last executing test programs: 31.330723129s ago: executing program 4 (id=2417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x18, 0x6, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf3ffffff, 0x0, 0x0, 0x0, 0x80ffffff}, [@jmp={0x5, 0x0, 0x849aee721dcc84be, 0x0, 0x0, 0x2}, @jmp={0x5, 0x0, 0xa2cc39c635ab99fe, 0x0, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x43}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async, rerun: 64) listen(r0, 0x0) (rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) (async, rerun: 32) r2 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x24, 0x140f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xb, 0x45, 'uverbs\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0xc4000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8b, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) (rerun: 32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f0000000140), &(0x7f0000000200)=@tcp6=r0, 0x2}, 0x20) (async) r4 = socket$inet6(0xa, 0x3, 0x3c) sendmsg$inet6(r4, &(0x7f0000000400)={&(0x7f0000000040)={0xa, 0x4e21, 0x9, @loopback, 0x200}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000140)="9c83367b4ca71dda489bd630c892c0a59d01d2187e394eb57bde79a540c63dab4e748871a0aed3464053c2b8fa74a744fe69484997f6354c7ec2da7eda0f7edd7ccfabe598e7adb9303f5b5345814e0fe7850c093fb758", 0x57}], 0x1, &(0x7f0000000500)=[@hoplimit={{0x14, 0x29, 0x34, 0x1}}, @rthdr_2292={{0xb8, 0x29, 0x39, {0x87, 0x14, 0x1, 0xff, 0x0, [@rand_addr=' \x01\x00', @private0={0xfc, 0x0, '\x00', 0x1}, @private0, @dev={0xfe, 0x80, '\x00', 0x2f}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, @loopback, @private2, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}}}, @dstopts={{0x20, 0x29, 0x37, {0x0, 0x0, '\x00', [@ra={0x5, 0x2, 0xffff}]}}}, @dontfrag={{0x14}}, @hopopts={{0x48, 0x29, 0x36, {0x2b, 0x5, '\x00', [@calipso={0x7, 0x28, {0x1, 0x8, 0x0, 0x4, [0x5, 0x9, 0x6, 0x5]}}]}}}, @rthdr_2292={{0x78, 0x29, 0x39, {0x21, 0xc, 0x1, 0x4, 0x0, [@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x33, 0x4, 0x1, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x20}, @remote]}}}, @hoplimit_2292={{0x14}}], 0x218}, 0x0) (async) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x5000, 0x80000001, @remote, 0x7}, 0x1c) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000180001000000000000000000021f000008001e0003a8d1000c0000000000", @ANYRES32=0x0, @ANYBLOB], 0x30}}, 0x0) (async) syz_emit_ethernet(0x42, &(0x7f00000000c0)={@local, @random="492b00014011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x66, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @multicast2}, "000088be"}}}}}, 0x0) (async, rerun: 64) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) (rerun: 64) 31.163717056s ago: executing program 0 (id=2419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x78, r1, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xc185}, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r4 = gettid() (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, 0x0) (async, rerun: 64) r8 = socket$inet(0x2, 0x2, 0x0) (rerun: 64) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r8, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000032c0)={0x1c, r9, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}}, 0x80000) (async) r12 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r12}}, 0x40) (async, rerun: 32) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (rerun: 32) writev(r13, &(0x7f0000000140)=[{&(0x7f0000000200)='F', 0x1}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r13, 0x0) (async, rerun: 64) r14 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (rerun: 64) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000640)={&(0x7f00000002c0), 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xfc, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, 0xffffffffffffffff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r13}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r14}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)={0x3c, r3, 0x1, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) 30.765020593s ago: executing program 1 (id=2422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) 30.655002276s ago: executing program 2 (id=2423): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="24000000000000002900f5ff3200000000000000000000000000ffffac1414aa", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) 30.357323642s ago: executing program 2 (id=2424): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r1, 0x0, 0x42, &(0x7f0000000100)={'TPROXY\x00'}, &(0x7f0000000400)=0x1e) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000140)=""/133, &(0x7f0000000200)=0x85) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff00000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000126204001c0012800b000100697036746e6c00000c0002800500090000000000df866bab11b042b0c07ab4df448ce1eeb32c3f385f3f546075a7892231a814845352d9815b8b5970e1992f"], 0x3c}}, 0x0) 30.347757393s ago: executing program 1 (id=2425): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="07000000000000009500010000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r1 = socket(0x10, 0x1, 0x400) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000840)=0x0) sendmmsg(r0, &(0x7f0000000d40)=[{{&(0x7f00000001c0)=@in6={0xa, 0x4e20, 0x7ff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x9d8c}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)="99d4c355543e2fae323bb62d6c59e0a49a4826668fe0a499fa3395e2050943fab184b4f3", 0x24}, {&(0x7f0000000280)="63835bd52555e918ba118fac4a57e2963b9c982a43ee32afd9e5c107adbb5ded15099b5d423b793cf67c7e12529bb96dda34be710e5c196961a39b8cae2d1ea8360d30f06d708e28240ec6e9c0b53af1", 0x50}, {&(0x7f0000000300)='[', 0x1}, {&(0x7f00000003c0)="0c20837544a7c0e35d64a07096045cb0c2ea0c5154601ebeb437136c934a7b97885fe5b538e651d6a33d51845afa6f3427525077fe4a40bca94549b786b01d3cd7fe3e2b52cdaff8499be7130b1e59d7f077741baddb5b8845cdce51faa57ce5aa5437ad366233ae62b52bb3ec9c422a86d6dd92faf4d0ab09491de4813607115197eab827c0f31e3b564ede07c9cf3d35a6625cca987118a06758fbd0", 0x9d}, {&(0x7f00000005c0)="64136c36c2244bff41d06ef0a545a9260335d35d0efaec263ddca84db0912de6cb2e354611c173f8abf214ec45545bca8b760ec1a8164d8998b25c358f6f8c45c9ec7c71dd989d85965dac8e8c1d2db003fd41c20a853fed757fbf16618c41d822e845aff1d4c4d6c61a8e7f2d0ed56cd39f01f53396be725d2be9fc997f61611af099b76e1d83b6bb9ab966079aea78bafdb0b5ff05d6034a", 0x99}, {&(0x7f0000000680)="c970588d334af836348e42a21bb922e55bb4fcfd4a3fd36f5a25d77c2a50cd08e35ed7d5f74be993848e9a4fb4d5bc0f9895fe9de00feea9213cc2ced05cfe6ca0f421efa93f4d74e33cc7f90cb0d579dd32dec5e483365112fb6f", 0x5b}, {&(0x7f0000000700)="9eb5e17ed6c0731390b47cd17e7c63dfc20274ec89cb9bfad4b417d943236f8d84d4456faacf4dc044aa24d247a457376e785838a4f0bdf310f11918fcec4db99cf8079404e9ef254bd117fc547c38cbed1363fbc96cea6434a3d86c78421e91904170922771aab482f6b60bd48f50f8db953cb77559923478f2fa48b65a1263b3b8c21b418546b86009a3eff3ac8766c6463f", 0x93}], 0x7}}, {{&(0x7f0000000880)=@nfc_llcp={0x27, r3, 0xffffffffffffffff, 0x3, 0x1, 0x0, "7e156851081eceb418171b0835e1cbc0640d3f0e99bf039d3df4a34c4f86c8415059142d87fcc6c4278f7213650c21e159660f284842fab74bbf23f9713f55"}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000140)="c2f3b8196fa6aad33a55c637e72e3d8fd85ac4493131bda7f1d1331fd3a7", 0x1e}], 0x1, &(0x7f0000000980)=[{0x40, 0x104, 0x2, "a52a533f9ff47e50ed741bf0af604af588a7ac37b20c3738429b98a4c1d6d13a8f5181156a8915f4e490c6beff6b952e"}], 0x40}}, {{&(0x7f00000009c0)=@l2={0x1f, 0x8, @none, 0x7, 0x1}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000a40)="32126cf9468b26699d4188c87a89b36d41624d264ff80d1ee6cdfc547a091ff0798c5ee49c56b6cb1bc28bd4074c44a78f6e4e3c7de649a213b8501b20a3c3a21a99fef96f34800a122269f7f002b6bcc08f4f6baee88debd524a720c3e8aed68e6560cbc85ae46ea1298a59ba0b5b775907ea402f49ea438ce784ad7bc42d65765d070f7daac9be9d5b933a31ebda02c6142b623bc41026f8baf5989109aef63f1e", 0xa2}], 0x1, &(0x7f0000000b40)=[{0x38, 0x111, 0x8, "0e9a0640ca52a68eb2420e7cc947d9195803d706e1659178426ff29f367b66ed8a01c3eef8228e26"}], 0x38}}, {{&(0x7f0000000b80)=@ieee802154={0x24, @long={0x3, 0x1}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000e40)="4d2006fee7e90578d4a7933bab88363028550bb1d10b47da479761c7a531ea06ecea28e76337478909000000000000003498b993a2b059db569ade7f2d8a7807350c3b5a8ddaba3d263e5f5a75d82de06a1f18f39144ea512748178126daa42e728b24b4785ece2c7c5d96d741ae4ea905643b2c7dbc5604d06022fc59b220758809d24f3e618f313f29c72be28834fd65cb21ff0ec1e203e0d06ca0d9e89c2ab48ee12c5e4b9727745d901a1a6951421f0bf76be6adb85cc1b73f032477fc3b80150509329cba3b7f630278e1aa9f63d865b5148a37ec6dd16b9d588c", 0xdd}, {&(0x7f0000000c80)="b1584cf7ff517f380526c077dfb8bde9aeffdf7eee797014be6dd211d6af98326a91da8eabecf664a557e2eaeb4b6d16d2f202247104ce701bdd082966d7a28215cc2711072fdd0df9bff905c4153368eaf6446ba4ad9e9666451deadff151e5b0b6da0246e4c93e4e9ca41c", 0x6c}], 0x2}}], 0x4, 0x80) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000"], 0x48}}, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='vlan0\x00', 0x10) setsockopt$inet_mreqn(r5, 0x0, 0x20, &(0x7f0000000080)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) r6 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000004c0)={&(0x7f0000000100)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="17000000000000000000000007000000890704ac1414bb0011000000000000000000000001"], 0x30}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES8], 0x68}, 0x1, 0x0, 0x0, 0x88d1}, 0x10) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfc) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000046c0)={'filter\x00', 0x7, 0x4, 0x3c8, 0x0, 0x0, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @mac=@remote, @loopback, @local, 0x1, 0x1}}}, {{@arp={@multicast2, @private=0xa010100, 0xff, 0xffffff00, 0xc, 0x4, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xbe9240b8a223bba0]}}, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, {[0xff, 0x0, 0xff, 0xff, 0xff]}}, 0x2, 0x6, 0x23b0, 0x9dd7, 0x80, 0x9, 'veth1_vlan\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x0, 0x12}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 29.92905672s ago: executing program 0 (id=2427): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$sock_int(r4, 0x110, 0x7, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="07000000000000001fff0200000014000180060008000200000008000300ac1414aa2bf34dfba08427f9197c21"], 0x28}}, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x20040880) connect$inet6(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r8) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r10], 0x1c}}, 0x4008054) write$nci(r7, &(0x7f0000000640)=ANY=[@ANYBLOB="400109a1"], 0x87) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000180)={{{@in6=@mcast2, @in6=@private2, 0x4e23, 0x0, 0x4e24, 0xa47, 0x2, 0x20, 0xa0, 0x33, r6}, {0x800, 0x80000001, 0x800, 0xfe3, 0x3, 0x0, 0x3bc, 0x101}, {0x4, 0x4e69, 0xfffffffffffff69e, 0x7ff}, 0x6, 0x0, 0x2, 0x0, 0x3, 0x2}, {{@in=@empty, 0x4d3}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x43}}, 0x3500, 0x3, 0x3, 0x8, 0x8, 0xfffffff7, 0x8}}, 0xe8) 29.874995231s ago: executing program 1 (id=2428): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7}, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x38, 0x2f, 0x9, 0x70bd2a, 0xe4ff, {0x4}, [@nested={0x24, 0x11, 0x0, 0x1, [@generic="e796bd6dd42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9"]}]}, 0x38}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r2, 0x11a, 0x2, 0x0, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000340)={@private2, @ipv4={'\x00', '\xff\xff', @local}, @loopback={0xfc00000000000000}, 0x7, 0xd, 0x4, 0x0, 0x7, 0x800002}) shutdown(r0, 0x1) 29.734970679s ago: executing program 4 (id=2429): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x8502}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}]}, 0x3c}}, 0x8000084) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) close(r2) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'team_slave_1\x00', @random="2b0100004e03"}) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x8502}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x7, 0x3}]}}}]}, 0x3c}}, 0x8000084) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) (async) close(r2) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'team_slave_1\x00', @random="2b0100004e03"}) (async) 29.572683075s ago: executing program 3 (id=2430): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) ppoll(0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000010700000000b5474b9d9bca94e3000000000a0000000c0002006e6c2e2f1c9e721526faed31a425fd744e2c818b80df5955648d561eedc698023838029b8eb54383fc5589ed5fc02a38b6bfee9f0f01c082b526a15a69e960ad10ea40de3e1541d0d3afc0143ba56dd9d70df885382793da75572c1e112e8e0c00004000000000b028042d0d58ab0af1fac3f900"/159], 0x20}}, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000001000010700000000b5474b9d9bca94e3000000000a0000000c0002006e6c2e2f1c9e721526faed31a425fd744e2c818b80df5955648d561eedc698023838029b8eb54383fc5589ed5fc02a38b6bfee9f0f01c082b526a15a69e960ad10ea40de3e1541d0d3afc0143ba56dd9d70df885382793da75572c1e112e8e0c00004000000000b028042d0d58ab0af1fac3f900"/159], 0x20}}, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000001080)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002080)=""/4096, 0x1000}, {&(0x7f0000000280)=""/191, 0xbf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) (async) bind$rds(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xe8001, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x7, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000500000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bc8900000000000035090100000000009500000000000000b7080000000100007b9a00fe00000000b509ffffff1f0000c3aaf0fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608ebff76000000bf9800000000000056080000000000008500000000000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r5, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETGROUP(r5, 0x400454ce, 0x0) getsockopt$llc_int(r4, 0x10c, 0x2, &(0x7f0000001b00), &(0x7f00000004c0)=0x4) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r9, @ANYBLOB="60003080050003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000040)={0x3, 0x7fff, 'HN(', 0xc, 0x8}) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x3}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40), 0x0, 0x20}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5d3}], 0x60, 0x20000005}, 0x0) (async) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000017c0)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x3}, {&(0x7f0000001a00)=""/116, 0x74}, &(0x7f0000001b40), 0x0, 0x20}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x5d3}], 0x60, 0x20000005}, 0x0) 29.488967104s ago: executing program 2 (id=2431): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x8000000, 0x4000041}, 0x2000800) 29.190907981s ago: executing program 4 (id=2432): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) (fail_nth: 3) 28.989981493s ago: executing program 2 (id=2433): r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x3, {0x60, 0x0, 0x0, r2, {0xe, 0x2}, {0xffff, 0xffff}, {0x5}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8, "0000aa0000000000000000000100"}}}]}, 0x48}}, 0x80) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4000000005000000000000000002000000000000000000000000000000000000de0000000100"/64], 0x40}}, 0x0) (async) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'erspan0\x00', {0x7}, 0xcf5c}) 28.9886807s ago: executing program 3 (id=2434): syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "04e1ff", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe000000, 0x80, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "000000050000000026000400"}, {0x18, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x18, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2f527a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x7, "f5000000000000000000000200000000000000000000000000008879e66485201a0015ca837400"/55}, {0x0, 0x14, "5e14f0e7e72d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fa632dbf04542188b196e213408c"}, {0x3, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 28.987226983s ago: executing program 0 (id=2435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'vlan1\x00', 0x84aebfbd634927f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f00000001c0)={{0x2, 0x4e22, @remote}, {0x6, @broadcast}, 0x40, {0x2, 0x4e23, @loopback}, 'dvmrp1\x00'}) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001a000100000000000000cf0080202000000000000000000008000200ffffffff080001"], 0x2c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=ANY=[@ANYBLOB="780000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0020000000060000580012800b00010067726574617000004800028006000e0002000000050017000100000006000300070000000800050008002200050008148000000005001600010000000500080005000000040012"], 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x2, 0x3}, {0x0, 0x9}, {0xffff, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_TTL={0x5, 0x43, 0xf}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 28.915056825s ago: executing program 4 (id=2436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x40}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="59cf0000000000000000080001800800050004000000060001"], 0x28}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000002d00010324bd7006fcdbdf251500000012005e08378d390000000002458d29f2877c0000"], 0x28}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x13}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, 0x0, &(0x7f0000000100)) 28.914767467s ago: executing program 1 (id=2437): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0x2e, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 28.714854832s ago: executing program 2 (id=2438): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0xef, 0xc}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb366}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0x3, 0x2) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0xf8}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0x5, 0x5, 0x3a, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, 0x7, 0x0, 0x5}}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf25130000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0800030000000000580001800800030003000000140002006e7230000000000000000000000000000800030000000000140002006772657461703000000000000000000014000200000000000000000000000000000000000800030006000000040001804800018008000100", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000300010000001400020076657468315f766c616e000000000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="0800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x8050}, 0x400) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000000b512000a20000000000a01040000000000000000020000000900010073797a300000000064000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000204240004"], 0xac}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x6}}, [@TCA_RATE={0x6, 0x5, {0xef, 0xc}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xb366}]}, 0x34}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0x3, 0x2) (async) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) write$tun(r5, &(0x7f0000000840)={@val={0x8, 0xf8}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0x14, 0x66, 0x0, 0xb, 0x4, 0x0, @rand_addr=0x64010101, @broadcast}}}, 0x22) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0xf, 0x5, 0x5, 0x3a, @mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, 0x7, 0x0, 0x5}}) (async) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000500)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r1, @ANYBLOB="00022bbd7000fedbdf25130000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="0800030000000000580001800800030003000000140002006e7230000000000000000000000000000800030000000000140002006772657461703000000000000000000014000200000000000000000000000000000000000800030006000000040001804800018008000100", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08000300010000001400020076657468315f766c616e000000000000080003000300000008000100", @ANYRES32=r7, @ANYBLOB="0800030003000000"], 0xd4}, 0x1, 0x0, 0x0, 0x8050}, 0x400) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000100001000000000000000000b512000a20000000000a01040000000000000000020000000900010073797a300000000064000000120a01040000000000000000020000000900010073797a30000000000900020073797a30000000000800030000000204240004"], 0xac}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) (async) 28.641354672s ago: executing program 3 (id=2439): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006001700800a0000140002"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newsa={0x164, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x20}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffffffffffc, 0xffffffffffffffff, 0x4}, {0x3bc7, 0x7, 0x80000007}, {0x2, 0x0, 0xffffffff}, 0x70bd2a, 0x800000, 0x2, 0x4, 0x0, 0xe5}, [@replay_esn_val={0x20, 0x17, {0x1, 0x70bd2a, 0x0, 0x0, 0x0, 0x0, [0x5]}}, @sa_dir={0x5, 0x21, 0x2}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}}}]}, 0x164}}, 0x24004000) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000500)="5c0000001700010012aaaaaaaaaa0106000c0002000400000000006400", 0x1d) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="6c0000004000080028bd7000fedbdf251400000055c67e4ad2c13008a343c90cd7e99e0eb0f25116a4b570a16590ec479c7d0fcbe574324d73acaf37309805cc2ee791dec29fa1ce1e8285459094c70bf9c0ddbf3def33dab1e6c74662906cf902f72153849635d848310000"], 0x6c}, 0x1, 0x0, 0x0, 0xc884}, 0x4001) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002480)=@newtaction={0x488, 0x30, 0x12f, 0x0, 0xffe4, {}, [{0x474, 0x1, [@m_police={0x470, 0x1, 0x0, 0x0, {{0xb}, {0x444, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x4, 0x2, 0x4, 0x4, {0x3, 0x0, 0x400, 0xfff, 0x5, 0x10000002}, {0x3, 0x2, 0x3ff, 0x2, 0x5}, 0x2, 0x3, 0xeea4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x2, 0x0, 0x5, 0x7, 0x6, 0x5, 0x5, 0x4, 0x10000, 0xfffffff1, 0x800, 0x1, 0x1, 0x0, 0x4, 0x8, 0x8, 0x4000005, 0x76ccfa5f, 0x5, 0x9, 0x80, 0x451, 0x2, 0x1, 0x8, 0x8, 0xfff, 0x100, 0x8, 0x1, 0x9, 0xffffffff, 0xc, 0x1, 0x8, 0x7, 0x5, 0x9, 0x6, 0xfff, 0x9, 0x9, 0x4, 0x200, 0x8000, 0xfffffeff, 0x1, 0x80, 0xa8, 0x7f, 0x84, 0x6, 0x0, 0x8, 0xfb, 0x9, 0x97, 0x6, 0x791a, 0x9, 0x3, 0x7, 0x2, 0x0, 0x66ab6d08, 0xd, 0x8, 0x8, 0x2, 0xfffffff7, 0x9, 0x1e7, 0x7, 0xd43, 0x9, 0x6, 0x8, 0x7, 0x4, 0x0, 0x5a8b, 0x6f, 0x3f, 0x6, 0x7, 0x4, 0x15, 0x7f, 0xfff, 0xb, 0x2, 0x10001, 0xffffffff, 0x1, 0xaa2, 0x400, 0x44, 0x1, 0x0, 0x80, 0x44f0, 0x1, 0xffff, 0xf, 0x3f0f, 0x9, 0x800, 0x33f6, 0x6, 0x200, 0x100, 0x1ea, 0x1, 0x802, 0x7ff, 0x4, 0x49, 0x80000001, 0x7, 0x81, 0x5, 0x1, 0x3, 0x8, 0x1, 0x800, 0x7, 0x6, 0x3ff, 0x2, 0xb7c, 0xfffffffc, 0x3, 0x9, 0x3, 0x3, 0xc, 0x1ff, 0x8, 0x4000002, 0x6, 0xfffffdff, 0x9, 0x6, 0x5, 0x7ff, 0x8, 0x2, 0x400, 0xfffffffd, 0x4, 0x6, 0x1, 0x3, 0x9, 0x7fff, 0x1, 0x5, 0x7, 0x10001, 0xfffffffe, 0x9, 0x5, 0x4, 0x2, 0x2, 0x1, 0x8001, 0x1, 0xfffffff4, 0x5, 0x8, 0xfffefffc, 0x1, 0x80000, 0xfffffffa, 0x4, 0xd0c0, 0xfffff33c, 0xc974, 0xfffff0bc, 0xff, 0x3, 0x1b4, 0x24f, 0x3, 0x10001, 0x6, 0x7, 0x5, 0x9, 0xede9, 0x2, 0x5, 0x5, 0x7, 0x800, 0x2, 0x5, 0x7fff, 0x5, 0x8, 0xffff, 0x7, 0x0, 0x320, 0xfffffff7, 0x2, 0x6, 0x7, 0xd9f, 0x6, 0x9, 0x0, 0xffff, 0x0, 0x8, 0x10, 0x720b, 0xfffffff7, 0x7106075a, 0xffff, 0x401, 0x3, 0x8, 0x6, 0x3, 0xf, 0x698, 0x9, 0x6, 0xffffffff, 0x7ff, 0x10, 0x2, 0x8, 0x4, 0xa27d, 0x86b3, 0x9, 0x2, 0x81, 0x4, 0x7f8000, 0x9, 0x2, 0x1, 0x0, 0x40000005, 0xc1, 0x2, 0x7, 0x40, 0x2]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x1}}}}]}]}, 0x488}}, 0x0) 28.435892661s ago: executing program 1 (id=2440): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="5000000018000106010000000000000002180000fe04000100000000080001000a000300080004000100000006001500060000001c001600180014000800010004000000090002007465737400000000", 0x50) 28.434131952s ago: executing program 4 (id=2441): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x200}, 0x8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25460000000e0001006e655b64657773696d0000000f0002006e657464657673696d300000401f8e00020000000c008f6408000000ac44e0000c009000010000000000000021e18f57f626123929bfcd8f67c41aef30078fc778e23bac707c040402becd880c3b9dfae395132208bea8a5e08f"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) r7 = socket$inet_sctp(0x2, 0x5, 0x84) r8 = socket(0x10, 0x3, 0x0) write(r8, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x29) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x7, 0xf, 0x3b, 0x1, 0xc0, 0x2f2a, 0xd}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={r5, 0x200}, 0x8) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00'}) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x12, 0x1, {0x2, 0x100, 0x0, 0x401, 0x9, 0x80, 0xef, 0x2, 0x9}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000400}, 0x0) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000ffdbdf25460000000e0001006e655b64657773696d0000000f0002006e657464657673696d300000401f8e00020000000c008f6408000000ac44e0000c009000010000000000000021e18f57f626123929bfcd8f67c41aef30078fc778e23bac707c040402becd880c3b9dfae395132208bea8a5e08f"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket(0x10, 0x3, 0x0) (async) write(r8, &(0x7f0000000000)="240000001a005f0400f9f407000904018000200000000000000000000800010000000000", 0x29) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010100}}, 0x7, 0xf, 0x3b, 0x1, 0xc0, 0x2f2a, 0xd}, 0x9c) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="c60a0100000000006111b400000000008510000002000000850000000700000095000e000000000095000000000000003764e7be95cd1b051a0f3cd983c673d1cc389e632d686ff6bfc1884d28861b616a4e21cc0c6b735256c1d8389642393b41331d67072eac14cc61e5392e2bfdb6c35de43684005670f403f1fc05a286a2029fb37849d0ec6f224dd3578c7a5f29bfec9c769e5eb33f3737ee2f36d9d6bd53f70c048c0985405510c8994db5"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) 28.369495621s ago: executing program 0 (id=2442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@filter={'filter\x00', 0x4, 0x4, 0x340, 0xffffffff, 0x0, 0x0, 0xd0, 0xfeffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) close(0x3) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e04, 0x3, @dev={0xfe, 0x80, '\x00', 0x25}, 0x23}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x64}, 0x10}, 0x1c, 0x0}}], 0x40000000000024e, 0x20002040) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x40, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x420200, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x25, 0x2, 0x19) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x19}, {0xffff, 0xffff}}, [@TCA_STAB={0x30, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x2, 0x1000, 0xae, 0x0, 0x3, 0x4, 0x6}}, {0x10, 0x2, [0x9, 0x1, 0x3, 0xb, 0x3, 0x1ff]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000026c0)=@newtfilter={0x3c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x10}, {0x9}, {0xfff1, 0xb}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x22, 0x2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4810}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e22, 0x224cfb0e, @empty, 0x1000}, @in={0x2, 0x0, @empty}], 0x2c) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, 0x0}, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffff}, 0x6) write(r9, &(0x7f00000000c0)='Y\x00\x00\x00\x00', 0x5) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000100)='veth1_to_bond\x00', 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) 28.113498072s ago: executing program 3 (id=2443): socket$inet6_mptcp(0xa, 0x1, 0x106) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}, 0x1, 0x0, 0x400000000000000, 0x4000041}, 0x2000800) 27.872175757s ago: executing program 0 (id=2444): r0 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000280)={'veth0\x00', &(0x7f0000000440)=@ethtool_flash={0x33, 0xdd93, './file0\x00'}}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x5, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000ae00000066000000000000002f000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e}, 0x23) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000003c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000640)=ANY=[@ANYBLOB="0d01000c35fa52688e795277f4af78fc297693c7f11c7aeed98e20b57d94c19e52f8a8a62781604ad90cce7c239fb0febb48b6ac66acacf09d99f8b447c993db1a988d71d588bedbcb7dd5bcbbd7fd0926ed7f05b525a59eb47f71cd7b09fa71544cd5a2a5456bd046c5a7db1410c550769d3d73e23693bcc55a568c28df5adf5195f0fa72e14e208b74ddc29203684134b0d83359fe3be7b85cd2cfa19198ab37902c5e71d34113856c7c781557bc47b6e08abace0e7c0f829ed85759d826e520a22ce3e42cbd9f32df9b218e5d64c50358f49ff21f92511c2a4c1c8be89e9242c0", @ANYRES16=r3, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x40004}, 0x5b19b0a6263c6eb8) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r2, &(0x7f0000000900)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="88000000", @ANYRES16=r4, @ANYBLOB="10022abd7000fcdbdf257000000008000300", @ANYRES32=r5, @ANYBLOB="0a00060008021100000000000a000600ffffffffb2ed6cda0a00060008021100000000000a000600ffffffffffff00000a00060008021100000100000a00060008021100000100000a00060008021100000100000a000600080211000001756ab1c806000802110000000000"], 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000210021002cbd7000fedbdf2502141007020000000000010008000100e0000001080006000a0000000c000c40000000000000001e0c000c4000000000000000061800020006"], 0x5c}, 0x1, 0x0, 0x0, 0x40d5}, 0x0) openat$cgroup_int(r1, &(0x7f0000000240)='cpuset.sched_load_balance\x00', 0x2, 0x0) 27.694111805s ago: executing program 3 (id=2445): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000004c0)="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", 0x139}], 0x1}}], 0x1, 0x81) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x20, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}}, 0x884) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r3, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x81, 0x7c}}}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x672}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x40d1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000340)="0a000300010000", 0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="660a0000000000006111770000000000850000000000000095", @ANYRES32, @ANYRES16=r0], &(0x7f0000000000)='GPL\x00'}, 0x94) 27.510372048s ago: executing program 3 (id=2446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_INNER_FLAGS={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x80040}, 0x24000000) (fail_nth: 4) 27.486246764s ago: executing program 2 (id=2447): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) close(r0) r1 = syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x34, r1, 0x90d, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x18, 0x17, {0xb, 0x1ffe000, @l2={'eth', 0x3a, 'xfrm0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, 0x0) getsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)=""/98, &(0x7f0000000180)=0x62) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="b800000010000104050000000300000000600000", @ANYRES32=0x0, @ANYBLOB="c3670400000000009000128009000100766c616e00000000800002800600010003000000640004800c00010008000000060000000c00010007000000050000000c00010003000000070000000c00010000000000040000000c00010070000000940f00000c000100ff010000030000000c0001007ac00000000000000c00010000010000ff000000100003800c004100020000009b04000008000500", @ANYRES32=r3], 0xb8}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, &(0x7f0000000300)="060000000300030000", 0x9) 27.411179835s ago: executing program 1 (id=2448): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) 27.402341841s ago: executing program 4 (id=2449): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x4}, 0x1c) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000002d40)=[{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="07960e0300000000000031d9a58695a5f844d3cb97292f371d5923927db467e15c90628c0abb1fbba39fb49f85f8f261a9960da9b7a47c07f50eff5a8d2fc532738204", 0x43}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=""/8, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x50) (async) vmsplice(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000400)="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", 0x13c}], 0x1, 0x18) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001940)=ANY=[@ANYRES32=r0], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0xf}, 0x94) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x482000, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e24, 0xa, @local, 0x1}}, 0x59, 0x6, 0x10, 0x9, 0x80, 0x8, 0x7}, 0x9c) (async) listen(r0, 0x0) 25.292756817s ago: executing program 0 (id=2450): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x20}, 0x0, 0x0, 0x2, 0xfd, 0xa, 0x0, 0xa0, 0x2e}}, [@migrate={0x50, 0x11, [{@in=@loopback=0xac1414aa, @in=@broadcast, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in6=@mcast2, 0x3c, 0x4, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) 0s ago: executing program 32 (id=2448): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="180100003600010000000000fcdbdf250701f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001540)=@newqdisc={0x40, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x2}}}}]}, 0x40}}, 0xc0) kernel console output (not intermixed with test programs): [ 208.902584][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.926736][T11356] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 209.003344][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.163587][T11356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1779'. [ 209.251957][T11364] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 209.532489][ T5790] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.538158][T11377] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1789'. [ 209.538180][T11377] netlink: 'syz.2.1789': attribute type 9 has an invalid length. [ 209.616895][ T37] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.622787][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 209.692556][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.808986][T11388] FAULT_INJECTION: forcing a failure. [ 209.808986][T11388] name failslab, interval 1, probability 0, space 0, times 0 [ 209.809020][T11388] CPU: 0 UID: 0 PID: 11388 Comm: syz.3.1791 Not tainted syzkaller #0 PREEMPT(full) [ 209.809040][T11388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 209.809051][T11388] Call Trace: [ 209.809060][T11388] [ 209.809068][T11388] dump_stack_lvl+0xe8/0x150 [ 209.809102][T11388] should_fail_ex+0x410/0x560 [ 209.809130][T11388] should_failslab+0xa8/0x100 [ 209.809153][T11388] ? skb_clone+0x212/0x3a0 [ 209.809178][T11388] kmem_cache_alloc_noprof+0xa1/0x600 [ 209.809211][T11388] ? skb_clone+0x212/0x3a0 [ 209.809241][T11388] skb_clone+0x212/0x3a0 [ 209.809271][T11388] __netlink_deliver_tap+0x413/0x860 [ 209.809311][T11388] ? netlink_deliver_tap+0x2e/0x1b0 [ 209.809340][T11388] netlink_deliver_tap+0x19c/0x1b0 [ 209.809369][T11388] netlink_unicast+0x781/0x940 [ 209.809405][T11388] netlink_sendmsg+0x813/0xb40 [ 209.809442][T11388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.809479][T11388] ? apparmor_socket_sendmsg+0x98/0x360 [ 209.809503][T11388] ? __pfx_netlink_sendmsg+0x10/0x10 [ 209.809529][T11388] sock_sendmsg_nosec+0x13a/0x180 [ 209.809563][T11388] ____sys_sendmsg+0x54e/0x850 [ 209.809593][T11388] ? __pfx_____sys_sendmsg+0x10/0x10 [ 209.809627][T11388] ? import_iovec+0x73/0xa0 [ 209.809655][T11388] ___sys_sendmsg+0x2a5/0x360 [ 209.809687][T11388] ? __lock_acquire+0x747/0x2de0 [ 209.809712][T11388] ? __pfx____sys_sendmsg+0x10/0x10 [ 209.809769][T11388] ? __fget_files+0x2a/0x420 [ 209.809796][T11388] ? __fget_files+0x3a2/0x420 [ 209.809832][T11388] __x64_sys_sendmsg+0x1b1/0x290 [ 209.809862][T11388] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 209.809907][T11388] do_syscall_64+0x166/0x520 [ 209.809928][T11388] ? trace_irq_disable+0x3b/0x140 [ 209.809951][T11388] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.809972][T11388] ? clear_bhb_loop+0x70/0xc0 [ 209.809996][T11388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 209.810016][T11388] RIP: 0033:0x7f347519e159 [ 209.810034][T11388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.810052][T11388] RSP: 002b:00007f3475ffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 209.810074][T11388] RAX: ffffffffffffffda RBX: 00007f3475425fa0 RCX: 00007f347519e159 [ 209.810088][T11388] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 209.810101][T11388] RBP: 00007f3475ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 209.810114][T11388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 209.810126][T11388] R13: 00007f3475426038 R14: 00007f3475425fa0 R15: 00007ffe7e5fa448 [ 209.810157][T11388] [ 210.286956][T11403] vlan1: entered promiscuous mode [ 210.287109][T11403] vlan1: entered allmulticast mode [ 210.733663][T11430] FAULT_INJECTION: forcing a failure. [ 210.733663][T11430] name failslab, interval 1, probability 0, space 0, times 0 [ 210.733697][T11430] CPU: 0 UID: 0 PID: 11430 Comm: syz.2.1807 Not tainted syzkaller #0 PREEMPT(full) [ 210.733720][T11430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 210.733732][T11430] Call Trace: [ 210.733740][T11430] [ 210.733749][T11430] dump_stack_lvl+0xe8/0x150 [ 210.733781][T11430] should_fail_ex+0x410/0x560 [ 210.733805][T11430] ? __alloc_skb+0x1db/0x7a0 [ 210.733826][T11430] should_failslab+0xa8/0x100 [ 210.733849][T11430] ? __alloc_skb+0x1db/0x7a0 [ 210.733868][T11430] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 210.733897][T11430] ? __alloc_skb+0x18d/0x7a0 [ 210.733920][T11430] ? __alloc_skb+0x1db/0x7a0 [ 210.733951][T11430] __alloc_skb+0x1db/0x7a0 [ 210.733977][T11430] netlink_ack+0x136/0xb30 [ 210.734004][T11430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.734025][T11430] ? ref_tracker_free+0x689/0x830 [ 210.734051][T11430] ? __pfx_ref_tracker_free+0x10/0x10 [ 210.734084][T11430] netlink_rcv_skb+0x2a4/0x4a0 [ 210.734112][T11430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 210.734137][T11430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 210.734177][T11430] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.734205][T11430] ? netlink_deliver_tap+0x2e/0x1b0 [ 210.734239][T11430] netlink_unicast+0x7bd/0x940 [ 210.734276][T11430] netlink_sendmsg+0x813/0xb40 [ 210.734312][T11430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.734347][T11430] ? apparmor_socket_sendmsg+0x98/0x360 [ 210.734370][T11430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 210.734395][T11430] sock_sendmsg_nosec+0x13a/0x180 [ 210.734428][T11430] ____sys_sendmsg+0x54e/0x850 [ 210.734459][T11430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 210.734493][T11430] ? import_iovec+0x73/0xa0 [ 210.734521][T11430] ___sys_sendmsg+0x2a5/0x360 [ 210.734546][T11430] ? __lock_acquire+0x747/0x2de0 [ 210.734571][T11430] ? __pfx____sys_sendmsg+0x10/0x10 [ 210.734637][T11430] ? __fget_files+0x2a/0x420 [ 210.734663][T11430] ? __fget_files+0x3a2/0x420 [ 210.734700][T11430] __x64_sys_sendmsg+0x1b1/0x290 [ 210.734728][T11430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 210.734774][T11430] do_syscall_64+0x166/0x520 [ 210.734795][T11430] ? trace_irq_disable+0x3b/0x140 [ 210.734815][T11430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.734836][T11430] ? clear_bhb_loop+0x70/0xc0 [ 210.734860][T11430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 210.734880][T11430] RIP: 0033:0x7f3e3a79e159 [ 210.734899][T11430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 210.734917][T11430] RSP: 002b:00007f3e3b627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 210.734939][T11430] RAX: ffffffffffffffda RBX: 00007f3e3aa25fa0 RCX: 00007f3e3a79e159 [ 210.734954][T11430] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 210.734967][T11430] RBP: 00007f3e3b627090 R08: 0000000000000000 R09: 0000000000000000 [ 210.734980][T11430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 210.734992][T11430] R13: 00007f3e3aa26038 R14: 00007f3e3aa25fa0 R15: 00007ffe93523aa8 [ 210.735024][T11430] [ 211.370644][T11454] bond0: (slave gretap0): Opening slave failed [ 211.462348][T11446] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1816'. [ 211.462375][T11446] netlink: 11 bytes leftover after parsing attributes in process `syz.4.1816'. [ 211.608695][T11462] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1817'. [ 211.857721][T11477] netlink: 'syz.0.1822': attribute type 1 has an invalid length. [ 212.448182][T11496] netlink: 'syz.0.1828': attribute type 64 has an invalid length. [ 212.999203][T11524] __nla_validate_parse: 1 callbacks suppressed [ 212.999225][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1833'. [ 213.129090][T11529] FAULT_INJECTION: forcing a failure. [ 213.129090][T11529] name failslab, interval 1, probability 0, space 0, times 0 [ 213.129122][T11529] CPU: 1 UID: 0 PID: 11529 Comm: syz.2.1836 Not tainted syzkaller #0 PREEMPT(full) [ 213.129144][T11529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 213.129156][T11529] Call Trace: [ 213.129163][T11529] [ 213.129172][T11529] dump_stack_lvl+0xe8/0x150 [ 213.129203][T11529] should_fail_ex+0x410/0x560 [ 213.129226][T11529] should_failslab+0xa8/0x100 [ 213.129246][T11529] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 213.129265][T11529] ? kasprintf+0xe2/0x140 [ 213.129282][T11529] ? kasprintf+0xe2/0x140 [ 213.129304][T11529] kvasprintf+0xeb/0x1a0 [ 213.129323][T11529] ? __pfx_kvasprintf+0x10/0x10 [ 213.129345][T11529] ? do_raw_spin_lock+0x12b/0x2f0 [ 213.129371][T11529] kasprintf+0xe2/0x140 [ 213.129392][T11529] ? __pfx_kasprintf+0x10/0x10 [ 213.129415][T11529] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 213.129444][T11529] ieee80211_alloc_led_names+0xa4/0x2b0 [ 213.129466][T11529] ieee80211_alloc_hw_nm+0x1849/0x1f00 [ 213.129482][T11529] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 213.129510][T11529] mac80211_hwsim_new_radio+0x1ea/0x56b0 [ 213.129543][T11529] ? rcu_is_watching+0x16/0xb0 [ 213.129564][T11529] ? trace_kmalloc+0x2a/0xf0 [ 213.129588][T11529] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 213.129604][T11529] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 213.129618][T11529] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 213.129634][T11529] ? kstrndup+0xbd/0x160 [ 213.129653][T11529] ? kstrndup+0xbd/0x160 [ 213.129669][T11529] hwsim_new_radio_nl+0xd8b/0xf90 [ 213.129697][T11529] genl_family_rcv_msg_doit+0x233/0x340 [ 213.129721][T11529] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 213.129748][T11529] ? bpf_lsm_capable+0x9/0x20 [ 213.129761][T11529] ? security_capable+0x7e/0x2c0 [ 213.129784][T11529] genl_rcv_msg+0x614/0x7a0 [ 213.129807][T11529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.129824][T11529] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 213.129853][T11529] netlink_rcv_skb+0x226/0x4a0 [ 213.129877][T11529] ? __pfx_genl_rcv_msg+0x10/0x10 [ 213.129896][T11529] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 213.129929][T11529] ? down_read+0x2be/0x330 [ 213.129950][T11529] genl_rcv+0x28/0x40 [ 213.129965][T11529] netlink_unicast+0x7bd/0x940 [ 213.129996][T11529] netlink_sendmsg+0x813/0xb40 [ 213.130029][T11529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.130072][T11529] ? apparmor_socket_sendmsg+0x98/0x360 [ 213.130095][T11529] ? __pfx_netlink_sendmsg+0x10/0x10 [ 213.130120][T11529] sock_sendmsg_nosec+0x13a/0x180 [ 213.130153][T11529] ____sys_sendmsg+0x54e/0x850 [ 213.130184][T11529] ? __pfx_____sys_sendmsg+0x10/0x10 [ 213.130219][T11529] ? import_iovec+0x73/0xa0 [ 213.130246][T11529] ___sys_sendmsg+0x2a5/0x360 [ 213.130270][T11529] ? __lock_acquire+0x747/0x2de0 [ 213.130295][T11529] ? __pfx____sys_sendmsg+0x10/0x10 [ 213.130358][T11529] ? __fget_files+0x2a/0x420 [ 213.130384][T11529] ? __fget_files+0x3a2/0x420 [ 213.130421][T11529] __x64_sys_sendmsg+0x1b1/0x290 [ 213.130449][T11529] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 213.130507][T11529] do_syscall_64+0x166/0x520 [ 213.130528][T11529] ? trace_irq_disable+0x3b/0x140 [ 213.130547][T11529] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.130568][T11529] ? clear_bhb_loop+0x70/0xc0 [ 213.130592][T11529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.130612][T11529] RIP: 0033:0x7f3e3a79e159 [ 213.130630][T11529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 213.130647][T11529] RSP: 002b:00007f3e3b627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.130668][T11529] RAX: ffffffffffffffda RBX: 00007f3e3aa25fa0 RCX: 00007f3e3a79e159 [ 213.130683][T11529] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 213.130696][T11529] RBP: 00007f3e3b627090 R08: 0000000000000000 R09: 0000000000000000 [ 213.130709][T11529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 213.130720][T11529] R13: 00007f3e3aa26038 R14: 00007f3e3aa25fa0 R15: 00007ffe93523aa8 [ 213.130753][T11529] [ 213.202579][T11530] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1835'. [ 213.692129][ T25] net_ratelimit: 16 callbacks suppressed [ 213.692149][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.851713][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.885233][T11561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1843'. [ 213.945525][T11555] vlan1: entered promiscuous mode [ 213.945674][T11555] vlan1: entered allmulticast mode [ 214.092526][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.252569][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.329889][T11584] FAULT_INJECTION: forcing a failure. [ 214.329889][T11584] name failslab, interval 1, probability 0, space 0, times 0 [ 214.329923][T11584] CPU: 0 UID: 0 PID: 11584 Comm: syz.4.1851 Not tainted syzkaller #0 PREEMPT(full) [ 214.329946][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 214.329958][T11584] Call Trace: [ 214.329965][T11584] [ 214.329974][T11584] dump_stack_lvl+0xe8/0x150 [ 214.330008][T11584] should_fail_ex+0x410/0x560 [ 214.330037][T11584] should_failslab+0xa8/0x100 [ 214.330063][T11584] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 214.330086][T11584] ? kasprintf+0xe2/0x140 [ 214.330109][T11584] ? kasprintf+0xe2/0x140 [ 214.330142][T11584] kvasprintf+0xeb/0x1a0 [ 214.330169][T11584] ? __pfx_kvasprintf+0x10/0x10 [ 214.330198][T11584] ? do_raw_spin_lock+0x12b/0x2f0 [ 214.330232][T11584] kasprintf+0xe2/0x140 [ 214.330263][T11584] ? __pfx_kasprintf+0x10/0x10 [ 214.330293][T11584] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 214.330331][T11584] ieee80211_alloc_led_names+0x1de/0x2b0 [ 214.330360][T11584] ieee80211_alloc_hw_nm+0x1849/0x1f00 [ 214.330382][T11584] ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10 [ 214.330417][T11584] mac80211_hwsim_new_radio+0x1ea/0x56b0 [ 214.330457][T11584] ? rcu_is_watching+0x16/0xb0 [ 214.330481][T11584] ? trace_kmalloc+0x2a/0xf0 [ 214.330514][T11584] ? __kmalloc_node_track_caller_noprof+0x4d2/0x720 [ 214.330535][T11584] ? __kmalloc_node_track_caller_noprof+0x2eb/0x720 [ 214.330556][T11584] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 214.330584][T11584] ? kstrndup+0xbd/0x160 [ 214.330609][T11584] ? kstrndup+0xbd/0x160 [ 214.330631][T11584] hwsim_new_radio_nl+0xd8b/0xf90 [ 214.330670][T11584] genl_family_rcv_msg_doit+0x233/0x340 [ 214.330701][T11584] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 214.330737][T11584] ? bpf_lsm_capable+0x9/0x20 [ 214.330755][T11584] ? security_capable+0x7e/0x2c0 [ 214.330785][T11584] genl_rcv_msg+0x614/0x7a0 [ 214.330813][T11584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.330835][T11584] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.330872][T11584] netlink_rcv_skb+0x226/0x4a0 [ 214.330901][T11584] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.330925][T11584] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.330968][T11584] ? down_read+0x2be/0x330 [ 214.330995][T11584] genl_rcv+0x28/0x40 [ 214.331014][T11584] netlink_unicast+0x7bd/0x940 [ 214.331052][T11584] netlink_sendmsg+0x813/0xb40 [ 214.331088][T11584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.331125][T11584] ? apparmor_socket_sendmsg+0x98/0x360 [ 214.331149][T11584] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.331176][T11584] sock_sendmsg_nosec+0x13a/0x180 [ 214.331210][T11584] ____sys_sendmsg+0x54e/0x850 [ 214.331241][T11584] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.331275][T11584] ? import_iovec+0x73/0xa0 [ 214.331303][T11584] ___sys_sendmsg+0x2a5/0x360 [ 214.331326][T11584] ? __lock_acquire+0x747/0x2de0 [ 214.331356][T11584] ? __pfx____sys_sendmsg+0x10/0x10 [ 214.331409][T11584] ? __fget_files+0x2a/0x420 [ 214.331433][T11584] ? __fget_files+0x3a2/0x420 [ 214.331467][T11584] __x64_sys_sendmsg+0x1b1/0x290 [ 214.331495][T11584] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 214.331541][T11584] do_syscall_64+0x166/0x520 [ 214.331561][T11584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.331585][T11584] ? clear_bhb_loop+0x70/0xc0 [ 214.331607][T11584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.331625][T11584] RIP: 0033:0x7f6d4e39e159 [ 214.331643][T11584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 214.331658][T11584] RSP: 002b:00007f6d4f29c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.331678][T11584] RAX: ffffffffffffffda RBX: 00007f6d4e625fa0 RCX: 00007f6d4e39e159 [ 214.331692][T11584] RDX: 0000000000000084 RSI: 0000200000000100 RDI: 0000000000000003 [ 214.331704][T11584] RBP: 00007f6d4f29c090 R08: 0000000000000000 R09: 0000000000000000 [ 214.331714][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 214.331724][T11584] R13: 00007f6d4e626038 R14: 00007f6d4e625fa0 R15: 00007ffd7bc47368 [ 214.331755][T11584] [ 214.588667][T11591] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1852'. [ 214.744603][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.747621][ T12] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.891658][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.891697][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.080357][T11608] FAULT_INJECTION: forcing a failure. [ 215.080357][T11608] name failslab, interval 1, probability 0, space 0, times 0 [ 215.080391][T11608] CPU: 0 UID: 0 PID: 11608 Comm: syz.3.1856 Not tainted syzkaller #0 PREEMPT(full) [ 215.080413][T11608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 215.080425][T11608] Call Trace: [ 215.080433][T11608] [ 215.080442][T11608] dump_stack_lvl+0xe8/0x150 [ 215.080476][T11608] should_fail_ex+0x410/0x560 [ 215.080501][T11608] ? __alloc_skb+0x1db/0x7a0 [ 215.080524][T11608] should_failslab+0xa8/0x100 [ 215.080548][T11608] ? __alloc_skb+0x1db/0x7a0 [ 215.080566][T11608] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 215.080599][T11608] ? __alloc_skb+0x18d/0x7a0 [ 215.080620][T11608] ? __alloc_skb+0x1db/0x7a0 [ 215.080648][T11608] __alloc_skb+0x1db/0x7a0 [ 215.080675][T11608] netlink_sendmsg+0x5d4/0xb40 [ 215.080714][T11608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.080749][T11608] ? apparmor_socket_sendmsg+0x18b/0x360 [ 215.080774][T11608] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.080800][T11608] sock_sendmsg_nosec+0x13a/0x180 [ 215.080830][T11608] ____sys_sendmsg+0x54e/0x850 [ 215.080854][T11608] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.080882][T11608] ? import_iovec+0x73/0xa0 [ 215.080907][T11608] ___sys_sendmsg+0x2a5/0x360 [ 215.080929][T11608] ? __lock_acquire+0x747/0x2de0 [ 215.080953][T11608] ? __pfx____sys_sendmsg+0x10/0x10 [ 215.081008][T11608] ? __fget_files+0x2a/0x420 [ 215.081033][T11608] ? __fget_files+0x3a2/0x420 [ 215.081068][T11608] __x64_sys_sendmsg+0x1b1/0x290 [ 215.081094][T11608] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 215.081137][T11608] do_syscall_64+0x166/0x520 [ 215.081157][T11608] ? trace_irq_disable+0x3b/0x140 [ 215.081175][T11608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.081195][T11608] ? clear_bhb_loop+0x70/0xc0 [ 215.081218][T11608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.081237][T11608] RIP: 0033:0x7f347519e159 [ 215.081254][T11608] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 215.081270][T11608] RSP: 002b:00007f3475ffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.081292][T11608] RAX: ffffffffffffffda RBX: 00007f3475425fa0 RCX: 00007f347519e159 [ 215.081306][T11608] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 215.081319][T11608] RBP: 00007f3475ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 215.081339][T11608] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.081349][T11608] R13: 00007f3475426038 R14: 00007f3475425fa0 R15: 00007ffe7e5fa448 [ 215.081376][T11608] [ 215.392477][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.571219][T11621] xt_CT: You must specify a L4 protocol and not use inversions on it [ 215.579191][T11625] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.821859][T11632] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1863'. [ 216.107048][T11648] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1865'. [ 216.253522][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1868'. [ 216.269412][T11661] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 216.269449][T11661] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 216.269466][T11661] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 217.655011][T11726] FAULT_INJECTION: forcing a failure. [ 217.655011][T11726] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.655044][T11726] CPU: 0 UID: 0 PID: 11726 Comm: syz.1.1887 Not tainted syzkaller #0 PREEMPT(full) [ 217.655066][T11726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.655077][T11726] Call Trace: [ 217.655084][T11726] [ 217.655091][T11726] dump_stack_lvl+0xe8/0x150 [ 217.655122][T11726] should_fail_ex+0x410/0x560 [ 217.655147][T11726] _copy_from_iter+0x1d3/0x1660 [ 217.655167][T11726] ? __alloc_skb+0x27a/0x7a0 [ 217.655190][T11726] ? __alloc_skb+0x27a/0x7a0 [ 217.655212][T11726] ? __alloc_skb+0x27a/0x7a0 [ 217.655230][T11726] ? __pfx__copy_from_iter+0x10/0x10 [ 217.655251][T11726] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 217.655277][T11726] ? __alloc_skb+0x27a/0x7a0 [ 217.655294][T11726] ? __alloc_skb+0x27a/0x7a0 [ 217.655318][T11726] ? netlink_sendmsg+0x650/0xb40 [ 217.655344][T11726] ? skb_put+0x112/0x210 [ 217.655366][T11726] netlink_sendmsg+0x6c0/0xb40 [ 217.655400][T11726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.655432][T11726] ? apparmor_socket_sendmsg+0x18b/0x360 [ 217.655456][T11726] ? __pfx_netlink_sendmsg+0x10/0x10 [ 217.655479][T11726] sock_sendmsg_nosec+0x13a/0x180 [ 217.655509][T11726] ____sys_sendmsg+0x54e/0x850 [ 217.655536][T11726] ? __pfx_____sys_sendmsg+0x10/0x10 [ 217.655565][T11726] ? import_iovec+0x73/0xa0 [ 217.655589][T11726] ___sys_sendmsg+0x2a5/0x360 [ 217.655610][T11726] ? __lock_acquire+0x747/0x2de0 [ 217.655632][T11726] ? __pfx____sys_sendmsg+0x10/0x10 [ 217.655686][T11726] ? __fget_files+0x2a/0x420 [ 217.655709][T11726] ? __fget_files+0x3a2/0x420 [ 217.655739][T11726] __x64_sys_sendmsg+0x1b1/0x290 [ 217.655762][T11726] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 217.655805][T11726] do_syscall_64+0x166/0x520 [ 217.655825][T11726] ? trace_irq_disable+0x3b/0x140 [ 217.655841][T11726] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.655861][T11726] ? clear_bhb_loop+0x70/0xc0 [ 217.655892][T11726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.655910][T11726] RIP: 0033:0x7fb871b9e159 [ 217.655928][T11726] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.655945][T11726] RSP: 002b:00007fb872b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 217.655965][T11726] RAX: ffffffffffffffda RBX: 00007fb871e25fa0 RCX: 00007fb871b9e159 [ 217.655980][T11726] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 217.655992][T11726] RBP: 00007fb872b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 217.656004][T11726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.656016][T11726] R13: 00007fb871e26038 R14: 00007fb871e25fa0 R15: 00007ffcc5f6f0e8 [ 217.656045][T11726] [ 217.764103][T11727] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 217.826218][T11731] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1888'. [ 218.020012][T11733] FAULT_INJECTION: forcing a failure. [ 218.020012][T11733] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.020044][T11733] CPU: 0 UID: 0 PID: 11733 Comm: syz.4.1890 Not tainted syzkaller #0 PREEMPT(full) [ 218.020064][T11733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.020076][T11733] Call Trace: [ 218.020083][T11733] [ 218.020091][T11733] dump_stack_lvl+0xe8/0x150 [ 218.020122][T11733] should_fail_ex+0x410/0x560 [ 218.020147][T11733] _copy_to_user+0x31/0xb0 [ 218.020179][T11733] simple_read_from_buffer+0xe1/0x170 [ 218.020211][T11733] proc_fail_nth_read+0x1bb/0x230 [ 218.020237][T11733] ? common_file_perm+0x20e/0x2b0 [ 218.020259][T11733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.020288][T11733] ? rw_verify_area+0x24a/0x4c0 [ 218.020316][T11733] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.020344][T11733] vfs_read+0x213/0xa80 [ 218.020374][T11733] ? __pfx___mutex_lock+0x10/0x10 [ 218.020396][T11733] ? __pfx_vfs_read+0x10/0x10 [ 218.020423][T11733] ? __fget_files+0x2a/0x420 [ 218.020470][T11733] ? __fget_files+0x3a2/0x420 [ 218.020493][T11733] ? __fget_files+0x2a/0x420 [ 218.020523][T11733] ksys_read+0x150/0x270 [ 218.020551][T11733] ? __pfx_ksys_read+0x10/0x10 [ 218.020587][T11733] do_syscall_64+0x166/0x520 [ 218.020606][T11733] ? trace_irq_disable+0x3b/0x140 [ 218.020624][T11733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.020657][T11733] ? clear_bhb_loop+0x70/0xc0 [ 218.020678][T11733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.020694][T11733] RIP: 0033:0x7f6d4e35e98e [ 218.020711][T11733] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 218.020726][T11733] RSP: 002b:00007f6d4f29bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.020745][T11733] RAX: ffffffffffffffda RBX: 00007f6d4f29c6c0 RCX: 00007f6d4e35e98e [ 218.020758][T11733] RDX: 000000000000000f RSI: 00007f6d4f29c0a0 RDI: 0000000000000007 [ 218.020773][T11733] RBP: 00007f6d4f29c090 R08: 0000000000000000 R09: 0000000000000000 [ 218.020785][T11733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.020796][T11733] R13: 00007f6d4e626038 R14: 00007f6d4e625fa0 R15: 00007ffd7bc47368 [ 218.020823][T11733] [ 218.339480][T11745] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 218.339509][T11745] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 218.436543][T11747] netlink: 'syz.1.1895': attribute type 17 has an invalid length. [ 218.436568][T11747] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1895'. [ 218.436596][T11747] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1895'. [ 218.470162][T11747] gretap0: entered promiscuous mode [ 218.486519][T11747] gretap0: left promiscuous mode [ 218.760569][ T1380] net_ratelimit: 291 callbacks suppressed [ 218.760601][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.795387][T11764] FAULT_INJECTION: forcing a failure. [ 218.795387][T11764] name failslab, interval 1, probability 0, space 0, times 0 [ 218.795422][T11764] CPU: 1 UID: 0 PID: 11764 Comm: syz.4.1899 Not tainted syzkaller #0 PREEMPT(full) [ 218.795445][T11764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 218.795457][T11764] Call Trace: [ 218.795465][T11764] [ 218.795474][T11764] dump_stack_lvl+0xe8/0x150 [ 218.795507][T11764] should_fail_ex+0x410/0x560 [ 218.795533][T11764] should_failslab+0xa8/0x100 [ 218.795556][T11764] ? skb_clone+0x212/0x3a0 [ 218.795583][T11764] kmem_cache_alloc_noprof+0xa1/0x600 [ 218.795613][T11764] ? skb_clone+0x212/0x3a0 [ 218.795645][T11764] skb_clone+0x212/0x3a0 [ 218.795669][T11764] ? nfnetlink_rcv+0x4b0/0x28c0 [ 218.795697][T11764] nfnetlink_rcv+0x4de/0x28c0 [ 218.795726][T11764] ? __dev_queue_xmit+0x29b/0x3820 [ 218.795758][T11764] ? __local_bh_enable_ip+0xd6/0x140 [ 218.795785][T11764] ? lockdep_hardirqs_on+0x7b/0x110 [ 218.795806][T11764] ? __dev_queue_xmit+0x29b/0x3820 [ 218.795831][T11764] ? __local_bh_enable_ip+0xd6/0x140 [ 218.795854][T11764] ? __dev_queue_xmit+0x29b/0x3820 [ 218.795879][T11764] ? __dev_queue_xmit+0x1edc/0x3820 [ 218.795904][T11764] ? do_syscall_64+0x166/0x520 [ 218.795924][T11764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.795954][T11764] ? __dev_queue_xmit+0x29b/0x3820 [ 218.795982][T11764] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 218.796022][T11764] ? ref_tracker_free+0x689/0x830 [ 218.796048][T11764] ? __pfx_ref_tracker_free+0x10/0x10 [ 218.796079][T11764] ? __skb_clone+0x449/0x6c0 [ 218.796117][T11764] ? skb_clone+0x246/0x3a0 [ 218.796145][T11764] ? __netlink_deliver_tap+0x811/0x860 [ 218.796173][T11764] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.796206][T11764] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.796245][T11764] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.796276][T11764] netlink_unicast+0x7bd/0x940 [ 218.796311][T11764] netlink_sendmsg+0x813/0xb40 [ 218.796347][T11764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.796383][T11764] ? apparmor_socket_sendmsg+0x18b/0x360 [ 218.796406][T11764] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.796433][T11764] sock_sendmsg_nosec+0x13a/0x180 [ 218.796466][T11764] ____sys_sendmsg+0x54e/0x850 [ 218.796496][T11764] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.796530][T11764] ? import_iovec+0x73/0xa0 [ 218.796558][T11764] ___sys_sendmsg+0x2a5/0x360 [ 218.796581][T11764] ? __lock_acquire+0x747/0x2de0 [ 218.796601][T11764] ? __pfx____sys_sendmsg+0x10/0x10 [ 218.796650][T11764] ? __fget_files+0x2a/0x420 [ 218.796673][T11764] ? __fget_files+0x3a2/0x420 [ 218.796703][T11764] __x64_sys_sendmsg+0x1b1/0x290 [ 218.796728][T11764] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 218.796773][T11764] do_syscall_64+0x166/0x520 [ 218.796817][T11764] ? trace_irq_disable+0x3b/0x140 [ 218.796838][T11764] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.796857][T11764] ? clear_bhb_loop+0x70/0xc0 [ 218.796881][T11764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.796901][T11764] RIP: 0033:0x7f6d4e39e159 [ 218.796919][T11764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 218.796936][T11764] RSP: 002b:00007f6d4f29c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.796958][T11764] RAX: ffffffffffffffda RBX: 00007f6d4e625fa0 RCX: 00007f6d4e39e159 [ 218.796973][T11764] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 218.796986][T11764] RBP: 00007f6d4f29c090 R08: 0000000000000000 R09: 0000000000000000 [ 218.796998][T11764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.797010][T11764] R13: 00007f6d4e626038 R14: 00007f6d4e625fa0 R15: 00007ffd7bc47368 [ 218.797042][T11764] [ 218.892801][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.056177][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.214026][ T1447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.265360][T11774] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 219.741872][T11799] FAULT_INJECTION: forcing a failure. [ 219.741872][T11799] name failslab, interval 1, probability 0, space 0, times 0 [ 219.741906][T11799] CPU: 1 UID: 0 PID: 11799 Comm: syz.3.1912 Not tainted syzkaller #0 PREEMPT(full) [ 219.741928][T11799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.741940][T11799] Call Trace: [ 219.741948][T11799] [ 219.741957][T11799] dump_stack_lvl+0xe8/0x150 [ 219.741990][T11799] should_fail_ex+0x410/0x560 [ 219.742016][T11799] should_failslab+0xa8/0x100 [ 219.742041][T11799] ? skb_clone+0x212/0x3a0 [ 219.742067][T11799] kmem_cache_alloc_noprof+0xa1/0x600 [ 219.742099][T11799] ? skb_clone+0x212/0x3a0 [ 219.742130][T11799] skb_clone+0x212/0x3a0 [ 219.742153][T11799] ? nfnetlink_rcv+0x4b0/0x28c0 [ 219.742182][T11799] nfnetlink_rcv+0x4de/0x28c0 [ 219.742211][T11799] ? __dev_queue_xmit+0x29b/0x3820 [ 219.742240][T11799] ? __local_bh_enable_ip+0xd6/0x140 [ 219.742267][T11799] ? lockdep_hardirqs_on+0x7b/0x110 [ 219.742288][T11799] ? __dev_queue_xmit+0x29b/0x3820 [ 219.742313][T11799] ? __local_bh_enable_ip+0xd6/0x140 [ 219.742337][T11799] ? __dev_queue_xmit+0x29b/0x3820 [ 219.742362][T11799] ? __dev_queue_xmit+0x1edc/0x3820 [ 219.742387][T11799] ? do_syscall_64+0x166/0x520 [ 219.742407][T11799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.742438][T11799] ? __dev_queue_xmit+0x29b/0x3820 [ 219.742465][T11799] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 219.742507][T11799] ? ref_tracker_free+0x689/0x830 [ 219.742540][T11799] ? __pfx_ref_tracker_free+0x10/0x10 [ 219.742572][T11799] ? __skb_clone+0x449/0x6c0 [ 219.742603][T11799] ? skb_clone+0x246/0x3a0 [ 219.742632][T11799] ? __netlink_deliver_tap+0x811/0x860 [ 219.742659][T11799] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.742696][T11799] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.742723][T11799] ? netlink_deliver_tap+0x2e/0x1b0 [ 219.742756][T11799] netlink_unicast+0x7bd/0x940 [ 219.742790][T11799] netlink_sendmsg+0x813/0xb40 [ 219.742823][T11799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.742854][T11799] ? apparmor_socket_sendmsg+0x18b/0x360 [ 219.742875][T11799] ? __pfx_netlink_sendmsg+0x10/0x10 [ 219.742900][T11799] sock_sendmsg_nosec+0x13a/0x180 [ 219.742931][T11799] ____sys_sendmsg+0x54e/0x850 [ 219.742960][T11799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 219.742993][T11799] ? import_iovec+0x73/0xa0 [ 219.743020][T11799] ___sys_sendmsg+0x2a5/0x360 [ 219.743043][T11799] ? __lock_acquire+0x747/0x2de0 [ 219.743067][T11799] ? __pfx____sys_sendmsg+0x10/0x10 [ 219.743124][T11799] ? __fget_files+0x2a/0x420 [ 219.743148][T11799] ? __fget_files+0x3a2/0x420 [ 219.743184][T11799] __x64_sys_sendmsg+0x1b1/0x290 [ 219.743209][T11799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 219.743254][T11799] do_syscall_64+0x166/0x520 [ 219.743293][T11799] ? trace_irq_disable+0x3b/0x140 [ 219.743312][T11799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.743332][T11799] ? clear_bhb_loop+0x70/0xc0 [ 219.743355][T11799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.743375][T11799] RIP: 0033:0x7f347519e159 [ 219.743393][T11799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.743411][T11799] RSP: 002b:00007f3475ffd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 219.743432][T11799] RAX: ffffffffffffffda RBX: 00007f3475425fa0 RCX: 00007f347519e159 [ 219.743447][T11799] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 219.743460][T11799] RBP: 00007f3475ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 219.743472][T11799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.743484][T11799] R13: 00007f3475426038 R14: 00007f3475425fa0 R15: 00007ffe7e5fa448 [ 219.743521][T11799] [ 219.861747][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.874313][ T8934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.932397][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.092302][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 220.491865][ T1447] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.411120][T11867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1930'. [ 221.411176][T11867] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1930'. [ 221.705863][T11879] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1937'. [ 221.853188][T11888] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 221.878800][T11888] sctp: [Deprecated]: syz.0.1939 (pid 11888) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.878800][T11888] Use struct sctp_sack_info instead [ 222.160315][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1946'. [ 222.160370][T11907] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1946'. [ 222.393278][T11909] netlink: 'syz.0.1947': attribute type 1 has an invalid length. [ 222.509331][T11921] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1952'. [ 222.535062][T11909] bond11: option mode: invalid value (8) [ 222.538454][T11909] bond11 (unregistering): Released all slaves [ 222.702626][T11930] netlink: 'syz.3.1955': attribute type 1 has an invalid length. [ 222.768327][T11936] netlink: 'syz.4.1956': attribute type 4 has an invalid length. [ 222.768350][T11936] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1956'. [ 222.769308][T11937] netlink: 'syz.4.1956': attribute type 4 has an invalid length. [ 222.769324][T11937] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1956'. [ 222.814369][T11930] 8021q: adding VLAN 0 to HW filter on device bond15 [ 222.844923][T11930] netlink: 'syz.3.1955': attribute type 7 has an invalid length. [ 222.874380][T11935] bond15: (slave veth3): Enslaving as a backup interface with a down link [ 222.998840][T11950] af_packet: tpacket_rcv: packet too big, clamped from 314 to 4294967272. macoff=96 [ 223.122143][ T12] netdevsim netdevsim3 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 223.122190][ T12] netdevsim netdevsim3 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 223.122223][ T12] netdevsim netdevsim3 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 223.122254][ T12] netdevsim netdevsim3 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 223.354882][ T31] audit: type=1800 audit(1789192541.054:5): pid=11970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1966" name=0A dev="tmpfs" ino=1871 res=0 errno=0 [ 223.895900][T11998] FAULT_INJECTION: forcing a failure. [ 223.895900][T11998] name failslab, interval 1, probability 0, space 0, times 0 [ 223.895934][T11998] CPU: 1 UID: 0 PID: 11998 Comm: syz.2.1979 Not tainted syzkaller #0 PREEMPT(full) [ 223.895956][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.895967][T11998] Call Trace: [ 223.895975][T11998] [ 223.895983][T11998] dump_stack_lvl+0xe8/0x150 [ 223.896017][T11998] should_fail_ex+0x410/0x560 [ 223.896043][T11998] should_failslab+0xa8/0x100 [ 223.896068][T11998] __kmalloc_cache_noprof+0xa3/0x600 [ 223.896089][T11998] ? nfnetlink_rcv+0x1021/0x28c0 [ 223.896113][T11998] ? nfnetlink_rcv+0x1021/0x28c0 [ 223.896145][T11998] nfnetlink_rcv+0x1021/0x28c0 [ 223.896206][T11998] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 223.896247][T11998] ? ref_tracker_free+0x689/0x830 [ 223.896291][T11998] ? skb_clone+0x246/0x3a0 [ 223.896319][T11998] ? __netlink_deliver_tap+0x811/0x860 [ 223.896352][T11998] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.896378][T11998] ? netlink_deliver_tap+0x2e/0x1b0 [ 223.896407][T11998] netlink_unicast+0x7bd/0x940 [ 223.896439][T11998] netlink_sendmsg+0x813/0xb40 [ 223.896473][T11998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.896506][T11998] ? apparmor_socket_sendmsg+0x18b/0x360 [ 223.896530][T11998] ? __pfx_netlink_sendmsg+0x10/0x10 [ 223.896555][T11998] sock_sendmsg_nosec+0x13a/0x180 [ 223.896586][T11998] ____sys_sendmsg+0x54e/0x850 [ 223.896616][T11998] ? __pfx_____sys_sendmsg+0x10/0x10 [ 223.896647][T11998] ? import_iovec+0x73/0xa0 [ 223.896674][T11998] ___sys_sendmsg+0x2a5/0x360 [ 223.896698][T11998] ? __lock_acquire+0x747/0x2de0 [ 223.896722][T11998] ? __pfx____sys_sendmsg+0x10/0x10 [ 223.896788][T11998] ? __fget_files+0x2a/0x420 [ 223.896813][T11998] ? __fget_files+0x3a2/0x420 [ 223.896850][T11998] __x64_sys_sendmsg+0x1b1/0x290 [ 223.896878][T11998] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 223.896924][T11998] do_syscall_64+0x166/0x520 [ 223.896944][T11998] ? trace_irq_disable+0x3b/0x140 [ 223.896963][T11998] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.896983][T11998] ? clear_bhb_loop+0x70/0xc0 [ 223.897007][T11998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.897027][T11998] RIP: 0033:0x7f3e3a79e159 [ 223.897046][T11998] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.897063][T11998] RSP: 002b:00007f3e3b627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 223.897083][T11998] RAX: ffffffffffffffda RBX: 00007f3e3aa25fa0 RCX: 00007f3e3a79e159 [ 223.897097][T11998] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 223.897110][T11998] RBP: 00007f3e3b627090 R08: 0000000000000000 R09: 0000000000000000 [ 223.897123][T11998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 223.897135][T11998] R13: 00007f3e3aa26038 R14: 00007f3e3aa25fa0 R15: 00007ffe93523aa8 [ 223.897161][T11998] [ 224.015338][ T5721] net_ratelimit: 15 callbacks suppressed [ 224.015359][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.097741][ T988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.164781][T12004] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 224.252979][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.324179][ T1380] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.331596][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 224.542271][T12020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.542569][T12020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.542824][T12020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.543012][T12020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 224.543161][T12020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.013988][T12037] netlink: 'syz.4.1994': attribute type 1 has an invalid length. [ 225.163954][T12037] 8021q: adding VLAN 0 to HW filter on device bond10 [ 225.564875][T12066] netlink: 'syz.1.2004': attribute type 2 has an invalid length. [ 225.815100][T12077] __nla_validate_parse: 1 callbacks suppressed [ 225.815122][T12077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 227.043105][T12137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2029'. [ 227.043161][T12137] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2029'. [ 227.806857][T12173] netlink: 'syz.3.2040': attribute type 16 has an invalid length. [ 227.806884][T12173] netlink: 'syz.3.2040': attribute type 17 has an invalid length. [ 228.077092][T12185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2044'. [ 228.077149][T12185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2044'. [ 228.085585][T12173] vlan0: left promiscuous mode [ 228.150927][T12173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 228.217197][T12173] 8021q: adding VLAN 0 to HW filter on device bond1 [ 228.228799][T12173] vlan2: left promiscuous mode [ 228.228821][T12173] bridge0: left promiscuous mode [ 228.229197][T12173] vlan2: left allmulticast mode [ 228.229212][T12173] bridge0: left allmulticast mode [ 228.259776][T12173] 8021q: adding VLAN 0 to HW filter on device bond3 [ 228.280957][T12173] bond4: left promiscuous mode [ 228.292089][T12173] 8021q: adding VLAN 0 to HW filter on device bond5 [ 228.294608][T12173] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.297302][T12173] 8021q: adding VLAN 0 to HW filter on device bond7 [ 228.299373][T12173] 8021q: adding VLAN 0 to HW filter on device bond8 [ 228.336606][T12173] 8021q: adding VLAN 0 to HW filter on device bond9 [ 228.339006][T12173] 8021q: adding VLAN 0 to HW filter on device bond10 [ 228.357674][T12193] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2043'. [ 228.361006][T12173] 8021q: adding VLAN 0 to HW filter on device bond11 [ 228.377763][T12193] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2043'. [ 228.393410][T12173] 8021q: adding VLAN 0 to HW filter on device bond12 [ 228.482913][T12176] vlan1: entered promiscuous mode [ 228.483082][T12176] vlan1: entered allmulticast mode [ 228.639670][T12203] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2049'. [ 228.703031][T12193] 8021q: adding VLAN 0 to HW filter on device bond12 [ 228.705647][T12193] bond0: (slave bond12): Enslaving as an active interface with an up link [ 228.829367][T12202] vlan3: entered promiscuous mode [ 228.829388][T12202] hsr0: entered promiscuous mode [ 228.829679][T12202] vlan3: entered allmulticast mode [ 228.829693][T12202] hsr0: entered allmulticast mode [ 228.829705][T12202] hsr_slave_0: entered allmulticast mode [ 228.829719][T12202] hsr_slave_1: entered allmulticast mode [ 228.868948][T12203] hsr_slave_0: left promiscuous mode [ 228.885243][T12203] hsr_slave_1: left promiscuous mode [ 229.041806][ C1] net_ratelimit: 1862 callbacks suppressed [ 229.041829][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.042333][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.085452][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.085689][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.087726][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.088180][ T1572] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.090072][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.090223][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.107881][ T5721] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.116490][ T5722] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.649930][T12253] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2062'. [ 229.798764][T12257] bridge0: port 3(veth1_to_bridge) entered blocking state [ 229.798950][T12257] bridge0: port 3(veth1_to_bridge) entered disabled state [ 229.799125][T12257] veth1_to_bridge: entered allmulticast mode [ 229.800944][T12257] veth1_to_bridge: entered promiscuous mode [ 229.801108][T12257] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 229.842970][T12257] bridge0: port 3(veth1_to_bridge) entered blocking state [ 229.843095][T12257] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 230.483829][T12279] netlink: 'syz.4.2072': attribute type 1 has an invalid length. [ 230.521635][T12284] netlink: 'syz.0.2074': attribute type 1 has an invalid length. [ 230.569666][T12288] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2075'. [ 230.635274][T12279] block nbd296: server does not support multiple connections per device. [ 230.637866][T12279] block nbd296: shutting down sockets [ 230.734020][T12284] 8021q: adding VLAN 0 to HW filter on device bond13 [ 230.827206][T12292] bond13: (slave gretap0): making interface the new active one [ 230.828329][T12292] bond13: (slave gretap0): Enslaving as an active interface with an up link [ 231.212740][T12324] netlink: 'syz.3.2085': attribute type 4 has an invalid length. [ 231.530838][T12338] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2089'. [ 231.610232][T12330] wg0 speed is unknown, defaulting to 1000 [ 231.975063][T12344] bridge0: entered promiscuous mode [ 231.975120][T12344] bridge0: entered allmulticast mode [ 232.716656][T12369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 232.742482][T12369] 8021q: adding VLAN 0 to HW filter on device bond3 [ 232.748399][T12369] 8021q: adding VLAN 0 to HW filter on device bond4 [ 232.750768][T12369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 232.957351][T12375] veth5: left allmulticast mode [ 232.959583][T12375] vlan3: left allmulticast mode [ 232.959599][T12375] bridge0: left allmulticast mode [ 234.051535][ C0] net_ratelimit: 7540 callbacks suppressed [ 234.051558][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 234.051779][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 234.051972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 234.052174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 234.052375][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 234.052592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 234.052854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 234.053114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 234.053332][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 234.053568][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 235.044933][ T12] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 235.879836][T12419] netlink: 'syz.4.2108': attribute type 2 has an invalid length. [ 238.067929][T12464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2119'. [ 238.067985][T12464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2119'. [ 238.521556][T12477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 238.649126][ T5809] hid-generic 0005:0B57:05DF.0001: item fetching failed at offset 0/1 [ 238.667423][ T5809] hid-generic 0005:0B57:05DF.0001: probe with driver hid-generic failed with error -22 [ 239.061414][ C0] net_ratelimit: 28244 callbacks suppressed [ 239.061435][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.061655][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.061865][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.062082][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.062284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.062515][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.062718][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.062927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.063122][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.063325][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 239.218555][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 240.285917][T12498] netlink: 'syz.3.2126': attribute type 2 has an invalid length. [ 241.064581][T12504] netlink: 'syz.2.2129': attribute type 1 has an invalid length. [ 241.223559][T12509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2129'. [ 241.277977][T12504] bond9 (unregistering): Released all slaves [ 241.465026][T12516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2132'. [ 241.581397][ C0] sched: DL replenish lagged too much [ 242.003635][T12530] FAULT_INJECTION: forcing a failure. [ 242.003635][T12530] name failslab, interval 1, probability 0, space 0, times 0 [ 242.003671][T12530] CPU: 1 UID: 0 PID: 12530 Comm: syz.0.2135 Not tainted syzkaller #0 PREEMPT(full) [ 242.003695][T12530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 242.003719][T12530] Call Trace: [ 242.003727][T12530] [ 242.003736][T12530] dump_stack_lvl+0xe8/0x150 [ 242.003770][T12530] should_fail_ex+0x410/0x560 [ 242.003796][T12530] should_failslab+0xa8/0x100 [ 242.003821][T12530] ? skb_clone+0x212/0x3a0 [ 242.003847][T12530] kmem_cache_alloc_noprof+0xa1/0x600 [ 242.003879][T12530] ? skb_clone+0x212/0x3a0 [ 242.003911][T12530] skb_clone+0x212/0x3a0 [ 242.003939][T12530] __netlink_deliver_tap+0x413/0x860 [ 242.003978][T12530] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.004007][T12530] netlink_deliver_tap+0x19c/0x1b0 [ 242.004036][T12530] netlink_sendskb+0x68/0x140 [ 242.004064][T12530] nfnetlink_rcv+0x260c/0x28c0 [ 242.004123][T12530] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 242.004164][T12530] ? ref_tracker_free+0x689/0x830 [ 242.004220][T12530] ? skb_clone+0x246/0x3a0 [ 242.004249][T12530] ? __netlink_deliver_tap+0x811/0x860 [ 242.004284][T12530] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.004311][T12530] ? netlink_deliver_tap+0x2e/0x1b0 [ 242.004344][T12530] netlink_unicast+0x7bd/0x940 [ 242.004379][T12530] netlink_sendmsg+0x813/0xb40 [ 242.004415][T12530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.004452][T12530] ? apparmor_socket_sendmsg+0x98/0x360 [ 242.004476][T12530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 242.004502][T12530] sock_sendmsg_nosec+0x13a/0x180 [ 242.004535][T12530] ____sys_sendmsg+0x54e/0x850 [ 242.004565][T12530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 242.004599][T12530] ? import_iovec+0x73/0xa0 [ 242.004628][T12530] ___sys_sendmsg+0x2a5/0x360 [ 242.004651][T12530] ? __lock_acquire+0x747/0x2de0 [ 242.004675][T12530] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.004735][T12530] ? __fget_files+0x2a/0x420 [ 242.004761][T12530] ? __fget_files+0x3a2/0x420 [ 242.004797][T12530] __x64_sys_sendmsg+0x1b1/0x290 [ 242.004826][T12530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 242.004873][T12530] do_syscall_64+0x166/0x520 [ 242.004893][T12530] ? trace_irq_disable+0x3b/0x140 [ 242.004913][T12530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.004932][T12530] ? clear_bhb_loop+0x70/0xc0 [ 242.004956][T12530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.004976][T12530] RIP: 0033:0x7f9c2619e159 [ 242.004995][T12530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 242.005013][T12530] RSP: 002b:00007f9c26f9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 242.005035][T12530] RAX: ffffffffffffffda RBX: 00007f9c26425fa0 RCX: 00007f9c2619e159 [ 242.005050][T12530] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 242.005062][T12530] RBP: 00007f9c26f9a090 R08: 0000000000000000 R09: 0000000000000000 [ 242.005075][T12530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.005087][T12530] R13: 00007f9c26426038 R14: 00007f9c26425fa0 R15: 00007ffeb99aa3a8 [ 242.005118][T12530] [ 242.436836][ T52] Bluetooth: hci4: link tx timeout [ 242.436856][ T52] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 242.718464][T12536] syzkaller1: entered promiscuous mode [ 242.718490][T12536] syzkaller1: entered allmulticast mode [ 243.093674][T12546] bridge_slave_1: default FDB implementation only supports local addresses [ 243.595312][T12561] netlink: 'syz.0.2146': attribute type 3 has an invalid length. [ 244.071362][ C0] net_ratelimit: 31187 callbacks suppressed [ 244.071384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.071573][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.071810][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.072029][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.072180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.072295][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.072421][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.072539][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.072707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.072849][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 244.501571][ T5632] Bluetooth: hci4: command 0x0401 tx timeout [ 244.716791][T12577] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2152'. [ 245.899221][T12597] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2159'. [ 247.068148][T12617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2164'. [ 247.371779][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 247.536620][T12631] syzkaller0: entered promiscuous mode [ 247.536645][T12631] syzkaller0: entered allmulticast mode [ 247.562903][T12635] netlink: 'syz.0.2170': attribute type 3 has an invalid length. [ 248.169206][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2172'. [ 248.169266][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2172'. [ 248.847155][T12665] netlink: 'syz.2.2177': attribute type 2 has an invalid length. [ 249.081540][ C0] net_ratelimit: 27276 callbacks suppressed [ 249.081561][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.081786][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.082018][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.082232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.082441][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.082654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.082862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.083072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.083278][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.083485][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 249.684098][T12676] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2180'. [ 250.347590][T12696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2187'. [ 250.347653][T12696] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2187'. [ 250.732712][ T5632] Bluetooth: hci4: command 0x0401 tx timeout [ 250.857834][T12706] vlan1: entered promiscuous mode [ 250.858039][T12706] vlan1: entered allmulticast mode [ 251.090240][T12711] veth0: entered promiscuous mode [ 251.192849][T12711] veth0: left promiscuous mode [ 251.435674][T12722] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2194'. [ 251.650501][T12731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2195'. [ 253.185125][T12763] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2204'. [ 253.246938][T12765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2205'. [ 253.246974][T12765] netlink: 'syz.2.2205': attribute type 4 has an invalid length. [ 253.524587][T12772] FAULT_INJECTION: forcing a failure. [ 253.524587][T12772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.524623][T12772] CPU: 1 UID: 0 PID: 12772 Comm: syz.2.2208 Not tainted syzkaller #0 PREEMPT(full) [ 253.524666][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 253.524689][T12772] Call Trace: [ 253.524697][T12772] [ 253.524705][T12772] dump_stack_lvl+0xe8/0x150 [ 253.524739][T12772] should_fail_ex+0x410/0x560 [ 253.524765][T12772] _copy_from_iter+0x1d3/0x1660 [ 253.524786][T12772] ? __alloc_skb+0x27a/0x7a0 [ 253.524810][T12772] ? __alloc_skb+0x27a/0x7a0 [ 253.524834][T12772] ? __alloc_skb+0x27a/0x7a0 [ 253.524855][T12772] ? __pfx__copy_from_iter+0x10/0x10 [ 253.524875][T12772] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 253.524903][T12772] ? __alloc_skb+0x27a/0x7a0 [ 253.524922][T12772] ? __alloc_skb+0x27a/0x7a0 [ 253.524948][T12772] ? netlink_sendmsg+0x650/0xb40 [ 253.524975][T12772] ? skb_put+0x112/0x210 [ 253.525001][T12772] netlink_sendmsg+0x6c0/0xb40 [ 253.525038][T12772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.525073][T12772] ? apparmor_socket_sendmsg+0x18b/0x360 [ 253.525097][T12772] ? __pfx_netlink_sendmsg+0x10/0x10 [ 253.525123][T12772] sock_sendmsg_nosec+0x13a/0x180 [ 253.525157][T12772] ____sys_sendmsg+0x54e/0x850 [ 253.525188][T12772] ? __pfx_____sys_sendmsg+0x10/0x10 [ 253.525221][T12772] ? import_iovec+0x73/0xa0 [ 253.525248][T12772] ___sys_sendmsg+0x2a5/0x360 [ 253.525282][T12772] ? __lock_acquire+0x747/0x2de0 [ 253.525307][T12772] ? __pfx____sys_sendmsg+0x10/0x10 [ 253.525366][T12772] ? __fget_files+0x2a/0x420 [ 253.525392][T12772] ? __fget_files+0x3a2/0x420 [ 253.525427][T12772] __x64_sys_sendmsg+0x1b1/0x290 [ 253.525455][T12772] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 253.525500][T12772] do_syscall_64+0x166/0x520 [ 253.525521][T12772] ? trace_irq_disable+0x3b/0x140 [ 253.525541][T12772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.525561][T12772] ? clear_bhb_loop+0x70/0xc0 [ 253.525585][T12772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.525604][T12772] RIP: 0033:0x7f3e3a79e159 [ 253.525622][T12772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.525640][T12772] RSP: 002b:00007f3e3b627028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.525661][T12772] RAX: ffffffffffffffda RBX: 00007f3e3aa25fa0 RCX: 00007f3e3a79e159 [ 253.525676][T12772] RDX: 0000000020008880 RSI: 0000200000002500 RDI: 0000000000000004 [ 253.525689][T12772] RBP: 00007f3e3b627090 R08: 0000000000000000 R09: 0000000000000000 [ 253.525702][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.525714][T12772] R13: 00007f3e3aa26038 R14: 00007f3e3aa25fa0 R15: 00007ffe93523aa8 [ 253.525745][T12772] [ 253.783392][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 254.091525][ C0] net_ratelimit: 24616 callbacks suppressed [ 254.091547][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.091765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.091982][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.092188][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.092409][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.092623][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.093716][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.093947][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.094151][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.094345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 254.319956][T12780] FAULT_INJECTION: forcing a failure. [ 254.319956][T12780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.319990][T12780] CPU: 1 UID: 0 PID: 12780 Comm: syz.1.2212 Not tainted syzkaller #0 PREEMPT(full) [ 254.320013][T12780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.320025][T12780] Call Trace: [ 254.320033][T12780] [ 254.320041][T12780] dump_stack_lvl+0xe8/0x150 [ 254.320074][T12780] should_fail_ex+0x410/0x560 [ 254.320101][T12780] _copy_from_user+0x2d/0xb0 [ 254.320126][T12780] ___sys_sendmsg+0x1c6/0x360 [ 254.320150][T12780] ? __lock_acquire+0x747/0x2de0 [ 254.320176][T12780] ? __pfx____sys_sendmsg+0x10/0x10 [ 254.320235][T12780] ? __fget_files+0x2a/0x420 [ 254.320260][T12780] ? __fget_files+0x3a2/0x420 [ 254.320295][T12780] __x64_sys_sendmsg+0x1b1/0x290 [ 254.320336][T12780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 254.320383][T12780] do_syscall_64+0x166/0x520 [ 254.320403][T12780] ? trace_irq_disable+0x3b/0x140 [ 254.320422][T12780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.320442][T12780] ? clear_bhb_loop+0x70/0xc0 [ 254.320466][T12780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.320486][T12780] RIP: 0033:0x7fb871b9e159 [ 254.320504][T12780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.320523][T12780] RSP: 002b:00007fb872b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 254.320545][T12780] RAX: ffffffffffffffda RBX: 00007fb871e25fa0 RCX: 00007fb871b9e159 [ 254.320560][T12780] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 254.320573][T12780] RBP: 00007fb872b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 254.320585][T12780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.320597][T12780] R13: 00007fb871e26038 R14: 00007fb871e25fa0 R15: 00007ffcc5f6f0e8 [ 254.320628][T12780] [ 255.626760][T12769] xt_socket: unknown flags 0x8 [ 255.713477][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.223812][T12817] FAULT_INJECTION: forcing a failure. [ 256.223812][T12817] name failslab, interval 1, probability 0, space 0, times 0 [ 256.223847][T12817] CPU: 1 UID: 0 PID: 12817 Comm: syz.1.2224 Not tainted syzkaller #0 PREEMPT(full) [ 256.223869][T12817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 256.223882][T12817] Call Trace: [ 256.223890][T12817] [ 256.223898][T12817] dump_stack_lvl+0xe8/0x150 [ 256.223933][T12817] should_fail_ex+0x410/0x560 [ 256.223960][T12817] ? __alloc_skb+0x1db/0x7a0 [ 256.223982][T12817] should_failslab+0xa8/0x100 [ 256.224007][T12817] ? __alloc_skb+0x1db/0x7a0 [ 256.224026][T12817] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 256.224056][T12817] ? __alloc_skb+0x18d/0x7a0 [ 256.224078][T12817] ? __alloc_skb+0x1db/0x7a0 [ 256.224103][T12817] __alloc_skb+0x1db/0x7a0 [ 256.224130][T12817] netlink_sendmsg+0x5d4/0xb40 [ 256.224169][T12817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.224205][T12817] ? apparmor_socket_sendmsg+0x98/0x360 [ 256.224232][T12817] ? __pfx_netlink_sendmsg+0x10/0x10 [ 256.224259][T12817] sock_sendmsg_nosec+0x13a/0x180 [ 256.224291][T12817] ____sys_sendmsg+0x54e/0x850 [ 256.224322][T12817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 256.224356][T12817] ? import_iovec+0x73/0xa0 [ 256.224384][T12817] ___sys_sendmsg+0x2a5/0x360 [ 256.224408][T12817] ? __lock_acquire+0x747/0x2de0 [ 256.224432][T12817] ? __pfx____sys_sendmsg+0x10/0x10 [ 256.224491][T12817] ? __fget_files+0x2a/0x420 [ 256.224517][T12817] ? __fget_files+0x3a2/0x420 [ 256.224553][T12817] __x64_sys_sendmsg+0x1b1/0x290 [ 256.224582][T12817] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 256.224635][T12817] do_syscall_64+0x166/0x520 [ 256.224656][T12817] ? trace_irq_disable+0x3b/0x140 [ 256.224676][T12817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.224696][T12817] ? clear_bhb_loop+0x70/0xc0 [ 256.224720][T12817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.224739][T12817] RIP: 0033:0x7fb871b9e159 [ 256.224758][T12817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.224775][T12817] RSP: 002b:00007fb872b0f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 256.224798][T12817] RAX: ffffffffffffffda RBX: 00007fb871e25fa0 RCX: 00007fb871b9e159 [ 256.224812][T12817] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 256.224825][T12817] RBP: 00007fb872b0f090 R08: 0000000000000000 R09: 0000000000000000 [ 256.224837][T12817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.224850][T12817] R13: 00007fb871e26038 R14: 00007fb871e25fa0 R15: 00007ffcc5f6f0e8 [ 256.224881][T12817] [ 258.148286][T12864] Cannot find set identified by id 4 to match [ 259.101462][ C0] net_ratelimit: 24681 callbacks suppressed [ 259.101483][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 259.101666][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 259.101844][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 259.102025][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 259.102204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 259.102391][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 259.102595][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 259.102777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 259.102956][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 259.103146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 260.183798][T12915] netlink: 'syz.0.2248': attribute type 1 has an invalid length. [ 260.190401][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2247'. [ 260.378281][T12915] 8021q: adding VLAN 0 to HW filter on device bond16 [ 260.852650][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2253'. [ 260.852706][T12930] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2253'. [ 260.907015][T12933] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2251'. [ 261.230750][T12939] netlink: 'syz.2.2255': attribute type 2 has an invalid length. [ 261.385499][ T5632] Bluetooth: hci3: connection err: -111 [ 261.501030][T12944] netlink: 'syz.1.2254': attribute type 2 has an invalid length. [ 261.501055][T12944] netlink: 'syz.1.2254': attribute type 2 has an invalid length. [ 261.546457][T12948] netlink: 'syz.4.2258': attribute type 1 has an invalid length. [ 261.736333][T12948] bond15: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 261.774409][T12948] bond15 (unregistering): Released all slaves [ 262.880051][T12976] netlink: 'syz.2.2267': attribute type 1 has an invalid length. [ 262.889910][T12978] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2267'. [ 263.110102][T12987] netlink: 'syz.3.2270': attribute type 3 has an invalid length. [ 263.307767][T12979] bond9: (slave gretap2): making interface the new active one [ 263.308372][T12979] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 263.360104][T12978] 8021q: adding VLAN 0 to HW filter on device bond9 [ 263.372522][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 263.477900][T12989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2271'. [ 264.111343][ C0] net_ratelimit: 25338 callbacks suppressed [ 264.111363][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.111572][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.111770][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.111969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.112172][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.112376][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.112575][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.112832][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.113087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.113322][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 264.355041][T13002] gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 264.355479][T13002] gretap2: entered promiscuous mode [ 264.355497][T13002] gretap2: entered allmulticast mode [ 265.514392][T13036] netlink: 'syz.2.2283': attribute type 28 has an invalid length. [ 265.514418][T13036] netlink: 'syz.2.2283': attribute type 3 has an invalid length. [ 265.514431][T13036] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2283'. [ 266.429895][T13061] xt_TCPMSS: Only works on TCP SYN packets [ 266.519502][T13061] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2288'. [ 266.910792][T13071] netlink: 'syz.4.2292': attribute type 28 has an invalid length. [ 266.910814][T13071] netlink: 'syz.4.2292': attribute type 3 has an invalid length. [ 266.910827][T13071] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2292'. [ 269.121371][ C0] net_ratelimit: 33415 callbacks suppressed [ 269.121393][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 269.121550][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 269.121656][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 269.121767][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 269.121881][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 269.121989][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 269.122104][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 269.122208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 269.122312][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 269.122417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.131378][ C0] net_ratelimit: 44765 callbacks suppressed [ 274.131400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.131579][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.131703][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.131815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.131925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.132086][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.132197][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.132307][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.132418][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 274.132528][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.141391][ C0] net_ratelimit: 49747 callbacks suppressed [ 279.141414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.141590][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.141825][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.142012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.142197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.142380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.142550][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.142663][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.142760][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 279.142864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.151440][ C0] net_ratelimit: 50340 callbacks suppressed [ 284.151457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.151563][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.151661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.151764][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.151863][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.151960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.152088][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.152185][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.152291][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 284.152390][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.161415][ C0] net_ratelimit: 49844 callbacks suppressed [ 289.161430][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.161541][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.161646][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.161759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.161894][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.162009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.162113][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.162217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.162321][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 289.162426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 290.288980][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 290.289009][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2296'. [ 290.505310][T13092] 8021q: adding VLAN 0 to HW filter on device bond17 [ 291.562823][T13122] gretap3: entered promiscuous mode [ 291.590165][T13122] batman_adv: batadv0: Adding interface: gretap3 [ 291.590185][T13122] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.590213][T13122] batman_adv: batadv0: Not using interface gretap3 (retrying later): interface not active [ 291.723800][ T5632] Bluetooth: hci1: connection err: -111 [ 293.714075][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2324'. [ 294.171500][ C0] net_ratelimit: 29115 callbacks suppressed [ 294.171521][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.171731][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.171925][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.172120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.172316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.172515][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.172717][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.172913][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.173104][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.173296][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 294.594125][T13195] bond0: (slave ip6gre0): Error: Device can not be enslaved while up [ 294.743030][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 295.669114][T13210] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2331'. [ 295.716348][T13211] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 295.736937][T13210] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 295.737174][T13210] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 295.737386][T13210] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 295.737657][T13210] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 295.737869][T13210] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 295.738082][T13210] netlink: 'syz.4.2331': attribute type 1 has an invalid length. [ 297.321610][T13245] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2339'. [ 298.287133][T13261] IPVS: length: 8 != 79880 [ 298.728644][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2350'. [ 298.728669][T13269] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2350'. [ 298.728723][T13269] netlink: 'syz.0.2350': attribute type 5 has an invalid length. [ 299.181334][ C0] net_ratelimit: 27078 callbacks suppressed [ 299.181355][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.181594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.181811][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.182027][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.182250][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.182457][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.182660][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.182857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.183074][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.183295][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 299.700584][T13285] vlan1: entered allmulticast mode [ 299.700607][T13285] bond0: entered allmulticast mode [ 299.795141][T13289] netlink: 'syz.3.2356': attribute type 12 has an invalid length. [ 299.795166][T13289] netlink: 'syz.3.2356': attribute type 29 has an invalid length. [ 299.795179][T13289] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2356'. [ 299.795209][T13289] netlink: 51 bytes leftover after parsing attributes in process `syz.3.2356'. [ 300.352979][T13302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2359'. [ 301.823576][T13334] FAULT_INJECTION: forcing a failure. [ 301.823576][T13334] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.823611][T13334] CPU: 1 UID: 0 PID: 13334 Comm: syz.3.2371 Not tainted syzkaller #0 PREEMPT(full) [ 301.823634][T13334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 301.823646][T13334] Call Trace: [ 301.823653][T13334] [ 301.823663][T13334] dump_stack_lvl+0xe8/0x150 [ 301.823695][T13334] should_fail_ex+0x410/0x560 [ 301.823722][T13334] _copy_to_user+0x31/0xb0 [ 301.823748][T13334] simple_read_from_buffer+0xe1/0x170 [ 301.823780][T13334] proc_fail_nth_read+0x1bb/0x230 [ 301.823810][T13334] ? common_file_perm+0x20e/0x2b0 [ 301.823835][T13334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.823868][T13334] ? rw_verify_area+0x24a/0x4c0 [ 301.823898][T13334] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 301.823927][T13334] vfs_read+0x213/0xa80 [ 301.823960][T13334] ? __pfx___mutex_lock+0x10/0x10 [ 301.823982][T13334] ? __pfx_vfs_read+0x10/0x10 [ 301.824012][T13334] ? __fget_files+0x2a/0x420 [ 301.824043][T13334] ? __fget_files+0x3a2/0x420 [ 301.824071][T13334] ? __fget_files+0x2a/0x420 [ 301.824104][T13334] ksys_read+0x150/0x270 [ 301.824141][T13334] ? __pfx_ksys_read+0x10/0x10 [ 301.824181][T13334] do_syscall_64+0x166/0x520 [ 301.824202][T13334] ? trace_irq_disable+0x3b/0x140 [ 301.824221][T13334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.824241][T13334] ? clear_bhb_loop+0x70/0xc0 [ 301.824265][T13334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.824285][T13334] RIP: 0033:0x7f347515e98e [ 301.824303][T13334] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 301.824320][T13334] RSP: 002b:00007f3475ffcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 301.824342][T13334] RAX: ffffffffffffffda RBX: 00007f3475ffd6c0 RCX: 00007f347515e98e [ 301.824356][T13334] RDX: 000000000000000f RSI: 00007f3475ffd0a0 RDI: 0000000000000006 [ 301.824369][T13334] RBP: 00007f3475ffd090 R08: 0000000000000000 R09: 0000000000000000 [ 301.824382][T13334] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.824394][T13334] R13: 00007f3475426038 R14: 00007f3475425fa0 R15: 00007ffe7e5fa448 [ 301.824427][T13334] [ 302.545314][T13344] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2374'. [ 302.588914][T13344] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 302.616932][T13344] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2374'. [ 302.639460][T13344] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2374'. [ 302.685208][T13349] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2376'. [ 303.520988][T13363] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2381'. [ 304.191426][ C0] net_ratelimit: 25471 callbacks suppressed [ 304.191447][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 304.191660][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 304.191869][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 304.192068][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 304.192275][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 304.192479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 304.192697][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 304.192904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 304.193141][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 304.193349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 305.847902][T13413] FAULT_INJECTION: forcing a failure. [ 305.847902][T13413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 305.847937][T13413] CPU: 1 UID: 0 PID: 13413 Comm: syz.0.2400 Not tainted syzkaller #0 PREEMPT(full) [ 305.847959][T13413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.847972][T13413] Call Trace: [ 305.847979][T13413] [ 305.847988][T13413] dump_stack_lvl+0xe8/0x150 [ 305.848022][T13413] should_fail_ex+0x410/0x560 [ 305.848048][T13413] _copy_from_user+0x2d/0xb0 [ 305.848073][T13413] ___sys_sendmsg+0x1c6/0x360 [ 305.848098][T13413] ? __lock_acquire+0x747/0x2de0 [ 305.848124][T13413] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.848184][T13413] ? __fget_files+0x2a/0x420 [ 305.848209][T13413] ? __fget_files+0x3a2/0x420 [ 305.848244][T13413] __x64_sys_sendmsg+0x1b1/0x290 [ 305.848271][T13413] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.848317][T13413] do_syscall_64+0x166/0x520 [ 305.848344][T13413] ? trace_irq_disable+0x3b/0x140 [ 305.848363][T13413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.848392][T13413] ? clear_bhb_loop+0x70/0xc0 [ 305.848416][T13413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.848436][T13413] RIP: 0033:0x7f9c2619e159 [ 305.848454][T13413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.848472][T13413] RSP: 002b:00007f9c26f9a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.848493][T13413] RAX: ffffffffffffffda RBX: 00007f9c26425fa0 RCX: 00007f9c2619e159 [ 305.848507][T13413] RDX: 0000000024000000 RSI: 0000200000009b40 RDI: 0000000000000003 [ 305.848520][T13413] RBP: 00007f9c26f9a090 R08: 0000000000000000 R09: 0000000000000000 [ 305.848533][T13413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.848544][T13413] R13: 00007f9c26426038 R14: 00007f9c26425fa0 R15: 00007ffeb99aa3a8 [ 305.848574][T13413] [ 307.309729][T13420] syz.1.2403 (13420) used greatest stack depth: 17856 bytes left [ 309.201447][ C0] net_ratelimit: 24677 callbacks suppressed [ 309.201470][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.201730][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.201988][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.202226][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.202461][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.202742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.202990][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.203231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.203454][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.203688][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 309.957039][T13502] macvlan0: entered promiscuous mode [ 310.709484][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2435'. [ 311.000046][T13537] syzkaller1: entered promiscuous mode [ 311.000069][T13537] syzkaller1: entered allmulticast mode [ 311.081893][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2438'. [ 311.190708][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2438'. [ 311.257927][T13550] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2442'. [ 311.281971][T13541] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2438'. [ 311.491753][T13545] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2438'. [ 311.755666][T13561] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2445'. [ 311.773650][T13558] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2441'. [ 312.017363][ T52] Bluetooth: hci4: command 0x0401 tx timeout [ 314.211534][ C0] net_ratelimit: 29604 callbacks suppressed [ 314.211558][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 314.211612][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 314.211786][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 314.211998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 314.212000][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 314.212212][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 314.212393][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 314.212423][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 314.212636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 314.212777][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 317.153186][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 317.415151][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.221429][ C0] net_ratelimit: 35993 callbacks suppressed [ 319.221451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 319.221659][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 319.221667][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 319.221867][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 319.222047][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 319.222156][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 319.222365][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 319.222424][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 319.222566][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 319.222773][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 324.231325][ C0] net_ratelimit: 33072 callbacks suppressed [ 324.231347][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 324.231372][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 324.231571][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 324.231801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 324.232078][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 324.232309][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 324.232533][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 324.232613][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 324.232755][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 324.232987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 329.241455][ C0] net_ratelimit: 29347 callbacks suppressed [ 329.241477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 329.241639][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 329.241685][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 329.241887][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 329.242087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 329.242293][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 329.242495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 329.242695][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 329.242899][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 329.242982][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 334.251334][ C0] net_ratelimit: 30796 callbacks suppressed [ 334.251357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 334.251564][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 334.251669][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 334.251773][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 334.251980][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 334.252180][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 334.252380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 334.252575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 334.252774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 334.252983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 339.261438][ C1] net_ratelimit: 29827 callbacks suppressed [ 339.261445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 339.261460][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 339.261649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 339.261859][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 339.261888][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 339.262062][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 339.262273][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 339.262477][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 339.262718][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 339.262920][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 344.271312][ C0] net_ratelimit: 30335 callbacks suppressed [ 344.271336][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 344.271345][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 344.271544][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 344.271745][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 344.271954][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 344.272157][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 344.272393][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 344.272598][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 344.272750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.272809][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 349.281449][ C1] net_ratelimit: 30741 callbacks suppressed [ 349.281473][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 349.281474][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 349.281681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 349.281886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 349.282087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 349.282296][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 349.282533][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 349.282729][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 349.282866][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.282931][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 354.291442][ C0] net_ratelimit: 29283 callbacks suppressed [ 354.291518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 354.291755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 354.291850][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.291987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 354.292211][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 354.292248][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 354.292434][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 354.292655][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 354.292927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 354.293163][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 358.104931][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 359.301314][ C0] net_ratelimit: 29427 callbacks suppressed [ 359.301338][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 359.301589][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 359.301794][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 359.302009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 359.302108][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.302540][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 359.302683][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 359.302914][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 359.303148][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 359.303374][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 364.311347][ C0] net_ratelimit: 28774 callbacks suppressed [ 364.311376][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 364.311567][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 364.311751][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 364.311789][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.311933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 364.312162][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 364.312247][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 364.312474][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 364.312700][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 364.312922][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 369.321413][ C0] net_ratelimit: 30886 callbacks suppressed [ 369.321435][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 369.321637][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 369.321868][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 369.321981][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 369.322065][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 369.322265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 369.322473][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 369.322674][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 369.322873][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 369.323073][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 374.331370][ C0] net_ratelimit: 30091 callbacks suppressed [ 374.331392][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 374.331655][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 374.331904][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 374.332116][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 374.332323][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 374.332462][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 374.332538][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 374.332751][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 374.332834][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 374.333045][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 378.834094][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.341477][ C0] net_ratelimit: 30257 callbacks suppressed [ 379.341500][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 379.341506][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 379.341719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 379.341928][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 379.342136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 379.342347][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 379.342568][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 379.342786][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 379.342869][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.342996][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 384.351380][ C0] net_ratelimit: 28791 callbacks suppressed [ 384.351404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 384.351623][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 384.351851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 384.352066][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 384.352099][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 384.352272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 384.352498][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 384.352576][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 384.352713][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 384.352958][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 389.361375][ C0] net_ratelimit: 31479 callbacks suppressed [ 389.361399][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 389.361600][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 389.361806][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 389.361994][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 389.362007][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 389.362207][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 389.362407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 389.362498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 389.362608][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 389.362809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 394.371460][ C0] net_ratelimit: 30483 callbacks suppressed [ 394.371482][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 394.371729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 394.371910][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 394.371954][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 394.372184][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 394.372329][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 394.372408][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 394.372630][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 394.372853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 394.373082][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 399.381443][ C0] net_ratelimit: 30485 callbacks suppressed [ 399.381466][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 399.381491][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 399.381699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 399.381891][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 399.382089][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 399.382297][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 399.382499][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 399.382700][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 399.382873][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 399.382899][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 404.391327][ C1] net_ratelimit: 29904 callbacks suppressed [ 404.391338][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 404.391349][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.391557][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 404.391761][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 404.391774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 404.392033][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 404.392272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 404.392514][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 404.392738][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 404.393030][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 409.401384][ C0] net_ratelimit: 29264 callbacks suppressed [ 409.401407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 409.401644][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 409.401725][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.401869][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 409.402097][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 409.402106][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 409.402318][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 409.402545][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 409.402767][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 409.402997][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 414.411348][ C0] net_ratelimit: 29139 callbacks suppressed [ 414.411359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 414.411370][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 414.411577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 414.411820][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 414.412028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 414.412240][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 414.412445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 414.412645][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 414.412835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 414.413028][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 419.421478][ C0] net_ratelimit: 29481 callbacks suppressed [ 419.421501][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 419.421723][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 419.421942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 419.421985][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.422160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 419.422393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 419.422394][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:16:68:15:03:42:48, vlan:0) [ 419.422612][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 419.422846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 419.423065][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 421.611261][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 421.618253][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P13576/1:b..l [ 421.626267][ C1] rcu: (detected by 1, t=10503 jiffies, g=52741, q=1382 ncpus=2) [ 421.634094][ C1] task:syz.1.2448 state:R running task stack:27488 pid:13576 tgid:13572 ppid:5621 task_flags:0x400140 flags:0x00080002 [ 421.647664][ C1] Call Trace: [ 421.650999][ C1] [ 421.653981][ C1] __schedule+0x17db/0x58f0 [ 421.658800][ C1] ? lock_acquire+0x115/0x350 [ 421.663534][ C1] ? lock_acquire+0x115/0x350 [ 421.668213][ C1] ? __lock_acquire+0x747/0x2de0 [ 421.673141][ C1] ? __pfx___schedule+0x10/0x10 [ 421.678005][ C1] preempt_schedule_irq+0x4b/0x90 [ 421.683017][ C1] irqentry_exit+0x14f/0x910 [ 421.687685][ C1] ? trace_irq_disable+0x3b/0x140 [ 421.692746][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 421.698735][ C1] RIP: 0010:rcu_is_watching+0x9/0xb0 [ 421.704076][ C1] Code: 6f 03 eb cc 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 53 <65> 48 ff 05 ef 81 e8 11 e8 fa a3 38 0a 89 c3 83 f8 08 73 66 49 bf [ 421.723689][ C1] RSP: 0018:ffffc9000a30f4e0 EFLAGS: 00000297 [ 421.729804][ C1] RAX: 0000000000000001 RBX: ffffc9000a30f678 RCX: 8000000000000001 [ 421.737757][ C1] RDX: ffffc9000a30f601 RSI: ffffffff8177f1df RDI: ffffffff8ed5c8a0 [ 421.745733][ C1] RBP: 1ffffffff2223e01 R08: ffffc9000a30f658 R09: 0000000000000000 [ 421.753685][ C1] R10: ffffc9000a30f6b8 R11: fffff52001461ed9 R12: ffffc9000a308000 [ 421.761644][ C1] R13: ffffffff8177f1df R14: ffffffff8ed5c8a0 R15: ffffc9000a30f668 [ 421.769632][ C1] ? unwind_next_frame+0x8f/0x2550 [ 421.774776][ C1] ? unwind_next_frame+0x8f/0x2550 [ 421.779878][ C1] lock_release+0x4b/0x3c0 [ 421.784281][ C1] ? lock_acquire+0x115/0x350 [ 421.788936][ C1] ? deref_stack_reg+0x18e/0x220 [ 421.793936][ C1] ? unwind_next_frame+0x8f/0x2550 [ 421.799025][ C1] unwind_next_frame+0x1baa/0x2550 [ 421.804125][ C1] ? __unwind_start+0xed/0x660 [ 421.808871][ C1] ? unwind_next_frame+0x8f/0x2550 [ 421.813988][ C1] __unwind_start+0x514/0x660 [ 421.818678][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 421.824840][ C1] arch_stack_walk+0xe3/0x150 [ 421.829549][ C1] ? arch_stack_walk+0xe3/0x150 [ 421.834381][ C1] stack_trace_save+0xa9/0x100 [ 421.839132][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 421.844488][ C1] ? __lock_acquire+0x747/0x2de0 [ 421.849417][ C1] save_stack+0x122/0x230 [ 421.853759][ C1] ? __pfx_save_stack+0x10/0x10 [ 421.858595][ C1] ? page_ext_put+0x97/0xc0 [ 421.863080][ C1] __reset_page_owner+0x71/0x1f0 [ 421.868005][ C1] __free_frozen_pages+0xc93/0xd90 [ 421.873180][ C1] __slab_free+0x274/0x2c0 [ 421.877621][ C1] ? lock_acquire+0x115/0x350 [ 421.882328][ C1] ? qlist_free_all+0x8e/0x100 [ 421.887122][ C1] qlist_free_all+0x99/0x100 [ 421.891718][ C1] kasan_quarantine_reduce+0x148/0x160 [ 421.897180][ C1] __kasan_kmalloc+0x22/0xb0 [ 421.901795][ C1] __kmalloc_noprof+0x36b/0x720 [ 421.906623][ C1] ? rcu_is_watching+0x16/0xb0 [ 421.911388][ C1] ? __kmalloc_noprof+0x1ab/0x720 [ 421.916390][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 421.922292][ C1] ? tomoyo_realpath_from_path+0xef/0x640 [ 421.928038][ C1] tomoyo_realpath_from_path+0xef/0x640 [ 421.933592][ C1] ? tomoyo_path_number_perm+0x219/0x5f0 [ 421.939244][ C1] tomoyo_path_number_perm+0x246/0x5f0 [ 421.944714][ C1] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 421.950699][ C1] ? __lock_acquire+0x747/0x2de0 [ 421.956240][ C1] ? hook_file_ioctl+0x1f2/0x600 [ 421.961256][ C1] ? call_rcu+0x64d/0x8b0 [ 421.965622][ C1] ? __fget_files+0x2a/0x420 [ 421.970294][ C1] ? __fget_files+0x2a/0x420 [ 421.974883][ C1] ? __fget_files+0x3a2/0x420 [ 421.979990][ C1] ? __fget_files+0x2a/0x420 [ 421.984571][ C1] security_file_ioctl+0xc3/0x2a0 [ 421.989772][ C1] __se_sys_ioctl+0x47/0x170 [ 421.994370][ C1] do_syscall_64+0x166/0x520 [ 421.999296][ C1] ? trace_irq_disable+0x3b/0x140 [ 422.004347][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.010418][ C1] ? clear_bhb_loop+0x70/0xc0 [ 422.015083][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 422.020965][ C1] RIP: 0033:0x7fb871b9e159 [ 422.025364][ C1] RSP: 002b:00007fb872aee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.033761][ C1] RAX: ffffffffffffffda RBX: 00007fb871e26090 RCX: 00007fb871b9e159 [ 422.041752][ C1] RDX: 0000200000000080 RSI: 0000000000008933 RDI: 0000000000000003 [ 422.049747][ C1] RBP: 00007fb871c3503b R08: 0000000000000000 R09: 0000000000000000 [ 422.057830][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 422.066202][ C1] R13: 00007fb871e26128 R14: 00007fb871e26090 R15: 00007ffcc5f6f0e8 [ 422.075229][ C1]