.587236][T21097] ? __pfx_rtnl_newlink+0x10/0x10 [ 628.587253][T21097] rtnetlink_rcv_msg+0x802/0xc00 [ 628.587276][T21097] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 628.587294][T21097] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.587310][T21097] ? ref_tracker_free+0x689/0x830 [ 628.587333][T21097] ? __pfx_ref_tracker_free+0x10/0x10 [ 628.587364][T21097] netlink_rcv_skb+0x226/0x4a0 [ 628.587387][T21097] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 628.587407][T21097] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 628.587441][T21097] ? netlink_deliver_tap+0x2e/0x1b0 [ 628.587462][T21097] ? netlink_deliver_tap+0x2e/0x1b0 [ 628.587488][T21097] netlink_unicast+0x7bb/0x940 [ 628.587519][T21097] netlink_sendmsg+0x813/0xb40 [ 628.587549][T21097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.587574][T21097] ? aa_sock_msg_perm+0xf1/0x1b0 [ 628.587598][T21097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 628.587617][T21097] sock_sendmsg_nosec+0x13a/0x180 [ 628.587644][T21097] ____sys_sendmsg+0x54e/0x850 [ 628.587670][T21097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 628.587701][T21097] ? import_iovec+0x73/0xa0 [ 628.587728][T21097] ___sys_sendmsg+0x2a5/0x360 [ 628.587748][T21097] ? __lock_acquire+0x683/0x2cf0 [ 628.587772][T21097] ? __pfx____sys_sendmsg+0x10/0x10 [ 628.587829][T21097] ? __fget_files+0x2a/0x420 [ 628.587849][T21097] ? __fget_files+0x3a2/0x420 [ 628.587879][T21097] __x64_sys_sendmsg+0x1b1/0x290 [ 628.587902][T21097] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 628.587940][T21097] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.587958][T21097] do_syscall_64+0x174/0x580 [ 628.587978][T21097] ? trace_irq_disable+0x3b/0x140 [ 628.588005][T21097] ? clear_bhb_loop+0x70/0xc0 [ 628.588026][T21097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.588043][T21097] RIP: 0033:0x7f87f239e0d9 [ 628.588060][T21097] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 628.588073][T21097] RSP: 002b:00007f87f321b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 628.588091][T21097] RAX: ffffffffffffffda RBX: 00007f87f2625fa0 RCX: 00007f87f239e0d9 [ 628.588103][T21097] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 628.588113][T21097] RBP: 00007f87f321b090 R08: 0000000000000000 R09: 0000000000000000 [ 628.588123][T21097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 628.588132][T21097] R13: 00007f87f2626038 R14: 00007f87f2625fa0 R15: 00007ffc10b5d678 [ 628.588162][T21097] [ 629.391806][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3924'. [ 629.990966][T21124] can: request_module (can-proto-0) failed. [ 630.565932][T21152] sch_fq: defrate 8 ignored. [ 630.834266][T21174] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 631.132207][T21180] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 631.272297][T21180] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.054407][T15128] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.092864][T15128] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.151705][T21198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3945'. [ 632.154714][T21201] syzkaller1: entered promiscuous mode [ 632.182112][T21198] netlink: 'syz.3.3945': attribute type 9 has an invalid length. [ 632.234543][T15131] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.248320][T15131] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.266188][T15131] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.284848][T15131] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 632.308794][T15131] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 632.348198][T15131] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.438177][T21217] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3949'. [ 633.611975][T21245] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3957'. [ 637.775392][T15125] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.784505][T15125] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.856304][T15125] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 637.888876][T15125] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.062515][T21258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.135580][T21258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.222541][T21263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.265513][T21265] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3963'. [ 638.282471][T21265] netlink: 'syz.3.3963': attribute type 9 has an invalid length. [ 638.313013][T21265] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3963'. [ 638.344972][T21265] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3963'. [ 638.366249][T21267] netlink: 'syz.3.3963': attribute type 8 has an invalid length. [ 638.376298][T21263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.389691][T21267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 638.399581][T21269] Bluetooth: MGMT ver 1.23 [ 639.027885][T21292] netlink: 'syz.2.3971': attribute type 1 has an invalid length. [ 639.105488][T21292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 639.147264][T21300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3974'. [ 639.173874][T21300] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3974'. [ 639.210437][T21292] bond3: (slave geneve2): making interface the new active one [ 639.237725][T21292] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 639.264029][T21300] geneve2: entered promiscuous mode [ 639.272479][T21300] geneve2: entered allmulticast mode [ 639.315850][T15126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.351233][T15126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.424732][T10854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.440582][T10854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.479755][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3975'. [ 639.496584][T21306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.587088][T21310] FAULT_INJECTION: forcing a failure. [ 639.587088][T21310] name failslab, interval 1, probability 0, space 0, times 0 [ 639.602226][T21310] CPU: 1 UID: 0 PID: 21310 Comm: syz.3.3976 Not tainted syzkaller #0 PREEMPT(full) [ 639.602248][T21310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 639.602256][T21310] Call Trace: [ 639.602263][T21310] [ 639.602274][T21310] dump_stack_lvl+0xe8/0x150 [ 639.602301][T21310] should_fail_ex+0x40c/0x560 [ 639.602327][T21310] should_failslab+0xa8/0x100 [ 639.602349][T21310] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 639.602370][T21310] ? skb_clone+0x212/0x3a0 [ 639.602390][T21310] ? skb_clone+0x212/0x3a0 [ 639.602416][T21310] skb_clone+0x212/0x3a0 [ 639.602435][T21310] ? __neigh_event_send+0xe81/0x1510 [ 639.602454][T21310] __neigh_event_send+0xe8e/0x1510 [ 639.602486][T21310] neigh_resolve_output+0x1a1/0x720 [ 639.602506][T21310] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 639.602649][T21310] ? ip_finish_output2+0x3de/0x10b0 [ 639.602667][T21310] ip_finish_output2+0xc4b/0x10b0 [ 639.602688][T21310] ? ip_skb_dst_mtu+0x811/0xa50 [ 639.602722][T21310] ? ip_finish_output2+0x3de/0x10b0 [ 639.602746][T21310] ? ip_finish_output+0x40b/0x530 [ 639.602766][T21310] ip_output+0x29f/0x450 [ 639.602784][T21310] ? ip_output+0x5a/0x450 [ 639.602803][T21310] ? __ip_queue_xmit+0x65/0x1b10 [ 639.602822][T21310] __ip_queue_xmit+0x10df/0x1b10 [ 639.602844][T21310] ? __pfx_mptcp_write_options+0x10/0x10 [ 639.602868][T21310] ? __ip_queue_xmit+0x65/0x1b10 [ 639.602892][T21310] ? __pfx_ip_queue_xmit+0x10/0x10 [ 639.602912][T21310] __tcp_transmit_skb+0x2d18/0x47c0 [ 639.602982][T21310] ? rcu_is_watching+0x15/0xb0 [ 639.603018][T21310] ? __pfx___tcp_transmit_skb+0x10/0x10 [ 639.603065][T21310] ? ktime_get+0x45/0x220 [ 639.603091][T21310] ? ktime_get+0x45/0x220 [ 639.603106][T21310] ? seqcount_lockdep_reader_access+0xea/0x100 [ 639.603135][T21310] tcp_connect+0x22e4/0x54e0 [ 639.603189][T21310] ? __pfx_tcp_connect+0x10/0x10 [ 639.603227][T21310] ? __asan_memset+0x22/0x50 [ 639.603251][T21310] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 639.603315][T21310] ? secure_tcp_seq_and_ts_off+0xf2/0x1d0 [ 639.603344][T21310] ? sk_setup_caps+0x94f/0xbc0 [ 639.603398][T21310] ? sk_setup_caps+0x29/0xbc0 [ 639.603421][T21310] tcp_v4_connect+0x1051/0x1950 [ 639.603454][T21310] ? __pfx_tcp_v4_connect+0x10/0x10 [ 639.603471][T21310] ? __local_bh_enable_ip+0xd0/0x130 [ 639.603494][T21310] mptcp_connect+0x4d3/0x7a0 [ 639.603519][T21310] __inet_stream_connect+0x258/0xe00 [ 639.603551][T21310] ? do_raw_spin_lock+0x12b/0x2f0 [ 639.603567][T21310] ? lock_sock_nested+0x6a/0x100 [ 639.603588][T21310] ? __pfx___inet_stream_connect+0x10/0x10 [ 639.603611][T21310] ? inet_stream_connect+0x51/0xa0 [ 639.603633][T21310] ? __local_bh_enable_ip+0xd0/0x130 [ 639.603654][T21310] inet_stream_connect+0x66/0xa0 [ 639.603678][T21310] __sys_connect+0x323/0x460 [ 639.603698][T21310] ? __pfx___sys_connect+0x10/0x10 [ 639.603728][T21310] ? __pfx_ksys_write+0x10/0x10 [ 639.603755][T21310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.603773][T21310] __x64_sys_connect+0x7a/0x90 [ 639.603793][T21310] do_syscall_64+0x174/0x580 [ 639.603812][T21310] ? trace_irq_disable+0x3b/0x140 [ 639.603831][T21310] ? clear_bhb_loop+0x70/0xc0 [ 639.603850][T21310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.603866][T21310] RIP: 0033:0x7f13a339e0d9 [ 639.603882][T21310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.603895][T21310] RSP: 002b:00007f13a15d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 639.603913][T21310] RAX: ffffffffffffffda RBX: 00007f13a3626090 RCX: 00007f13a339e0d9 [ 639.603925][T21310] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 000000000000000b [ 639.603934][T21310] RBP: 00007f13a15d5090 R08: 0000000000000000 R09: 0000000000000000 [ 639.603944][T21310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 639.603952][T21310] R13: 00007f13a3626128 R14: 00007f13a3626090 R15: 00007ffd91ceedc8 [ 639.603980][T21310] [ 640.478989][T21320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3980'. [ 641.057840][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 641.480297][T21358] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3989'. [ 642.024210][T21362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3992'. [ 646.951993][T21383] syzkaller0: entered promiscuous mode [ 646.964580][T21383] syzkaller0: entered allmulticast mode [ 646.990187][T21387] bridge_slave_1: invalid flags given to default FDB implementation [ 647.155301][T21391] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 647.518239][T21409] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4003'. [ 648.022944][T21420] bond4: entered promiscuous mode [ 648.044881][T21420] 8021q: adding VLAN 0 to HW filter on device bond4 [ 648.830156][T21448] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4012'. [ 648.840346][T21449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4012'. [ 653.124487][T21440] batadv_slave_1: entered allmulticast mode [ 653.245762][T21445] batadv_slave_1: left allmulticast mode [ 653.279164][T21456] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4014'. [ 653.342538][T21457] netlink: 260 bytes leftover after parsing attributes in process `syz.3.4014'. [ 653.432041][T21466] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4016'. [ 653.655092][T21465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4015'. [ 653.661293][T21474] pim6reg99999999: entered allmulticast mode [ 653.857851][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4019'. [ 654.349382][T21501] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 654.355955][T21504] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4022'. [ 654.363172][T21501] mac80211_hwsim hwsim48 wlan0: entered allmulticast mode [ 654.383551][T21501] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 654.852287][T21517] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4027'. [ 654.874681][T21517] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4027'. [ 654.890030][T21517] mac80211_hwsim hwsim45 wlan0: entered promiscuous mode [ 654.902508][T21517] mac80211_hwsim hwsim45 wlan0: entered allmulticast mode [ 654.915702][T21517] netlink: 'syz.2.4027': attribute type 1 has an invalid length. [ 655.014857][T21521] bond5: (slave bridge3): Enslaving as a backup interface with an up link [ 655.104871][T21529] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 655.333363][T21542] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4030'. [ 655.859011][T21559] sctp: [Deprecated]: syz.3.4033 (pid 21559) Use of struct sctp_assoc_value in delayed_ack socket option. [ 655.859011][T21559] Use struct sctp_sack_info instead [ 655.877634][T21559] openvswitch: netlink: Missing key (keys=40, expected=100) [ 656.057159][T21566] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 656.367629][T21572] netlink: 'syz.1.4036': attribute type 1 has an invalid length. [ 656.376975][T21572] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4036'. [ 657.322738][T21592] tc_dump_action: action bad kind [ 658.947899][T21561] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 659.228964][T21599] __nla_validate_parse: 5 callbacks suppressed [ 659.228981][T21599] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4045'. [ 659.266908][T21599] syzkaller0: entered promiscuous mode [ 659.272498][T21599] syzkaller0: entered allmulticast mode [ 659.281524][T21600] syzkaller1: entered promiscuous mode [ 659.292974][T21600] syzkaller1: entered allmulticast mode [ 659.298492][T21602] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4046'. [ 659.675445][T21617] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4050'. [ 659.711543][T21602] bond6: entered promiscuous mode [ 659.760086][T21602] 8021q: adding VLAN 0 to HW filter on device bond6 [ 660.031120][T21635] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4054'. [ 660.256871][T15126] tipc: Subscription rejected, illegal request [ 661.202641][T21669] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4065'. [ 661.319974][T21673] netlink: 'syz.2.4068': attribute type 2 has an invalid length. [ 661.392074][T21673] : entered promiscuous mode [ 661.499689][T21681] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4070'. [ 661.904782][T21689] netlink: 'syz.0.4072': attribute type 5 has an invalid length. [ 662.752737][T21719] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4082'. [ 662.987667][T21730] tipc: Started in network mode [ 662.992791][T21730] tipc: Node identity ac14140f, cluster identity 4711 [ 663.003240][T21730] tipc: New replicast peer: 255.255.255.255 [ 663.013152][T21730] tipc: Enabled bearer , priority 10 [ 663.020813][T21730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4085'. [ 663.032260][T21730] netlink: 'syz.2.4085': attribute type 1 has an invalid length. [ 663.068904][T21730] bond7: entered promiscuous mode [ 663.074930][T21730] 8021q: adding VLAN 0 to HW filter on device bond7 [ 663.106979][T21730] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4085'. [ 663.116560][T21730] bond7: entered allmulticast mode [ 663.441377][T21740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4089'. [ 664.126687][ T7558] tipc: Node number set to 2886997007 [ 664.291919][T21769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4097'. [ 669.714922][T21771] v: renamed from dummy0 (while UP) [ 669.840363][T21793] ip6tnl0: Caught tx_queue_len zero misconfig [ 670.614195][T21825] v: renamed from veth0_vlan [ 670.860816][T21844] tc_dump_action: action bad kind [ 671.918359][T21863] syzkaller0: entered promiscuous mode [ 671.924033][T21863] syzkaller0: entered allmulticast mode [ 673.243148][T21828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 673.582079][T21877] netlink: 'syz.3.4117': attribute type 10 has an invalid length. [ 673.838287][T21893] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4123'. [ 674.007972][T21904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4124'. [ 674.087688][T21901] syzkaller0: entered promiscuous mode [ 674.109266][T21901] syzkaller0: entered allmulticast mode [ 674.383234][ T5269] v: left promiscuous mode [ 674.407964][ T5746] v: entered promiscuous mode [ 675.639581][T21954] netlink: 'syz.3.4135': attribute type 39 has an invalid length. [ 675.978400][T21923] bridge0: port 3(wlan1) entered disabled state [ 677.766353][T22028] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4148'. [ 678.167405][T22047] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4152'. [ 678.324554][ T29] audit: type=1804 audit(1787103424.797:13): pid=22050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4154" name="/newroot/247/cgroup.controllers" dev="tmpfs" ino=1275 res=1 errno=0 [ 679.128112][T22068] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4136'. [ 681.247509][T22076] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4156'. [ 681.294885][T22076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4156'. [ 681.298524][T22041] bridge0: port 3(veth0) entered disabled state [ 681.310409][T22041] bridge0: port 2(bridge_slave_1) entered disabled state [ 681.485547][T22041] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 681.520739][T22041] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 681.593069][T22041] hsr0: left promiscuous mode [ 681.843169][T22041] bond2: left promiscuous mode [ 681.858542][T22041] bridge3: left promiscuous mode [ 681.878304][T22041] macvtap1: left allmulticast mode [ 681.892904][T22041] macvtap2: left allmulticast mode [ 681.908944][T22041] gretap1: left allmulticast mode [ 681.933690][T22041] geneve2: left promiscuous mode [ 681.940952][T22041] geneve2: left allmulticast mode [ 681.964733][T10854] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 681.981574][T10854] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.992605][T10854] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.005149][T10854] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.269390][T22093] syzkaller0: entered promiscuous mode [ 682.284497][T22093] syzkaller0: entered allmulticast mode [ 682.692175][T22127] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4169'. [ 682.767940][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'. [ 682.786623][T22129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4170'. [ 682.810695][T22129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4170'. [ 682.835955][T22129] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4170'. [ 682.837173][T22131] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 687.288145][T22132] ip6gre1: entered promiscuous mode [ 687.294799][T22132] ip6gre1: entered allmulticast mode [ 687.425450][T22141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'. [ 687.435160][T15125] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.457917][T15125] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.469637][T22141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4175'. [ 687.483001][T15125] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 687.493503][T15125] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.816349][T22158] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4179'. [ 687.988562][T22157] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 688.051207][T22168] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4181'. [ 688.295087][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'. [ 688.316387][T22177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4182'. [ 688.328370][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4182'. [ 688.345991][T22177] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4182'. [ 688.627950][T22186] syzkaller0: entered promiscuous mode [ 688.644546][T22186] syzkaller0: entered allmulticast mode [ 690.352643][T22213] syzkaller0: entered promiscuous mode [ 690.358963][T22213] syzkaller0: entered allmulticast mode [ 690.371488][T22219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4196'. [ 690.463652][T22221] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4197'. [ 690.632896][T22225] syzkaller0: entered promiscuous mode [ 690.640540][T22225] syzkaller0: entered allmulticast mode [ 690.762099][T22166] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 691.013007][T22234] netlink: 'syz.3.4203': attribute type 10 has an invalid length. [ 691.021676][T22234] dummy0: entered promiscuous mode [ 692.852404][T22298] netlink: 'syz.2.4221': attribute type 1 has an invalid length. [ 693.196407][T22321] netlink: 'syz.3.4226': attribute type 1 has an invalid length. [ 693.314333][T22306] bridge0: port 3(gretap0) entered blocking state [ 693.321054][T22306] bridge0: port 3(gretap0) entered forwarding state [ 693.381218][T22306] 8021q: adding VLAN 0 to HW filter on device team0 [ 693.446912][T22306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 694.074094][T22306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.109122][T22306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.144066][T22306] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 694.166111][T22306] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 694.202517][T22306] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 694.295118][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.302747][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 694.341346][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 694.348596][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 694.464862][T22321] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 695.468045][T22368] __nla_validate_parse: 4 callbacks suppressed [ 695.468089][T22368] netlink: 766 bytes leftover after parsing attributes in process `syz.1.4236'. [ 695.537719][T22360] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4236'. [ 695.958185][T22375] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4238'. [ 696.026275][ C0] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 696.992539][T22397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4243'. [ 697.024369][T22397] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4243'. [ 697.207386][T22411] netlink: 'syz.0.4245': attribute type 1 has an invalid length. [ 697.699460][T22417] batman_adv: batadv0: Adding interface: vlan2 [ 697.718928][T22417] batman_adv: batadv0: The MTU of interface vlan2 is too small (1500) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 697.763517][T22417] batman_adv: batadv0: Not using interface vlan2 (retrying later): interface not active [ 698.028026][T22433] dummy0: left promiscuous mode [ 698.088277][T22441] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4247'. [ 698.206986][T22440] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 698.219813][T22441] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 699.659606][T22473] netlink: 172 bytes leftover after parsing attributes in process `syz.0.4257'. [ 700.458894][T22502] lo speed is unknown, defaulting to 1000 [ 700.479803][T22502] virt_wifi0 speed is unknown, defaulting to 1000 [ 700.621683][T22515] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4264'. [ 700.903391][T22522] netlink: ct family unspecified [ 700.928055][T22522] openvswitch: netlink: Actions may not be safe on all matching packets [ 700.971619][T22529] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 701.807382][T22552] netlink: 320 bytes leftover after parsing attributes in process `syz.0.4270'. [ 702.003494][T22557] netlink: 384 bytes leftover after parsing attributes in process `syz.3.4271'. [ 702.289082][T22561] bond3: (slave bond_slave_1): Device is not our slave [ 702.323737][T22561] bond3: option active_slave: invalid value (bond_slave_1) [ 702.418348][T22561] bond3 (unregistering): Released all slaves [ 704.122142][T22632] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4291'. [ 704.379578][T22641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4295'. [ 704.557962][T22647] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4296'. [ 704.957560][T22653] tipc: Enabling of bearer rejected, failed to enable media [ 706.892994][T22694] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4306'. [ 707.713784][T22708] netlink: 'syz.2.4313': attribute type 21 has an invalid length. [ 707.722816][T22708] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4313'. [ 707.741232][T22708] netlink: 'syz.2.4313': attribute type 21 has an invalid length. [ 707.750068][T22708] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4313'. [ 711.080365][T22732] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4318'. [ 711.260883][T22745] batman_adv: batadv0: Adding interface: macvtap3 [ 711.297037][T22745] batman_adv: batadv0: The MTU of interface macvtap3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 711.368181][T22745] batman_adv: batadv0: Not using interface macvtap3 (retrying later): interface not active [ 711.566240][T22753] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4324'. [ 711.662758][T22760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4325'. [ 712.063557][T22761] 8021q: adding VLAN 0 to HW filter on device bond5 [ 712.215288][T22761] bond5 (unregistering): Released all slaves [ 712.264866][T22773] netlink: 'syz.2.4327': attribute type 13 has an invalid length. [ 712.281324][T22773] netlink: 328 bytes leftover after parsing attributes in process `syz.2.4327'. [ 712.385793][T22775] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4329'. [ 713.225422][T22803] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4338'. [ 713.242787][T22800] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4339'. [ 715.675157][T22817] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4343'. [ 718.233222][T22803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 718.253335][T22803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 718.488594][T22838] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 718.535846][T22840] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 718.583006][T22841] netlink: 'syz.2.4347': attribute type 1 has an invalid length. [ 718.591907][T22841] netlink: 'syz.2.4347': attribute type 3 has an invalid length. [ 718.631768][T22841] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4347'. [ 718.841335][T22854] x_tables: duplicate entry at hook 1 [ 718.855856][T22849] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4351'. [ 718.871019][T22854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4353'. [ 718.882731][T22854] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4353'. [ 719.047504][T22856] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4351'. [ 719.056831][T22861] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4355'. [ 719.062829][T22862] block nbd64: NBD_DISCONNECT [ 719.099464][T22856] nbd: device at index 64 is going down [ 719.303359][T22869] gtp0: entered promiscuous mode [ 719.319093][T22869] gtp0: entered allmulticast mode [ 719.729854][T22881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4359'. [ 719.959705][T22892] netlink: 164 bytes leftover after parsing attributes in process `syz.2.4365'. [ 719.989981][T22892] FAULT_INJECTION: forcing a failure. [ 719.989981][T22892] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 720.032975][T22892] CPU: 0 UID: 0 PID: 22892 Comm: syz.2.4365 Not tainted syzkaller #0 PREEMPT(full) [ 720.033009][T22892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 720.033018][T22892] Call Trace: [ 720.033025][T22892] [ 720.033032][T22892] dump_stack_lvl+0xe8/0x150 [ 720.033065][T22892] should_fail_ex+0x40c/0x560 [ 720.033092][T22892] _copy_to_user+0x31/0xb0 [ 720.033119][T22892] simple_read_from_buffer+0xe1/0x170 [ 720.033146][T22892] proc_fail_nth_read+0x1bb/0x230 [ 720.033172][T22892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 720.033197][T22892] ? rw_verify_area+0x24a/0x4c0 [ 720.033223][T22892] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 720.033243][T22892] vfs_read+0x213/0xa80 [ 720.033270][T22892] ? __pfx___mutex_lock+0x10/0x10 [ 720.033296][T22892] ? __pfx_vfs_read+0x10/0x10 [ 720.033320][T22892] ? __fget_files+0x2a/0x420 [ 720.033345][T22892] ? __fget_files+0x3a2/0x420 [ 720.033364][T22892] ? __fget_files+0x2a/0x420 [ 720.033391][T22892] ksys_read+0x150/0x270 [ 720.033416][T22892] ? __pfx_ksys_read+0x10/0x10 [ 720.033446][T22892] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.033466][T22892] do_syscall_64+0x174/0x580 [ 720.033486][T22892] ? trace_irq_disable+0x3b/0x140 [ 720.033507][T22892] ? clear_bhb_loop+0x70/0xc0 [ 720.033527][T22892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.033544][T22892] RIP: 0033:0x7f87f235e90e [ 720.033560][T22892] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 720.033575][T22892] RSP: 002b:00007f87f321afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 720.033592][T22892] RAX: ffffffffffffffda RBX: 00007f87f321b6c0 RCX: 00007f87f235e90e [ 720.033604][T22892] RDX: 000000000000000f RSI: 00007f87f321b0a0 RDI: 0000000000000007 [ 720.033614][T22892] RBP: 00007f87f321b090 R08: 0000000000000000 R09: 0000000000000000 [ 720.033623][T22892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.033633][T22892] R13: 00007f87f2626038 R14: 00007f87f2625fa0 R15: 00007ffc10b5d678 [ 720.033659][T22892] [ 721.007489][T22933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4375'. [ 721.239198][T22941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4380'. [ 721.423987][T22941] syzkaller0: entered promiscuous mode [ 721.450114][T22941] syzkaller0: entered allmulticast mode [ 726.175304][T22973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4388'. [ 726.217969][T22969] lo speed is unknown, defaulting to 1000 [ 726.238046][T22969] virt_wifi0 speed is unknown, defaulting to 1000 [ 726.402175][T22979] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4391'. [ 726.758544][T22996] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4395'. [ 727.128496][T23013] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4401'. [ 727.151184][T23013] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 727.211731][T23010] ip6tnl1: entered allmulticast mode [ 727.229919][T15129] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 727.240019][T15129] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 727.254925][ T7558] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 727.314932][ T5746] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 727.609307][T23017] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 727.675564][ T7558] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 727.701267][T23024] netlink: 'syz.1.4405': attribute type 30 has an invalid length. [ 727.760774][T23024] bond3: option arp_missed_max: invalid value (0) [ 727.775379][T23024] bond3: option arp_missed_max: allowed values 1 - 255 [ 727.785213][T23024] bond3 (unregistering): Released all slaves [ 729.410770][T15129] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 729.487838][T23081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4419'. [ 729.499665][T23069] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.727229][T23092] netlink: 'syz.0.4423': attribute type 1 has an invalid length. [ 729.757517][T23094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4422'. [ 729.775340][T23094] netlink: 356 bytes leftover after parsing attributes in process `syz.3.4422'. [ 729.804360][T23094] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4422'. [ 729.824371][T23094] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4422'. [ 730.005749][T23094] 8021q: adding VLAN 0 to HW filter on device team0 [ 730.027564][T23094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 730.112208][T23094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 730.150267][T23094] batadv_slave_1: left promiscuous mode [ 730.192774][T23094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 730.237611][T23094] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 730.271554][T23094] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 730.319230][T23094] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 730.392412][T23096] netlink: 'syz.3.4422': attribute type 3 has an invalid length. [ 730.420876][T23096] netlink: 'syz.3.4422': attribute type 3 has an invalid length. [ 730.441658][T15129] bridge0: port 3(veth0) entered blocking state [ 730.448098][T15129] bridge0: port 3(veth0) entered forwarding state [ 730.458605][T15129] bridge0: port 1(bridge_slave_0) entered blocking state [ 730.465825][T15129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 730.491934][T15129] bridge0: port 2(bridge_slave_1) entered blocking state [ 730.499184][T15129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 730.690441][T23127] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4430'. [ 731.454726][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 739.692962][T23094] syzkaller0: entered promiscuous mode [ 739.700547][T23094] syzkaller0: entered allmulticast mode [ 740.177557][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 743.659174][T23142] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'. [ 743.756261][T23143] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4436'. [ 743.941927][T23151] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4437'. [ 743.959028][T23142] ovs-system: entered promiscuous mode [ 743.999549][T23143] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4436'. [ 744.069515][T23151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.468022][T23175] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4442'. [ 744.859673][T23187] netlink: 84 bytes leftover after parsing attributes in process `syz.0.4445'. [ 746.067876][T23216] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4449'. [ 746.167966][T23216] netlink: 236 bytes leftover after parsing attributes in process `syz.2.4449'. [ 747.206003][T23256] xt_recent: Unsupported userspace flags (000000c5) [ 747.501751][T23270] x_tables: duplicate underflow at hook 2 [ 747.645841][T23273] openvswitch: netlink: Duplicate key (type 0). [ 747.766893][T23281] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4462'. [ 748.023158][T23296] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4466'. [ 748.141732][T23300] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 748.178930][T23290] syzkaller0: entered promiscuous mode [ 748.200536][T23290] syzkaller0: entered allmulticast mode [ 749.588869][T23336] __nla_validate_parse: 1 callbacks suppressed [ 749.588887][T23336] netlink: 164 bytes leftover after parsing attributes in process `syz.1.4472'. [ 749.978658][T23347] sctp: [Deprecated]: syz.3.4476 (pid 23347) Use of struct sctp_assoc_value in delayed_ack socket option. [ 749.978658][T23347] Use struct sctp_sack_info instead [ 751.299099][T23361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4481'. [ 751.346586][T23356] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4480'. [ 753.039785][T23394] FAULT_INJECTION: forcing a failure. [ 753.039785][T23394] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 753.073917][T23394] CPU: 0 UID: 0 PID: 23394 Comm: syz.1.4488 Not tainted syzkaller #0 PREEMPT(full) [ 753.073942][T23394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 753.073952][T23394] Call Trace: [ 753.073960][T23394] [ 753.073974][T23394] dump_stack_lvl+0xe8/0x150 [ 753.074005][T23394] should_fail_ex+0x40c/0x560 [ 753.074030][T23394] _copy_to_user+0x31/0xb0 [ 753.074058][T23394] simple_read_from_buffer+0xe1/0x170 [ 753.074085][T23394] proc_fail_nth_read+0x1bb/0x230 [ 753.074110][T23394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.074135][T23394] ? rw_verify_area+0x24a/0x4c0 [ 753.074163][T23394] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 753.074200][T23394] vfs_read+0x213/0xa80 [ 753.074227][T23394] ? __pfx___mutex_lock+0x10/0x10 [ 753.074253][T23394] ? __pfx_vfs_read+0x10/0x10 [ 753.074277][T23394] ? __fget_files+0x2a/0x420 [ 753.074300][T23394] ? __fget_files+0x3a2/0x420 [ 753.074315][T23394] ? __fget_files+0x2a/0x420 [ 753.074344][T23394] ksys_read+0x150/0x270 [ 753.074367][T23394] ? __pfx_ksys_read+0x10/0x10 [ 753.074384][T23394] ? fput+0xa0/0xd0 [ 753.074407][T23394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.074425][T23394] do_syscall_64+0x174/0x580 [ 753.074446][T23394] ? trace_irq_disable+0x3b/0x140 [ 753.074463][T23394] ? clear_bhb_loop+0x70/0xc0 [ 753.074482][T23394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 753.074497][T23394] RIP: 0033:0x7f57f5b5e90e [ 753.074515][T23394] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 753.074529][T23394] RSP: 002b:00007f57f69aafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 753.074548][T23394] RAX: ffffffffffffffda RBX: 00007f57f69ab6c0 RCX: 00007f57f5b5e90e [ 753.074561][T23394] RDX: 000000000000000f RSI: 00007f57f69ab0a0 RDI: 0000000000000004 [ 753.074571][T23394] RBP: 00007f57f69ab090 R08: 0000000000000000 R09: 0000000000000000 [ 753.074582][T23394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.074591][T23394] R13: 00007f57f5e26038 R14: 00007f57f5e25fa0 R15: 00007ffc19b73ca8 [ 753.074620][T23394] [ 754.031480][T23409] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4491'. [ 754.069971][T23409] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 754.193860][T23419] Bluetooth: MGMT ver 1.23 [ 754.216087][T23416] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4493'. [ 754.267414][T23422] x_tables: duplicate entry at hook 2 [ 754.308237][T23424] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4454'. [ 754.614960][T23433] FAULT_INJECTION: forcing a failure. [ 754.614960][T23433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 754.681023][T23433] CPU: 1 UID: 0 PID: 23433 Comm: syz.3.4499 Not tainted syzkaller #0 PREEMPT(full) [ 754.681048][T23433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 754.681057][T23433] Call Trace: [ 754.681063][T23433] [ 754.681070][T23433] dump_stack_lvl+0xe8/0x150 [ 754.681096][T23433] should_fail_ex+0x40c/0x560 [ 754.681120][T23433] _copy_from_user+0x2d/0xb0 [ 754.681142][T23433] ___sys_recvmsg+0x173/0x5a0 [ 754.681169][T23433] ? __pfx____sys_recvmsg+0x10/0x10 [ 754.681191][T23433] ? __fget_files+0x2a/0x420 [ 754.681226][T23433] ? __fget_files+0x3a2/0x420 [ 754.681254][T23433] do_recvmmsg+0x31a/0x7f0 [ 754.681281][T23433] ? __pfx_do_recvmmsg+0x10/0x10 [ 754.681311][T23433] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 754.681335][T23433] ? __fget_files+0x3a2/0x420 [ 754.681373][T23433] __x64_sys_recvmmsg+0x198/0x250 [ 754.681396][T23433] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 754.681425][T23433] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.681443][T23433] do_syscall_64+0x174/0x580 [ 754.681463][T23433] ? trace_irq_disable+0x3b/0x140 [ 754.681483][T23433] ? clear_bhb_loop+0x70/0xc0 [ 754.681502][T23433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 754.681518][T23433] RIP: 0033:0x7f13a339e0d9 [ 754.681534][T23433] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 754.681546][T23433] RSP: 002b:00007f13a15f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 754.681563][T23433] RAX: ffffffffffffffda RBX: 00007f13a3625fa0 RCX: 00007f13a339e0d9 [ 754.681574][T23433] RDX: 0000000000000001 RSI: 0000200000003500 RDI: 0000000000000003 [ 754.681583][T23433] RBP: 00007f13a15f6090 R08: 0000000000000000 R09: 0000000000000000 [ 754.681592][T23433] R10: 0000000000000123 R11: 0000000000000246 R12: 0000000000000001 [ 754.681602][T23433] R13: 00007f13a3626038 R14: 00007f13a3625fa0 R15: 00007ffd91ceedc8 [ 754.681629][T23433] [ 756.038397][T23462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4506'. [ 756.135309][T23466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4508'. [ 756.301179][T23471] netlink: 564 bytes leftover after parsing attributes in process `syz.3.4509'. [ 756.826319][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 757.774158][T23517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4518'. [ 757.803346][T23522] ip_tables: iptables: counters copy to user failed while replacing table [ 758.058566][T23529] syzkaller0: entered promiscuous mode [ 758.104371][T23529] syzkaller0: entered allmulticast mode [ 758.106611][T23534] netlink: 277 bytes leftover after parsing attributes in process `syz.2.4523'. [ 758.138234][T23531] tipc: Started in network mode [ 758.165336][T23531] tipc: Node identity 7a8b3e6a099d, cluster identity 4711 [ 758.196043][T23531] tipc: Enabled bearer , priority 0 [ 758.206621][T23542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 758.238012][T23541] netlink: 'syz.3.4525': attribute type 3 has an invalid length. [ 758.264418][T23541] netlink: 'syz.3.4525': attribute type 1 has an invalid length. [ 758.280229][T23545] pimreg: entered allmulticast mode [ 758.284405][T23541] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4525'. [ 758.305704][T23541] NCSI netlink: No device for ifindex 0 [ 758.318515][T23545] pimreg: left allmulticast mode [ 758.396858][T23531] tipc: Resetting bearer [ 758.502575][T23555] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4528'. [ 758.626457][T23531] tipc: Disabling bearer [ 758.652243][T23564] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4529'. [ 758.688965][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4529'. [ 758.832358][T23571] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 759.531484][T23592] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4533'. [ 759.822980][T23609] macvlan0: entered promiscuous mode [ 759.947208][ T5624] Bluetooth: hci4: link tx timeout [ 759.966004][ T5624] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 760.328426][T23636] hsr_slave_1 (unregistering): left promiscuous mode [ 760.633053][T23647] netlink: 'syz.1.4548': attribute type 10 has an invalid length. [ 760.709925][T23647] geneve3: entered promiscuous mode [ 760.743774][T23647] geneve3: entered allmulticast mode [ 760.801035][T23662] sctp: [Deprecated]: syz.0.4551 (pid 23662) Use of int in maxseg socket option. [ 760.801035][T23662] Use struct sctp_assoc_value instead [ 761.060897][T23691] netlink: 'syz.1.4555': attribute type 1 has an invalid length. [ 761.114013][T23691] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 761.277746][T23703] __nla_validate_parse: 4 callbacks suppressed [ 761.277764][T23703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4559'. [ 761.288845][T23699] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4557'. [ 761.315504][T23699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4557'. [ 761.531882][T23719] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4560'. [ 761.560570][T23718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4562'. [ 761.648025][T23724] IPVS: fo: FWM 3 0x00000003 - no destination available [ 762.015100][ T5624] Bluetooth: hci4: command 0x0405 tx timeout [ 762.151011][T23743] netlink: 277 bytes leftover after parsing attributes in process `syz.3.4569'. [ 762.265346][T23752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 762.688380][T23762] tunl0: left promiscuous mode [ 762.714250][T23762] gretap0: left promiscuous mode [ 762.898258][T23762] mac80211_hwsim hwsim48 wlan0: left promiscuous mode [ 762.950354][T23767] netlink: 'syz.1.4575': attribute type 11 has an invalid length. [ 762.954682][T23762] mac80211_hwsim hwsim48 wlan0: left allmulticast mode [ 762.977842][T23767] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4575'. [ 763.025087][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 763.042762][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 763.054347][T23762] geneve2: left promiscuous mode [ 763.059793][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 763.079616][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 763.082528][T23762] geneve2: left allmulticast mode [ 763.100103][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 763.134544][T23762] gre1: left promiscuous mode [ 763.157591][T23762] gre1: left allmulticast mode [ 763.206205][T23762] vti0: left promiscuous mode [ 763.247722][T23762] vti0: left allmulticast mode [ 764.222980][T23769] lo speed is unknown, defaulting to 1000 [ 764.257765][T23769] virt_wifi0 speed is unknown, defaulting to 1000 [ 764.323094][T23799] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4580'. [ 764.435267][T23809] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4581'. [ 764.506274][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4582'. [ 765.215550][ T5624] Bluetooth: hci0: command tx timeout [ 765.738513][T23769] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.746139][T23769] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.753614][T23769] bridge_slave_0: entered allmulticast mode [ 765.764135][T23769] bridge_slave_0: entered promiscuous mode [ 765.827661][T23769] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.865131][T23769] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.911222][T23769] bridge_slave_1: entered allmulticast mode [ 765.932366][T23769] bridge_slave_1: entered promiscuous mode [ 766.031402][T23769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.080618][T23769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.150021][T23868] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 766.161788][T23769] team0: Port device team_slave_0 added [ 766.202682][T23769] team0: Port device team_slave_1 added [ 766.327156][T23873] xt_hashlimit: size too large, truncated to 1048576 [ 766.336832][T23769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.343939][T23769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.376580][T23769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.402728][T23873] nftables ruleset with unbound set [ 766.448248][T23769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.470830][T23769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 766.529609][T23769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.545507][T23876] __nla_validate_parse: 9 callbacks suppressed [ 766.545523][T23876] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4597'. [ 766.670274][T23769] hsr_slave_0: entered promiscuous mode [ 766.732587][T23769] hsr_slave_1: entered promiscuous mode [ 766.768880][T23769] debugfs: 'hsr0' already exists in 'hsr' [ 766.782561][T23769] Cannot create hsr debugfs directory [ 766.822455][T23880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4599'. [ 766.852675][T23880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4599'. [ 766.878290][T23882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4599'. [ 766.905539][T23880] netlink: 'syz.2.4599': attribute type 10 has an invalid length. [ 766.945512][T23882] netlink: 'syz.2.4599': attribute type 10 has an invalid length. [ 766.976179][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 766.999038][T23890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4603'. [ 767.013001][T23888] nbd: nbd0 already in use [ 767.016190][T23880] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 767.057874][T23888] block nbd0: NBD_DISCONNECT [ 767.063102][T23888] block nbd0: Send disconnect failed -104 [ 767.086426][T23888] block nbd0: shutting down sockets [ 767.168656][T23890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4603'. [ 767.190123][T23890] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4603'. [ 767.295339][ T5624] Bluetooth: hci0: command tx timeout [ 767.517015][T23902] netlink: 144 bytes leftover after parsing attributes in process `syz.2.4604'. [ 767.674202][T23913] netlink: 'syz.1.4605': attribute type 1 has an invalid length. [ 767.706862][T23769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.753942][T23769] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.792382][T23905] tipc: New replicast peer: 255.255.255.255 [ 767.803447][T23905] tipc: Enabled bearer , priority 10 [ 767.826664][T23909] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4605'. [ 767.905236][T23913] bond3: entered promiscuous mode [ 767.910865][T23913] 8021q: adding VLAN 0 to HW filter on device bond3 [ 767.958559][T23908] Cannot find del_set index 2 as target [ 768.139248][T23921] nbd: device at index 64 is going down [ 768.226778][T23905] bond3: entered allmulticast mode [ 768.277157][T23913] bond3: (slave bridge2): making interface the new active one [ 768.286043][T23913] bridge2: entered promiscuous mode [ 768.293112][T23913] bridge2: entered allmulticast mode [ 768.301838][T23913] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 768.438559][T23140] udevd[23140]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 768.473756][T23146] udevd[23146]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 768.543884][T23769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.571854][T23769] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.727707][T23933] veth7: entered promiscuous mode [ 768.848754][T23769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.860932][T23769] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 768.924457][ T7558] tipc: Node number set to 1930837610 [ 769.375053][ T5624] Bluetooth: hci0: command tx timeout [ 769.433634][T23966] block nbd0: Unsupported socket: should be TCP or UNIX. [ 769.444440][T15121] IPVS: starting estimator thread 0... [ 769.507071][T23769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.534363][T23769] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.587231][T23967] IPVS: using max 30 ests per chain, 72000 per kthread [ 769.621814][T23980] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 770.312552][T23679] IPVS: starting estimator thread 0... [ 770.426718][T23989] IPVS: using max 33 ests per chain, 79200 per kthread [ 770.580834][T24000] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 771.082392][T24009] syzkaller1: entered promiscuous mode [ 771.093268][T24009] syzkaller1: entered allmulticast mode [ 771.254290][T23769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 771.297118][T23769] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 771.320446][T23769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 771.342768][T23769] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 771.366122][T23769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 771.392623][T23769] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 771.421262][T23769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 771.455247][ T5624] Bluetooth: hci0: command tx timeout [ 771.474818][T23769] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 771.634359][T24038] __nla_validate_parse: 22 callbacks suppressed [ 771.634377][T24038] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4633'. [ 771.754126][T23769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.844340][T23769] 8021q: adding VLAN 0 to HW filter on device team0 [ 771.880990][T15129] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.888209][T15129] bridge0: port 1(bridge_slave_0) entered forwarding state [ 771.969768][T15129] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.977003][T15129] bridge0: port 2(bridge_slave_1) entered forwarding state [ 772.318513][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4640'. [ 772.337976][T24057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4640'. [ 772.430338][T24057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4640'. [ 772.446844][T24057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4640'. [ 772.937801][T24085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4646'. [ 773.391828][T24085] bond2: entered promiscuous mode [ 773.398012][T24085] 8021q: adding VLAN 0 to HW filter on device bond2 [ 773.415421][T23769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.676222][T24094] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4647'. [ 773.691302][T24096] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4648'. [ 773.726629][T24096] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4648'. [ 774.397085][T24119] netlink: 'syz.3.4655': attribute type 83 has an invalid length. [ 774.424838][T24118] netlink: 'syz.3.4655': attribute type 83 has an invalid length. [ 774.446972][T24118] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4655'. [ 774.533765][T24120] batadv0: entered promiscuous mode [ 774.553846][T24120] macvtap1: entered promiscuous mode [ 774.563012][T24120] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 774.581873][T24120] batadv0: left promiscuous mode [ 774.640540][T24125] bond3: entered promiscuous mode [ 774.646651][T24125] 8021q: adding VLAN 0 to HW filter on device bond3 [ 774.766918][T23769] veth0_vlan: entered promiscuous mode [ 774.801072][T23769] veth1_vlan: entered promiscuous mode [ 774.879663][T23769] veth0_macvtap: entered promiscuous mode [ 774.954794][T23769] veth1_macvtap: entered promiscuous mode [ 775.059159][T23769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 775.098816][T24143] netlink: 'syz.1.4659': attribute type 11 has an invalid length. [ 775.108035][T23769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 775.119004][T24143] netlink: 'syz.1.4659': attribute type 4 has an invalid length. [ 775.131225][T24144] netlink: 'syz.1.4659': attribute type 11 has an invalid length. [ 775.137231][T24137] netlink: 'syz.3.4658': attribute type 1 has an invalid length. [ 775.141285][T24144] netlink: 'syz.1.4659': attribute type 4 has an invalid length. [ 775.175026][T24136] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 775.198936][T24137] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 775.336847][T15129] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.408336][T15129] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.422874][T15129] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.432587][T15129] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 775.594152][T24159] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 4, id = 0 [ 775.815213][T23672] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.831291][T24167] batadv_slave_1: entered promiscuous mode [ 775.833447][T23672] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 775.879052][T24158] lo speed is unknown, defaulting to 1000 [ 775.906266][T24158] virt_wifi0 speed is unknown, defaulting to 1000 [ 775.939959][T24166] batadv_slave_1: left promiscuous mode [ 775.961437][T23672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 775.981053][T23672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 776.118501][T23672] bridge_slave_1: left allmulticast mode [ 776.128660][T23672] bridge_slave_1: left promiscuous mode [ 776.134907][T23672] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.151796][T23672] bridge_slave_0: left allmulticast mode [ 776.158407][T23672] bridge_slave_0: left promiscuous mode [ 776.166887][T23672] bridge0: port 1(bridge_slave_0) entered disabled state [ 776.303448][T24175] Cannot find set identified by id 0 to match [ 776.802279][T23672] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 776.821806][T23672] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 776.835927][T23672] bond0 (unregistering): Released all slaves [ 776.852128][T23672] bond1 (unregistering): Released all slaves [ 776.873568][T23672] bond2 (unregistering): Released all slaves [ 776.899590][T23672] bond3 (unregistering): Released all slaves [ 776.924289][T23672] bond4 (unregistering): Released all slaves [ 776.953372][T23672] bond5 (unregistering): Released all slaves [ 776.983766][T24177] __nla_validate_parse: 11 callbacks suppressed [ 776.983782][T24177] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4572'. [ 777.067403][T24182] bond5: entered promiscuous mode [ 777.098191][T24182] 8021q: adding VLAN 0 to HW filter on device bond5 [ 777.140373][T24179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4668'. [ 777.185992][T24179] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4668'. [ 777.335816][T23672] tipc: Left network mode [ 777.890883][T24205] Cannot find set identified by id 0 to match [ 777.934922][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 777.961388][T23672] hsr_slave_0: left promiscuous mode [ 777.973667][T23672] hsr_slave_1: left promiscuous mode [ 777.980242][T23672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 777.990138][T23672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 778.603827][T24213] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4678'. [ 779.548088][T24229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4682'. [ 779.892483][T24227] ip6tnl2: entered allmulticast mode [ 779.930435][T24229] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4682'. [ 780.040798][T24232] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4683'. [ 780.148925][T24238] netlink: 88 bytes leftover after parsing attributes in process `syz.3.4686'. [ 780.264239][T24238] netlink: 'syz.3.4686': attribute type 1 has an invalid length. [ 780.328036][T24236] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4684'. [ 780.429269][T24254] IPVS: fo: FWM 3 0x00000003 - no destination available [ 780.819262][T24264] netlink: 14719 bytes leftover after parsing attributes in process `syz.1.4693'. [ 780.869696][T23672] IPVS: stop unused estimator thread 0... [ 781.065442][T24261] netlink: 'syz.0.4691': attribute type 2 has an invalid length. [ 781.955967][T24295] lo speed is unknown, defaulting to 1000 [ 782.003131][T24295] virt_wifi0 speed is unknown, defaulting to 1000 [ 782.111304][T24298] __nla_validate_parse: 4 callbacks suppressed [ 782.111326][T24298] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4701'. [ 782.160560][T24298] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4701'. [ 782.314173][T24288] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 782.326123][T15121] IPVS: starting estimator thread 0... [ 782.466296][T24307] IPVS: using max 32 ests per chain, 76800 per kthread [ 782.540386][T24311] netlink: 80 bytes leftover after parsing attributes in process `syz.3.4706'. [ 782.580509][T24311] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4706'. [ 782.614009][T24311] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4706'. [ 782.651704][T24311] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4706'. [ 782.689816][T24311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4706'. [ 782.721998][T24311] block nbd0: Unsupported socket: should be TCP or UNIX. [ 782.919592][T24320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4708'. [ 782.943089][T24322] netlink: 'syz.3.4709': attribute type 1 has an invalid length. [ 782.954883][T24320] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4708'. [ 784.683417][T24365] syzkaller0: entered promiscuous mode [ 784.693948][T24365] syzkaller0: entered allmulticast mode [ 784.778472][T24371] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 784.970026][T24390] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4729'. [ 785.393992][T24403] IPVS: fo: FWM 3 0x00000003 - no destination available [ 787.586310][T24473] __nla_validate_parse: 7 callbacks suppressed [ 787.586328][T24473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4754'. [ 787.604898][T24473] netlink: 'syz.1.4754': attribute type 3 has an invalid length. [ 787.612786][T24473] netlink: 'syz.1.4754': attribute type 5 has an invalid length. [ 787.636975][T24474] netlink: 'syz.2.4753': attribute type 1 has an invalid length. [ 787.645747][T24473] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4754'. [ 787.690574][T24474] 8021q: adding VLAN 0 to HW filter on device bond8 [ 787.709478][T24473] geneve3: entered promiscuous mode [ 787.715246][T24473] geneve3: entered allmulticast mode [ 787.788813][T24476] bond8: (slave gretap1): making interface the new active one [ 787.836346][T24476] bond8: (slave gretap1): Enslaving as an active interface with an up link [ 787.886111][T23681] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 44727 - 0 [ 787.930015][T23681] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 44727 - 0 [ 787.974910][T23681] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 44727 - 0 [ 788.026872][T23681] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 44727 - 0 [ 788.136091][T24480] syzkaller0: entered promiscuous mode [ 788.146983][T24480] syzkaller0: entered allmulticast mode [ 788.279614][T24484] syzkaller0: entered promiscuous mode [ 788.292243][T24484] syzkaller0: entered allmulticast mode [ 790.958919][T24524] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4769'. [ 791.374624][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 793.773172][T24531] veth0: left allmulticast mode [ 793.783280][T24531] veth0: left promiscuous mode [ 793.791585][T24531] bridge0: port 3(veth0) entered disabled state [ 793.851239][T24531] bridge_slave_0: left allmulticast mode [ 793.877902][T24531] bridge_slave_0: left promiscuous mode [ 793.897173][T24531] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.945200][T24531] bridge_slave_1: left allmulticast mode [ 793.951022][T24531] bridge_slave_1: left promiscuous mode [ 793.961081][T24531] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.018139][T24531] team0: Port device team_slave_0 removed [ 794.063130][T24531] team0: Port device team_slave_1 removed [ 794.088347][T24531] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 794.119628][T24531] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 794.153983][T24531] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 794.185008][T24531] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 794.201988][T24531] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 794.340388][T24561] netlink: 'syz.0.4775': attribute type 21 has an invalid length. [ 794.390688][T24561] netlink: 128 bytes leftover after parsing attributes in process `syz.0.4775'. [ 794.609039][T24561] netlink: 'syz.0.4775': attribute type 4 has an invalid length. [ 794.627314][T24561] netlink: 'syz.0.4775': attribute type 3 has an invalid length. [ 794.654086][T24561] netlink: 3 bytes leftover after parsing attributes in process `syz.0.4775'. [ 794.724944][T24579] syzkaller1: entered allmulticast mode [ 795.045288][T24595] netlink: 277 bytes leftover after parsing attributes in process `syz.1.4782'. [ 795.079257][T24595] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 795.103902][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4783'. [ 795.185684][T23682] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0 [ 795.202759][T23682] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0 [ 795.225107][T23682] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0 [ 795.245004][T23682] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0 [ 796.077517][T24613] netlink: 'syz.4.4788': attribute type 1 has an invalid length. [ 796.445777][T24623] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4792'. [ 796.468013][T24623] netlink: 'syz.2.4792': attribute type 2 has an invalid length. [ 796.627231][T24630] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4794'. [ 796.678664][T24630] 8021q: adding VLAN 0 to HW filter on device bond7 [ 796.689289][T24630] bond7: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 796.875029][T24635] netlink: 'syz.2.4796': attribute type 8 has an invalid length. [ 796.949300][T24642] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4797'. [ 797.071460][T24644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4798'. [ 797.105192][T24644] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4798'. [ 797.175194][T24654] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4799'. [ 797.306280][T24655] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 797.998288][T24677] netlink: 'syz.0.4806': attribute type 10 has an invalid length. [ 798.844373][T24711] IPVS: fo: FWM 3 0x00000003 - no destination available [ 798.896986][T24715] tipc: Enabled bearer , priority 0 [ 799.471114][T24726] netlink: 'syz.1.4819': attribute type 1 has an invalid length. [ 800.813971][T24741] __nla_validate_parse: 5 callbacks suppressed [ 800.813987][T24741] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4822'. [ 803.600035][T24733] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4800'. [ 803.695345][T24726] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 805.004659][T24741] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4822'. [ 805.011696][T24753] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 805.025014][T15129] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 805.040149][T15129] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 805.055157][T24753] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 805.074018][T15129] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 805.107283][T24753] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 805.113316][T24753] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 805.121463][T15129] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 805.149792][T24753] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 805.156911][T24753] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 805.168310][T24753] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 805.174258][T24753] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 805.483765][T24779] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4829'. [ 805.511372][T24785] syz_tun: entered allmulticast mode [ 805.565597][T24784] syz_tun: left allmulticast mode [ 805.575224][T24774] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 806.869806][T24823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4839'. [ 806.914210][T24823] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4839'. [ 806.989846][T24827] netlink: 'syz.3.4841': attribute type 1 has an invalid length. [ 807.018028][T24827] netlink: 224 bytes leftover after parsing attributes in process `syz.3.4841'. [ 807.097073][T24830] netlink: 'syz.1.4842': attribute type 1 has an invalid length. [ 807.177505][T24832] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4843'. [ 807.311795][T24830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 807.340596][T24833] team0: entered allmulticast mode [ 807.346130][T24833] team_slave_0: entered allmulticast mode [ 807.360129][T24833] team_slave_1: entered allmulticast mode [ 807.438229][T24838] macvlan0: entered promiscuous mode [ 807.456382][T24838] macvlan0: entered allmulticast mode [ 807.608577][T24852] netlink: 277 bytes leftover after parsing attributes in process `syz.0.4848'. [ 807.630928][T24849] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 807.645637][T24852] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 807.872911][T24860] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 808.195284][T24870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4852'. [ 808.229283][T24870] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4852'. [ 808.325135][T24872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4853'. [ 808.340582][T24872] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4853'. [ 808.893929][T24877] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4844'. [ 809.897251][T24916] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 809.916516][T24916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 809.997506][T24920] bond8: entered promiscuous mode [ 810.003226][T24920] 8021q: adding VLAN 0 to HW filter on device bond8 [ 810.179711][T24927] ipvlan3: entered allmulticast mode [ 810.428310][T24930] veth7: entered promiscuous mode [ 810.433686][T24930] veth7: entered allmulticast mode [ 810.440883][T24930] team0: Device veth7 is up. Set it down before adding it as a team port [ 810.500712][T24931] netlink: 'syz.2.4866': attribute type 11 has an invalid length. [ 810.770010][T24958] tipc: Resetting bearer [ 811.095249][T24955] tipc: Resetting bearer [ 811.229925][T15123] tipc: Resetting bearer [ 811.385425][T24978] bond4: entered promiscuous mode [ 811.390995][T24978] 8021q: adding VLAN 0 to HW filter on device bond4 [ 811.500184][T24981] syzkaller0: entered promiscuous mode [ 811.518774][T24981] syzkaller0: entered allmulticast mode [ 811.773472][T24995] netlink: 'syz.3.4882': attribute type 8 has an invalid length. [ 811.903179][T24995] veth1_to_team: entered promiscuous mode [ 811.933922][T24995] gretap0: entered promiscuous mode [ 811.962806][T24995] veth1_to_team: left promiscuous mode [ 811.987021][T24995] gretap0: left promiscuous mode [ 812.002706][T25010] __nla_validate_parse: 15 callbacks suppressed [ 812.002723][T25010] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4885'. [ 812.071371][T25008] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4886'. [ 812.109642][T25008] Bluetooth: MGMT ver 1.23 [ 812.314283][T25024] sch_tbf: burst 6 is lower than device syzkaller0 mtu (1500) ! [ 812.339171][T25007] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 812.348158][T25007] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 812.368681][T25027] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4887'. [ 812.480871][T25029] pim6reg1: entered promiscuous mode [ 812.489458][T25029] pim6reg1: entered allmulticast mode [ 812.526477][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.536808][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.545201][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.553566][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.561930][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.570286][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.578675][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.587047][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.595441][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.603775][T25033] tc action pedit unable to extract header offset for header type (0x4) [ 812.612169][T25033] 0: reclassify loop, rule prio 0, protocol 800 [ 813.007555][T25044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4896'. [ 813.041873][T25044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4896'. [ 813.071722][T25044] netlink: 'syz.2.4896': attribute type 32 has an invalid length. [ 813.170174][T25050] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4899'. [ 813.291930][T25053] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4900'. [ 813.292999][T25056] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4899'. [ 813.751399][T25071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4905'. [ 813.796022][T25071] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4905'. [ 814.536070][T25098] lo: entered allmulticast mode [ 814.542201][T25096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.577191][T25098] dvmrp8: entered allmulticast mode [ 814.585043][T25096] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 814.606888][T25098] netlink: 'syz.0.4913': attribute type 1 has an invalid length. [ 814.656893][T25098] 8021q: adding VLAN 0 to HW filter on device bond5 [ 814.893467][T25108] netlink: 'syz.0.4913': attribute type 10 has an invalid length. [ 815.078213][T25098] bond5: (slave veth1): Enslaving as a backup interface with a down link [ 815.166292][T25108] dummy0: entered promiscuous mode [ 815.240174][T25091] lo: left allmulticast mode [ 820.187664][T25165] tipc: Enabled bearer , priority 0 [ 820.201669][T25170] syzkaller0: entered promiscuous mode [ 820.235515][T25170] syzkaller0: entered allmulticast mode [ 820.281301][T25195] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 820.394598][T25175] tipc: Resetting bearer [ 820.470775][T25175] tipc: Resetting bearer [ 820.521495][T25175] tipc: Disabling bearer [ 820.555889][T25195] wireguard0: entered promiscuous mode [ 820.574143][T25195] wireguard0: entered allmulticast mode [ 820.709497][T25213] tipc: Enabled bearer , priority 0 [ 820.762068][T25202] tipc: Resetting bearer [ 820.786491][T25211] syzkaller0: entered promiscuous mode [ 820.804910][T25211] syzkaller0: entered allmulticast mode [ 821.106531][T25201] tipc: Resetting bearer [ 821.214989][T25201] tipc: Disabling bearer [ 821.858801][T25241] ip6tnl1: left allmulticast mode [ 821.889810][T25241] bond5: left promiscuous mode [ 821.909302][T25241] ip6tnl2: left allmulticast mode [ 821.938964][T25241] bond8: left promiscuous mode [ 822.006035][T25242] bridge0: port 4(veth0) entered blocking state [ 822.017522][T25242] bridge0: port 4(veth0) entered disabled state [ 822.024853][T25242] veth0: entered allmulticast mode [ 822.035623][T25242] veth0: entered promiscuous mode [ 822.046244][T25242] bridge0: port 4(veth0) entered blocking state [ 822.052702][T25242] bridge0: port 4(veth0) entered forwarding state [ 822.082166][T25248] bridge0: port 5(veth1) entered blocking state [ 822.113722][T25248] bridge0: port 5(veth1) entered disabled state [ 822.134898][T25248] veth1: entered allmulticast mode [ 822.142193][T25248] veth1: entered promiscuous mode [ 822.148760][T25248] bridge0: port 5(veth1) entered blocking state [ 822.155236][T25248] bridge0: port 5(veth1) entered forwarding state [ 822.172405][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.185222][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.197266][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.209348][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.221393][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.233506][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.245543][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.257608][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 822.269652][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.285191][ C0] net_ratelimit: 3661 callbacks suppressed [ 825.285211][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.302959][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.314761][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.327904][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.339816][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.351430][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.363174][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.374794][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.386497][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 825.398680][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 828.134348][ C1] sched: DL replenish lagged too much [ 830.294833][ C0] net_ratelimit: 6383 callbacks suppressed [ 830.294853][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.312538][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.324361][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.336004][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.347645][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.359391][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.371613][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.384215][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.396139][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 830.407983][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.304550][ C0] net_ratelimit: 12411 callbacks suppressed [ 835.304571][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.321723][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.332956][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.344884][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.356123][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.367355][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.378588][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.389836][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.401067][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 835.412295][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.315096][ C0] net_ratelimit: 18415 callbacks suppressed [ 840.315115][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.332252][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.343492][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.355405][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.366630][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.377865][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.389098][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.400322][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 840.411847][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 840.423101][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.505438][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 845.325097][ C0] net_ratelimit: 20284 callbacks suppressed [ 845.325117][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 845.342314][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.354442][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.365675][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.376910][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.388812][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.400060][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.411737][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.422967][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 845.434218][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 850.334406][ C0] net_ratelimit: 20662 callbacks suppressed [ 850.334426][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.351571][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.362846][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.374091][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.385322][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.397472][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 850.408749][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.421322][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.432569][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 850.443820][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.344355][ C0] net_ratelimit: 21750 callbacks suppressed [ 855.344376][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.361537][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.372804][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.385126][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 855.396651][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.407956][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.419210][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.430438][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.441659][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 855.453590][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 860.354713][ C0] net_ratelimit: 22711 callbacks suppressed [ 860.354733][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.371877][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.383130][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.395045][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.406293][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.417530][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.428777][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.440047][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 860.451581][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 860.462820][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.364699][ C0] net_ratelimit: 24908 callbacks suppressed [ 865.364719][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.381864][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.393101][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.404496][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.415721][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.426940][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 865.438457][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.449695][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.460918][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 865.472149][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.374684][ C0] net_ratelimit: 25646 callbacks suppressed [ 870.374704][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.392195][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.403428][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 870.414677][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.426746][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.437982][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.449205][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.460431][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.471668][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 870.483580][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.384399][ C0] net_ratelimit: 26952 callbacks suppressed [ 875.384419][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.401565][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.412815][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.424052][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.435283][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.446516][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.457751][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.468990][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.482258][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 875.493530][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.394503][ C0] net_ratelimit: 26825 callbacks suppressed [ 880.394522][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.411695][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.422933][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 880.434172][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.446248][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.457478][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.468709][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.479942][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.491202][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 880.503153][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.404396][ C0] net_ratelimit: 24520 callbacks suppressed [ 885.404417][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 885.422921][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.434180][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.445418][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.456664][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.468225][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.480120][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 885.491373][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.502972][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 885.514211][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.414587][ C0] net_ratelimit: 24626 callbacks suppressed [ 890.414606][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.431730][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.442963][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.454242][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.465463][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.476690][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.487909][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 890.499420][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.510646][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 890.521870][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.424398][ C0] net_ratelimit: 25088 callbacks suppressed [ 895.424418][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.441579][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.453178][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.465159][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 895.476414][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.487660][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.498901][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.510575][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.521822][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 895.533100][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.434356][ C0] net_ratelimit: 27897 callbacks suppressed [ 900.434377][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.451516][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.463410][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.474637][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.485861][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.497079][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.508302][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.519531][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 900.530754][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 900.542271][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.444447][ C0] net_ratelimit: 27454 callbacks suppressed [ 905.444469][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.461611][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.472850][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.484083][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.496176][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.507411][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.518652][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.529881][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 905.541107][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 905.552344][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.454380][ C0] net_ratelimit: 28825 callbacks suppressed [ 910.454402][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.471557][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.482809][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.494058][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.505303][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 910.516556][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.528794][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.540046][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.551295][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 910.562546][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.464769][ C0] net_ratelimit: 29175 callbacks suppressed [ 915.464790][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.481969][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.493313][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.504561][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.515799][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 915.527039][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.539376][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.550618][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.561865][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 915.573095][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.474351][ C0] net_ratelimit: 29005 callbacks suppressed [ 920.474373][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.491528][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.502780][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.514060][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.525303][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.537506][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.548767][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.559999][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.571250][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 920.582489][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 925.484580][ C0] net_ratelimit: 29560 callbacks suppressed [ 925.484601][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.501793][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.513044][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.524394][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.535643][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.546883][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.558127][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.569370][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.580624][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 925.591869][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 927.174343][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 927.181317][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P25185/1:b..l [ 927.189858][ C0] rcu: (detected by 0, t=10503 jiffies, g=140241, q=99333 ncpus=2) [ 927.197841][ C0] task:syz.4.4937 state:R running task stack:26704 pid:25185 tgid:25179 ppid:23769 task_flags:0x40054c flags:0x00080001 [ 927.212705][ C0] Call Trace: [ 927.216003][ C0] [ 927.218955][ C0] __schedule+0x17d9/0x56c0 [ 927.223487][ C0] ? __lock_acquire+0x683/0x2cf0 [ 927.228445][ C0] ? __lock_acquire+0x683/0x2cf0 [ 927.233402][ C0] ? __lock_acquire+0x683/0x2cf0 [ 927.238357][ C0] ? __pfx___schedule+0x10/0x10 [ 927.243218][ C0] ? __lock_acquire+0x683/0x2cf0 [ 927.248172][ C0] ? __lock_acquire+0x683/0x2cf0 [ 927.253129][ C0] preempt_schedule_irq+0x4d/0xa0 [ 927.258170][ C0] irqentry_exit+0x14f/0x8f0 [ 927.262791][ C0] ? trace_irq_disable+0x3b/0x140 [ 927.267832][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 927.273822][ C0] RIP: 0010:lock_acquire+0x58/0x350 [ 927.279034][ C0] Code: 8b 05 bc a9 ca 11 48 89 44 24 58 0f 1f 44 00 00 65 8b 05 bf a9 ca 11 83 f8 08 0f 83 83 01 00 00 89 c0 48 0f a3 05 a8 b9 b4 0e <73> 0d e8 f1 29 09 00 84 c0 0f 84 ca 01 00 00 83 3d a2 ec b4 0e 00 [ 927.298996][ C0] RSP: 0018:ffffc900055272a0 EFLAGS: 00000293 [ 927.305076][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000002 [ 927.313052][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8eb59c60 [ 927.321029][ C0] RBP: ffffffff8177827f R08: 0000000000000000 R09: 0000000000000000 [ 927.329012][ C0] R10: ffffc90005527438 R11: ffffffff81b1fc80 R12: 0000000000000002 [ 927.337085][ C0] R13: ffffffff8eb59c60 R14: 0000000000000000 R15: 0000000000000000 [ 927.345069][ C0] ? unwind_next_frame+0x8f/0x2550 [ 927.350194][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 927.356377][ C0] ? unwind_next_frame+0x8f/0x2550 [ 927.361494][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.367567][ C0] ? unwind_next_frame+0x8f/0x2550 [ 927.372686][ C0] unwind_next_frame+0xac/0x2550 [ 927.377626][ C0] ? unwind_next_frame+0x8f/0x2550 [ 927.382747][ C0] ? do_syscall_64+0x353/0x580 [ 927.387527][ C0] ? unwind_next_frame+0x8f/0x2550 [ 927.392650][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 927.398813][ C0] arch_stack_walk+0x11b/0x150 [ 927.403590][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.409665][ C0] stack_trace_save+0xa9/0x100 [ 927.414445][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 927.419838][ C0] kasan_save_stack+0x3e/0x60 [ 927.424526][ C0] ? kasan_save_stack+0x3e/0x60 [ 927.429383][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 927.434756][ C0] ? call_rcu+0xee/0x8b0 [ 927.439014][ C0] ? evict+0x987/0xb50 [ 927.443089][ C0] ? dentry_kill+0x1b9/0x880 [ 927.447684][ C0] ? finish_dput+0x1a/0x260 [ 927.452195][ C0] ? __fput+0x675/0xa50 [ 927.456354][ C0] ? task_work_run+0x1d9/0x270 [ 927.461125][ C0] ? do_exit+0x73a/0x2360 [ 927.465469][ C0] ? do_group_exit+0x22d/0x2f0 [ 927.470240][ C0] ? get_signal+0x121b/0x12c0 [ 927.474924][ C0] ? arch_do_signal_or_restart+0xbb/0x860 [ 927.480654][ C0] ? exit_to_user_mode_loop+0x104/0x730 [ 927.486211][ C0] ? do_syscall_64+0x353/0x580 [ 927.490988][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.497107][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 927.502318][ C0] ? __pfx_i_callback+0x10/0x10 [ 927.507179][ C0] call_rcu+0xee/0x8b0 [ 927.511266][ C0] ? locks_free_lock_context+0x50/0xd0 [ 927.516741][ C0] ? __destroy_inode+0x445/0x630 [ 927.521688][ C0] ? __pfx_sock_free_inode+0x10/0x10 [ 927.526987][ C0] evict+0x987/0xb50 [ 927.530908][ C0] ? __pfx_evict+0x10/0x10 [ 927.535332][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 927.540461][ C0] ? _raw_spin_unlock+0x28/0x50 [ 927.545326][ C0] ? iput+0xb84/0xf00 [ 927.549328][ C0] dentry_kill+0x1b9/0x880 [ 927.553754][ C0] finish_dput+0x1a/0x260 [ 927.558102][ C0] __fput+0x675/0xa50 [ 927.562099][ C0] task_work_run+0x1d9/0x270 [ 927.566706][ C0] ? __pfx_task_work_run+0x10/0x10 [ 927.571841][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 927.576985][ C0] do_exit+0x73a/0x2360 [ 927.581166][ C0] ? __lock_acquire+0x683/0x2cf0 [ 927.586123][ C0] ? __pfx_do_exit+0x10/0x10 [ 927.590737][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 927.595790][ C0] do_group_exit+0x22d/0x2f0 [ 927.600395][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 927.605612][ C0] get_signal+0x121b/0x12c0 [ 927.610149][ C0] arch_do_signal_or_restart+0xbb/0x860 [ 927.615715][ C0] ? fput+0xa0/0xd0 [ 927.619573][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 927.625738][ C0] ? __x64_sys_sendmsg+0x25d/0x290 [ 927.630885][ C0] exit_to_user_mode_loop+0x104/0x730 [ 927.636301][ C0] ? rcu_is_watching+0x15/0xb0 [ 927.641102][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.647178][ C0] do_syscall_64+0x353/0x580 [ 927.651816][ C0] ? trace_irq_disable+0x3b/0x140 [ 927.656861][ C0] ? clear_bhb_loop+0x70/0xc0 [ 927.661559][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 927.667466][ C0] RIP: 0033:0x7f9c97d9e0d9 [ 927.671888][ C0] RSP: 002b:00007f9c98bb1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 927.680310][ C0] RAX: 0000000000000038 RBX: 00007f9c98026180 RCX: 00007f9c97d9e0d9 [ 927.688291][ C0] RDX: 0000000000000000 RSI: 00002000000012c0 RDI: 0000000000000004 [ 927.696268][ C0] RBP: 00007f9c97e35024 R08: 0000000000000000 R09: 0000000000000000 [ 927.704250][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 927.712233][ C0] R13: 00007f9c98026218 R14: 00007f9c98026180 R15: 00007fff957ca648 [ 927.720234][ C0] [ 930.494417][ C0] net_ratelimit: 27183 callbacks suppressed [ 930.494437][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.511586][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.522860][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.534104][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.545346][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.556582][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.567825][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.579071][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.590313][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 930.602273][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.504382][ C0] net_ratelimit: 28695 callbacks suppressed [ 935.504402][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.521579][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.532821][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.544072][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.555312][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.566584][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.578043][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.590278][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.601535][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 935.612784][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)