last executing test programs: 2m23.914019653s ago: executing program 3 (id=5111): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x12, 0x11, &(0x7f00000008c0)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x43, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x101}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x2000c841) (async, rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x42001, 0x0) close(r1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x76746e3eea42c459, 0x0, 0x0) (async, rerun: 32) pipe(0x0) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20044804) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) (async) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r9 = socket(0x400000000010, 0x3, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) (async) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x5}, {0x5}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x400014, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x5, 0x7f, 0x9, 0x1000003, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xfffffd09, 0x4, 0x3, 0x8, 0xfffffffd, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x80, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x27, 0x0, 0x100008, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x5, 0x56, 0x645ec805, 0x4, 0x3, 0xfffffffb, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x5ffee5c7, 0x8, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x5, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0x7, 0x3ff, 0x85f, 0x8, 0x7, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x9, 0x8001, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0xb, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x6, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x9, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0x5072f7e2, 0x1000, 0x1, 0x58be, 0x5, 0x59b1, 0x40005, 0x120, 0x3, 0x5, 0x5, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x20000000, 0x859, 0xaedb, 0x7, {0x7, 0x2, 0xd, 0x8, 0x204, 0x95a5}, {0x8, 0x2, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x4009, 0x0, 0xfffffffe, 0x10, 0x5, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x80000000, 0x0, 0x5, 0xc, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0xc, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x200043, 0x1, 0x7, 0x38095a10, 0x6, 0x8333f, 0x7, 0xc8a, 0x6, 0x1, 0x3, 0x7f, 0x7, 0x8, 0x100, 0x8003, 0x8, 0x4, 0x9, 0x81, 0x4, 0x4, 0x4, 0x0, 0x7f, 0x9, 0x6, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x8004, 0x1ff, 0x4, 0x4, 0x5b3a, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x4000001, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x7, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2002b36, 0x60f63eb, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x5, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x1, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x6, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdfb, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0xfffffffd, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (rerun: 64) sendmsg$kcm(r8, &(0x7f0000000440)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r12, 0x3c}, 0x80, &(0x7f0000000080)=[{&(0x7f00000005c0)='\'', 0x1}], 0x1}, 0x804) 2m20.682322657s ago: executing program 2 (id=5129): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x7c, 0xd0ff}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 2m20.594842802s ago: executing program 3 (id=5131): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x61) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, 0x0, 0x58) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_buf(r2, 0x0, 0x29, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000007b00030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988200000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 2m20.535736329s ago: executing program 1 (id=5132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e23}]}}}]}, 0x40}}, 0x4000000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000440)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x0, 0x98b3}, {0x6, 0x8, 0xfd, 0x7}]}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r8}, 0x20) close(r7) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)=""/85, 0x55}], 0x1}, 0x40002142) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd0100000000001400000060000000001406"], 0xfdef) r11 = socket$inet(0x2, 0x80000, 0x1) bind$inet(r11, &(0x7f0000000400)={0x2, 0x4e20, @broadcast}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r13 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r13) getsockname$packet(r13, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r13, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r14, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r13, 0x84, 0x1d, &(0x7f0000000480)={0x2, [0x0, 0x0]}, &(0x7f00000004c0)=0xc) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xe0, r2, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r12}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa0000000}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0xe0}, 0x1, 0x0, 0x0, 0x800}, 0x4) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 2m20.521052478s ago: executing program 2 (id=5133): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0xfffb}, {0x0, 0xffff}, {0x300, 0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x402fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0x8ce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x5, 0x8, 0x932, 0x10000, 0x0, 0x7, 0xa, 0x401, 0xffffff4b, 0x7, 0x66c53844, 0xb7, 0x5, 0x9140, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x6, 0x37d8, 0x7, 0xd, 0x7, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x88000007, 0x6, 0x2, 0x4, 0x9, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x6, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x7, 0x30aa0000, 0x7, 0x9, 0x8, 0x60000000, 0x7f, 0xf6e, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0xa8fc, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc5, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x6, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x2001, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x100, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x8, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x10004, 0x80, 0xec, 0xfffffffb, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x2, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x6, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x405, 0x8, 0x9, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0xfffffffe, 0xffffffff, 0x3, 0x9, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x5, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x7fffffff, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0xb, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x2, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x2, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x177c, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x4, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x4, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0xfffffffe, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x1, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}, 0x1, 0x1000000}, 0x0) write$tun(r1, &(0x7f0000000140)=ANY=[], 0x4a) 2m20.166104897s ago: executing program 2 (id=5136): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) r1 = epoll_create1(0x80000) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x17a, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0x20000014}) (async) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) (async) pselect6(0x40, &(0x7f0000000000)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) (async) bind$packet(r0, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async, rerun: 32) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000180)=0x20) write$cgroup_subtree(r4, &(0x7f00000000c0)=ANY=[], 0x32600) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (rerun: 64) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101000000"], 0x57) (async, rerun: 64) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) (rerun: 64) r7 = socket$netlink(0x10, 0x3, 0xb) writev(r7, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) sendmsg$802154_dgram(r5, &(0x7f0000000380)={&(0x7f0000000080)={0x24, @short={0x2, 0xffff, 0xffff}}, 0x14, &(0x7f0000000340)={&(0x7f0000000280)="0788d01ce601af5e6bab7cc1b03654e78e5edc38ef33a28bbd184244355c3b28f295562f1098970d8beee123b2c68b37c59cc8825cab1c1bea6e50bdcc8b7e7e498819167821b16d45abaf2ea05d26addb157d9128b5b26dbc09528d0937eabf27934ff5eaca27abbaa15a28ecdd0f2d72c801fb1122aeb8603f0484d09539668836385f97", 0x85}, 0x1, 0x0, 0x0, 0x48}, 0x48844) getsockopt$inet6_tcp_buf(r7, 0x6, 0xb5394c52f7a8d889, &(0x7f0000000140)=""/179, &(0x7f0000000240)=0xb3) 2m19.967406461s ago: executing program 0 (id=5138): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r0, @ANYBLOB=' '], 0x38}}, 0x6404481c) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r2, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000040)=""/70, 0x46}], 0x2, 0x4, 0xfffffffe) 2m19.942248207s ago: executing program 3 (id=5140): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000d000000000000000000850000004f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000009800000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 2m19.757906471s ago: executing program 3 (id=5141): bind$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a54000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a050000000008000a40ffffff78080008401000000108000c4000000005080003400000001014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) (async) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) (async) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd26, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xc}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff5}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x44004}, 0x0) (async) setsockopt$sock_int(r2, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) (async) sendto$unix(r1, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000108000)={{0x0, 0x8, 0x100000000, 0xfffffffffffffffc, 0x0, 0x8, 0x9, 0x400, 0x3, 0x4, 0x36a58e4a, 0xd, 0x2, 0x75, 0x1}}) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x9362, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000004394b71cd1bb376d9cbbc9c56a296cc0000000110000100293d3c00", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000ac0)=@bpf_lsm={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000080000c300e0ff020000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x8, 0xd8, &(0x7f00000004c0)=""/216, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000140)=0x2, 0x4) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab93080004400000593228000280060003400001000006000340000500000400018008000100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) (async) setsockopt$inet_int(r6, 0x0, 0x17, 0x0, 0x0) 2m19.757740677s ago: executing program 0 (id=5142): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000040)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a00100000000280", 0x2a}, {&(0x7f0000000400)="03a1ffff", 0x4}], 0x2}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000340)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602240000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x90) 2m19.685226733s ago: executing program 1 (id=5144): mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={0x0, 0x1000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000001100)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x2004}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000044000000080003", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2m19.381787469s ago: executing program 0 (id=5145): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000009c0)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000a40)=ANY=[@ANYBLOB="141d91541391f9000000520000ff7fbd0000c274ea5761d615f5ea79e6b57db5b86467ceac94ba869cb0bde6635783ad5c9d6813d91e66f6674b69e0582656b2bee5d51f18c29ae91900"/92], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xa, &(0x7f0000000000), 0x75) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0xc, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0xffffffff}}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3e000000}}}, &(0x7f0000000080)='GPL\x00', 0xf, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r5, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e20, @private=0xa010101}}}, 0x108) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_IFNAME={0x14, 0x3, 'tunl0\x00'}]}, 0x4c}}, 0x1020) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=@newtaction={0x14, 0x30, 0x627, 0x7ffffd}, 0x14}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001300050000000000feffffff07000000", @ANYRES32=r7, @ANYBLOB="00300000000000003c001a803800048034"], 0x5c}, 0x1, 0x0, 0x0, 0x800c000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x541b, &(0x7f0000000940)={r3}) sendmmsg$alg(r1, &(0x7f0000000a00)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="42a86aa87f8cd13ebe3448412ba8", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@assoc={0x18, 0x117, 0x4, 0xffff}], 0x18, 0x44010}], 0x1, 0x40800) getsockname$l2tp6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000600)=0x20) r8 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r8, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000b00)=""/71, 0x47}, {&(0x7f0000000b80)=""/195, 0xc3}, {&(0x7f0000000c80)=""/201, 0xc9}, {&(0x7f0000000d80)=""/160, 0xa0}, {&(0x7f0000000e40)=""/106, 0x6a}, {&(0x7f0000000ec0)=""/214, 0xd6}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/225, 0xe1}], 0x8, &(0x7f0000002580)=""/172, 0xac}, 0x12040) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f00000006c0)=""/105, 0x69}, {&(0x7f0000000200)=""/82, 0x52}, {&(0x7f0000000280)=""/175, 0xaf}, {&(0x7f00000001c0)=""/3, 0x3}, {&(0x7f00000004c0)=""/225, 0xe1}, {&(0x7f00000007c0)=""/221, 0xdd}], 0x7}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a001700000000040037000900030001632564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) 2m19.308290578s ago: executing program 3 (id=5146): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) unshare(0x600) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x100000000, 0x200008, 0x4000000000011, 0x1, 0xfffffffffffffffc, 0x3fffffffffffffff, 0x1000000000000007, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$tun(r2, &(0x7f00000005c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r0], 0xfdef) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000006c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="2f0000000400000004000000", @ANYRES32=r1, @ANYBLOB="aec94f713066e9923767f445be1bd7eda539fae420dbe21af6a5893eea1c28941e9ff634573da5c94a0a3be55c49d65c1dc33e0e1f325008239b70dcb38ccdc615ce48de42025e0203224232f92df0455ed9513580f12b492bb35beeac", @ANYRES64=0x0], 0x20) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000680)={'nicvf0\x00', &(0x7f0000000600)=@ethtool_coalesce={0xe, 0x1, 0x4, 0xc, 0x8, 0x5744, 0x8001, 0x4, 0x6, 0x9, 0x8, 0x2402, 0x99d, 0x8000, 0x7ff, 0xc, 0x8, 0x2, 0x6, 0x80000000, 0x6, 0x2, 0x8}}) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x7a}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0xc9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xdc}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="60010000", @ANYRES16, @ANYBLOB="01000000000000000000140000000c00078008000200ff7f00000c00068004000200040005009000058007000100696200000700010069620000440002800800020007000000080004000400000008000400040000000800010017"], 0x160}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000500)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002bbd7000000000000200000008000300", @ANYRES32, @ANYBLOB='\b\x00gA'], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x480, 0x120, 0x0, 0x148, 0x120, 0x148, 0x3e8, 0x240, 0x240, 0x3e8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0xf}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@empty, [0xffffff00, 0xffffff00, 0x0, 0xffffff00], 0x4e22, 0x4e22, 0x4e1d, 0x4e20, 0x8, 0x2, 0x5f4a, 0x100, 0xa22}}}, {{@ip={@remote, @multicast1, 0xff000000, 0xffffff00, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2, 0x0, 0x60}, 0x0, 0x260, 0x2c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x9, 0x1, 0x1, 'syz1\x00'}}, @common=@inet=@recent0={{0xf8}, {0xc9, 0x3, 0x1, 0x0, 'syz1\x00', 0x5}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1a, 0xfffb, 0x7, 0x1, 'pptp\x00', 'syz1\x00', {0xffffffff}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r8, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x4}}, 0x10) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 2m19.222361437s ago: executing program 1 (id=5147): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[], 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000441d07012bbd7000fadbdf25037c0000d7fec28008000180feff0000"], 0x20}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0x3, 0xfe, 0x2, 0xb, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @dev}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xfb, 0x4}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @remote}}]}, 0x58}, 0x1, 0x7}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2}}, 0x2e) openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x8, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$netlink(0x10, 0x3, 0x8000000004) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000004200010000000000000000000301001208004d80040008001200010000112233445566778899aabb884700000800028004f02d80040003"], 0x3c}}, 0x4008010) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000080)={r6, 0x7}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="640300001000010400"/20, @ANYRES32=r0, @ANYRESDEC=r0], 0x364}, 0x1, 0x0, 0x0, 0x840}, 0x0) 2m19.139194472s ago: executing program 0 (id=5148): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x0, 0x10, &(0x7f0000000080), 0xffffffffffffffb2}, 0x48) r1 = socket(0x10, 0x803, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000400)=r0, 0x4) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000005200010000000000000000000200000008000100", @ANYRES32], 0x1c}}, 0x4000) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) (async) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10, 0x80800) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r4, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x6, 0x8, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @broadcast}, "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"}}, 0xfce) (async) setsockopt$inet_mreq(r3, 0x0, 0x20, &(0x7f00000001c0)={@private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010003b150000e6ffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000008000002c0012800b00010062726964676500001c0002800c002100ffffffffffffffff0c0022000104080000000000"], 0x4c}}, 0x80) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@bloom_filter={0x1e, 0xc3f, 0x10, 0x8, 0x10000, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0xd}, 0x50) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, r7, 0xff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x5}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e0000000180000007000000070a000021080400", @ANYRES32=r8, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01010000000000050000000004357d18a0101000000000000000005d36d341cdbb4a9e0006c6378d1eabe25cd818c005cca151a837937b01a51880c5ea22f1b78fefb0bd73a18af429be0921a4b25e9b7870cbfb16bdbb9b47c4932f1a"], 0x50) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x2, 0x8, 0x0, 0x45102, r7, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2, 0xf}, 0x50) (async) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r3, 0x8983, &(0x7f0000000200)={0x1, 'pim6reg0\x00', {}, 0xf0d}) 2m19.0427239s ago: executing program 4 (id=5149): r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="240000001800010000000000fedbdf251d01060008000900", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690032000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 2m18.889708823s ago: executing program 1 (id=5150): r0 = socket(0x10, 0x80002, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r1, @ANYBLOB="0000000046146224280012800b0001006d61637365630000180002800c0004000100000100c28000050003000f"], 0x48}}, 0x40000) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000002d00000000000000", @ANYRES32, @ANYBLOB="05000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="04000000040000000400"/28], 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"/2728], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x108, 0xe, 0x0, &(0x7f0000000340)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf48f, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f00000003c0)=@filter={'filter\x00', 0x232, 0x0, 0x90, [0x0, 0x200000000300, 0x0, 0x0, 0x200000000330, 0x200000000360], 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000ffff00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000100010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a300000000030000380"], 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x8a, 0x7, 0x73, @private1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0xec0, 0x7, 0x1}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000a00000000000059200871f30038c5000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180000000600000000000000010000001855000010000000000000000000000051a7000000000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x5, 0x6d, &(0x7f0000000540)=""/109, 0x41100, 0x8, '\x00', r6, 0x25, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x4, 0xe, 0x4, 0x2}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000640)=[r2, r2, r2, r2, r2], &(0x7f0000000680)=[{0x0, 0x5, 0x8, 0xb}, {0x4, 0x2, 0xf, 0x4}, {0x1, 0x4, 0x4}, {0x1, 0x4, 0xa, 0x6}, {0x0, 0x3, 0x8, 0x9}, {0x5, 0x1, 0xb, 0xc}], 0x10, 0x3}, 0x94) 2m18.854295682s ago: executing program 4 (id=5151): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x5, 0x8, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x8, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0, 0x0, 0x0, 0xf3}}]}, &(0x7f00000003c0)='syzkaller\x00', 0x2}, 0x94) 2m18.659811512s ago: executing program 4 (id=5152): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000dc0), r1) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bdb1, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x3}, @IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c800}, 0x20000014) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0xa1, 0x24, 0x100, 0x70bd26, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xe}, {0xffe0, 0xf22e2fb1d2c3aa6a}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0xb, 0x4}}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}, @qdisc_kind_options=@q_mq={0x7}]}, 0x48}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000300)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r4 = accept$alg(r0, 0x0, 0x0) recvmsg(r4, &(0x7f0000007140)={0x0, 0x0, &(0x7f0000007100)=[{&(0x7f0000005600)=""/49, 0x31}], 0x39}, 0x40000102) sendmmsg$inet(r4, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000140)="ec0767137af7e7d890debdedb6aba1a8b4ede604461087e87bc1e54d08a4c58d94481c59aaedb0d8e7dcf67b286f2eb812797a31410d9f1522c112a7fa390a471160d1c4d0832a", 0x47}, {&(0x7f0000000100)="4dea2e9fc630f1670cf70c207e43667030bf092497c42179b09807f9b234acd0e2", 0x21}], 0x2}}], 0x1, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002abd7000fedbdf25020202000900030073797a30000000000900010073790000000000000500040002000000aff213e09b45d7f1cb839f520377ab41dcea2e6542b28c4023ce0ece23a922eeced45c978f7548d7961d3431ee78e54cc8"], 0x34}, 0x1, 0x40030000000000, 0x0, 0x40408c0}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r9, 0x0, 0x6, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) write$cgroup_devices(r9, &(0x7f0000000200)=ANY=[], 0x6) write(r7, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x88, 0x30, 0xffff, 0x70bd29, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x3}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x20000000, 0x5, 0xfffffff7}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r9, 0xffffb000) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) socket$nl_generic(0x10, 0x3, 0x10) 2m18.09811697s ago: executing program 2 (id=5153): sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB="80"], 0x80}}, 0x8000) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002380)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c040894) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001900010025bd700000000000e00000020000000000000000000400000000000000000000000000000000000000000000000000000a0000008700"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2m17.801402817s ago: executing program 2 (id=5154): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0xc, r2, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x4}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0={0x18, 0x0, 0x0, 0x0, 0x101}, @generic={0xc4, 0x0, 0x0, 0x0, 0x110}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2}, @exit]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80800001}, 0x94) 2m17.750644747s ago: executing program 4 (id=5155): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000f00)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x24004881}, 0x3400c012) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) getsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000000080), &(0x7f0000000500)=0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000000c0)={'filter\x00', 0x7, 0x2, 0x3e0, 0x1f8, 0x2f8, 0x1f8, 0x2f8, 0x2f8, 0x2f8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}, {{@arp={@multicast2, @empty, 0x0, 0x0, 0x0, 0x0, {@mac=@broadcast}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'vxcan1\x00', 'nr0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac, @broadcast}}}, {{@arp={@remote, @multicast2, 0x0, 0x0, 0x0, 0x0, {@mac}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg\x00', 'vcan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "dcbc4f0fcafe5fd600342efa7968d220b64d039e8a81d171eeb2e9630554"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x430) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000000000000000000000100000001000000000000000000000001", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000010640)={'ip6tnl0\x00', &(0x7f00000001c0)=@ethtool_cmd={0x2f, 0xff4, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfc, 0x0, 0xfc, 0x0, 0x2, 0xfffd, 0xff, 0x0, 0x40000045, [0x0, 0x4]}}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r4) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r6, 0x403, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4004005}, 0x84) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xfffffffe, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "0a1fb0699d46dac48f29d158dbe8cfb1979e12979688dc039b90627d7b60f0d5ca47f33eed46409b7c8722ce020df6b24c2e6ac7b97dc04d01be2092874115214b1ebb764511f69cd1e9f6263346363d2c639c7667ce67af25166c2f0f85f36aa8867406119c2a6f1f892e31dea982c5ab0348d560eae59ea49ef95d73202a6e3b5e1eb38244e694e7410d33bc92794ad27031f2a19698b51424df36e2a876a4fc871207bf12a84f1d4d132f5bb7edcf2d08d677e6a7268e106b6ced3c7f53df24092ddb9e0fac6a1153c3fc88bfd1404fef22cf3e825a6e19c6a48a5444eabb459af0ec9a278df4011773d2f2e6529ed0ad424b47ec67522477f979360b76d1"}, @TCA_RED_PARMS={0x14, 0x1, {0x3f26, 0x7, 0x81, 0x1c, 0x7, 0x14, 0x5}}, @TCA_RED_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x150}}, 0x4000010) 2m17.56598546s ago: executing program 3 (id=5156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {0x1, 0xb}, {0xffff, 0xfffd}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x544b}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x18228}, [@IFLA_ALT_IFNAME={0x14, 0x45, 'bridge0\x00'}]}, 0x34}}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="05031c00d3fc140000004788031c09102c28", 0x12, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @local}, 0x14) 2m17.495332141s ago: executing program 0 (id=5157): mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000000)={&(0x7f0000000000), 0x1000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000001200)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000001300)=0x10, 0x4) bind$xdp(r0, &(0x7f0000001400)={0x2c, 0x0, 0x1, 0x0, 0x0}, 0x10) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pselect6(0x40, &(0x7f00000001c0)={0x7f, 0x0, 0x0, 0xbf1, 0x0, 0xffff7ffffffffffa, 0x8}, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x2004}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000044000000080003", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 2m17.490556511s ago: executing program 1 (id=5158): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x8, 0x6, 0x0, 0x0, 0x3, 0x0, 0x1, 0x1, 0x0, 0x10}, 0xe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x2}, 0x6) write(r1, &(0x7f0000000000)="4c00000011000e14000300020000000002000000200000", 0x17) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00'}) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000080)={0x2, 0x1, "67a55b", 0x4, 0x1}) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000001c0)={r2, 0x4}, 0x8) 2m17.305935978s ago: executing program 2 (id=5159): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x5, 0x4, 0xfff, 0x7, 0x88, 0xffffffffffffffff, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000e41621eb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r2, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$unix(r3, &(0x7f0000007580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @cred={{0x1c, 0x117, 0x2, {0xffffffffffffffff}}}], 0x40, 0x20048811}}], 0x1, 0x4000) r4 = socket$inet(0xa, 0x801, 0x84) r5 = socket$packet(0x11, 0x3, 0x300) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r6) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, 0x0, 0x20000000) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(r6, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, r7, 0x10, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x40080}, 0x40010) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x4bd1bfda, 0x0, 0x6}, 0x1c) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r11 = socket$netlink(0x10, 0x3, 0x4) write(r11, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000500)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x200000000440, 0x200000000470, 0x2000000004a0], 0x0, 0x0, &(0x7f0000000440)=[{0x29, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0x2}]}, 0x108) 2m16.91774094s ago: executing program 0 (id=5160): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000004c0)=""/1, &(0x7f00000001c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x3, 0x0, 0xc46c, 0x5, 0x8000, 0x7f}, {0xf, 0x0, 0x64e, 0x0, 0x4, 0x7fff}, 0x9, 0xa, 0x6, 0x8b9, 0x6}}, @TCA_HTB_RTAB={0x404, 0x4, [0x2781, 0x5, 0x3, 0x7, 0x0, 0x800, 0x4009641, 0x2, 0x40, 0x2, 0x8898, 0x35d8, 0x2, 0x455763c, 0xffffca77, 0x3, 0x7, 0x1, 0x6, 0x0, 0x4, 0x0, 0x87, 0x6, 0x2, 0x9, 0x34e, 0xdd5, 0x8000, 0x4, 0x7ff, 0x10001, 0x2, 0x8, 0x9, 0xffffffa8, 0x7, 0xe, 0x8006, 0x10000, 0x0, 0x8, 0xfffffffc, 0x6, 0x80, 0xa, 0x5, 0xb, 0xb, 0xb, 0x10001, 0x9, 0x40, 0x2, 0x1, 0x82ff, 0x2, 0x9c19, 0x6, 0x2, 0x7f, 0x4, 0x6, 0x29, 0x133, 0x9, 0xffffffff, 0x401, 0x804, 0x7, 0x14c8, 0x2, 0x3, 0x0, 0xfffffffe, 0x3, 0x40000, 0x2, 0x1, 0x1, 0x7ff, 0x0, 0x13, 0x4f9, 0x2, 0x4f, 0x9, 0x7, 0x80, 0x5, 0x5, 0x6, 0x5, 0x9, 0x400, 0x5, 0xffffffff, 0x41, 0x2, 0x8, 0x0, 0x7d, 0x2, 0x7, 0x2b, 0x2, 0xffffffff, 0x5, 0xffff8d44, 0x4, 0x9, 0xfb5, 0xa, 0x1, 0xcbcb, 0x6, 0x401, 0x4, 0x9, 0x10, 0xffff, 0xf, 0x12f, 0x7, 0x6, 0x81, 0xc716, 0xa, 0xde35, 0xfffffffd, 0xf18e, 0x9, 0x4, 0x8001, 0x2, 0x7ff, 0x3a34, 0xd0fd, 0x0, 0xfffffffe, 0x8, 0x3, 0x9, 0x9, 0x1467b9d2, 0x2, 0x3, 0x2, 0x7, 0x6000, 0x401, 0x51, 0x8, 0x7, 0x8aed, 0x6, 0x7f, 0xd7, 0x7, 0x9, 0xa78, 0x80000001, 0x0, 0x73d, 0x1, 0x2000000e, 0x5, 0x8dec, 0x3ff, 0x0, 0x4, 0x4, 0x1, 0x1, 0x7, 0x943, 0xa2, 0x4, 0x80000001, 0xd, 0x1, 0x4, 0x803, 0xf0, 0x8, 0x7ff, 0x0, 0x4, 0xfc, 0x1da, 0x4, 0x8000, 0x7, 0x8, 0xd, 0x0, 0x200, 0xbc1e, 0x8, 0xaca, 0xda1, 0xe, 0x3, 0xffffdffd, 0xc8d, 0x6, 0x9, 0x9, 0x0, 0x1, 0x8, 0xe, 0x5, 0x6, 0x101, 0x5, 0x200, 0x9c9, 0x9, 0x6, 0x1, 0x1, 0xb, 0x4, 0x3, 0x40, 0x1000, 0x1, 0x1, 0x9, 0x0, 0x9, 0xffff, 0x4, 0xc3f9, 0x80000001, 0x6, 0x7fff, 0x8000, 0x1, 0x6, 0x9, 0x1, 0xfffffff9, 0x800, 0x5, 0x9, 0x9, 0x7f, 0x77c79496, 0xd, 0x2, 0xa, 0x0, 0xd4fb, 0x8]}]}}]}, 0x464}}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1, 0x2, 0x8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x5, 0x2, 0xff, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x0, 0xff, 0x5, 0x6, 0x7}, 0xe) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0xa, 0xff, 0x1, 0x1d, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x7, 0x6}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2400c08d) shutdown(r8, 0x1) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x4) accept4(r9, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@getchain={0x54, 0x66, 0x209, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x6, 0x1}, {0x0, 0x1}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x3c}, {0x8, 0xb, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x240448f1}, 0x6008800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@pptp={0x18, 0x2, {0x0, @multicast1}}, {&(0x7f00000001c0)=""/103, 0x67}, &(0x7f0000000280), 0x20}, 0xa0) 2m16.622250899s ago: executing program 4 (id=5161): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x14, 0x37, 0x1, 0x0, 0x0, {0x3, 0x1}}, 0x14}}, 0x0) (fail_nth: 2) 2m16.553543875s ago: executing program 1 (id=5162): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x400a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x200000, 0x20004001}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x884) 2m15.950078897s ago: executing program 4 (id=5163): r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2a, 0x1, {0x0, 0x0, 0x0, 0x0, {0x2, 0xe}, {0xffff, 0xffff}, {0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010000104000000000000c90000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="20001280feff0100677470001400028008000100", @ANYRES32=r2], 0x48}}, 0x0) 1m47.906828852s ago: executing program 32 (id=5160): r0 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000004c0)=""/1, &(0x7f00000001c0)=0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001440)=@newtclass={0x464, 0x28, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x1, 0xfff1}, {0x1, 0xfff1}, {0x0, 0xfff1}}, [@tclass_kind_options=@c_htb={{0x8}, {0x438, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x3, 0x0, 0xc46c, 0x5, 0x8000, 0x7f}, {0xf, 0x0, 0x64e, 0x0, 0x4, 0x7fff}, 0x9, 0xa, 0x6, 0x8b9, 0x6}}, @TCA_HTB_RTAB={0x404, 0x4, [0x2781, 0x5, 0x3, 0x7, 0x0, 0x800, 0x4009641, 0x2, 0x40, 0x2, 0x8898, 0x35d8, 0x2, 0x455763c, 0xffffca77, 0x3, 0x7, 0x1, 0x6, 0x0, 0x4, 0x0, 0x87, 0x6, 0x2, 0x9, 0x34e, 0xdd5, 0x8000, 0x4, 0x7ff, 0x10001, 0x2, 0x8, 0x9, 0xffffffa8, 0x7, 0xe, 0x8006, 0x10000, 0x0, 0x8, 0xfffffffc, 0x6, 0x80, 0xa, 0x5, 0xb, 0xb, 0xb, 0x10001, 0x9, 0x40, 0x2, 0x1, 0x82ff, 0x2, 0x9c19, 0x6, 0x2, 0x7f, 0x4, 0x6, 0x29, 0x133, 0x9, 0xffffffff, 0x401, 0x804, 0x7, 0x14c8, 0x2, 0x3, 0x0, 0xfffffffe, 0x3, 0x40000, 0x2, 0x1, 0x1, 0x7ff, 0x0, 0x13, 0x4f9, 0x2, 0x4f, 0x9, 0x7, 0x80, 0x5, 0x5, 0x6, 0x5, 0x9, 0x400, 0x5, 0xffffffff, 0x41, 0x2, 0x8, 0x0, 0x7d, 0x2, 0x7, 0x2b, 0x2, 0xffffffff, 0x5, 0xffff8d44, 0x4, 0x9, 0xfb5, 0xa, 0x1, 0xcbcb, 0x6, 0x401, 0x4, 0x9, 0x10, 0xffff, 0xf, 0x12f, 0x7, 0x6, 0x81, 0xc716, 0xa, 0xde35, 0xfffffffd, 0xf18e, 0x9, 0x4, 0x8001, 0x2, 0x7ff, 0x3a34, 0xd0fd, 0x0, 0xfffffffe, 0x8, 0x3, 0x9, 0x9, 0x1467b9d2, 0x2, 0x3, 0x2, 0x7, 0x6000, 0x401, 0x51, 0x8, 0x7, 0x8aed, 0x6, 0x7f, 0xd7, 0x7, 0x9, 0xa78, 0x80000001, 0x0, 0x73d, 0x1, 0x2000000e, 0x5, 0x8dec, 0x3ff, 0x0, 0x4, 0x4, 0x1, 0x1, 0x7, 0x943, 0xa2, 0x4, 0x80000001, 0xd, 0x1, 0x4, 0x803, 0xf0, 0x8, 0x7ff, 0x0, 0x4, 0xfc, 0x1da, 0x4, 0x8000, 0x7, 0x8, 0xd, 0x0, 0x200, 0xbc1e, 0x8, 0xaca, 0xda1, 0xe, 0x3, 0xffffdffd, 0xc8d, 0x6, 0x9, 0x9, 0x0, 0x1, 0x8, 0xe, 0x5, 0x6, 0x101, 0x5, 0x200, 0x9c9, 0x9, 0x6, 0x1, 0x1, 0xb, 0x4, 0x3, 0x40, 0x1000, 0x1, 0x1, 0x9, 0x0, 0x9, 0xffff, 0x4, 0xc3f9, 0x80000001, 0x6, 0x7fff, 0x8000, 0x1, 0x6, 0x9, 0x1, 0xfffffff9, 0x800, 0x5, 0x9, 0x9, 0x7f, 0x77c79496, 0xd, 0x2, 0xa, 0x0, 0xd4fb, 0x8]}]}}]}, 0x464}}, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x1, 0x2, 0x8}) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000280)={0x5, 0x2, 0xff, 0x0, 0x4, 0x9, 0x8, 0x8, 0x1, 0x0, 0xff, 0x5, 0x6, 0x7}, 0xe) sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="02000000040000000100"/20, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'ip6tnl0\x00', 0x0, 0x2f, 0xa, 0xff, 0x1, 0x1d, @private2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7800, 0x8000, 0x7, 0x6}}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r6, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008001}, 0x8000) r8 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r8, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2400c08d) shutdown(r8, 0x1) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r9, 0x4) accept4(r9, 0x0, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@getchain={0x54, 0x66, 0x209, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x6, 0x1}, {0x0, 0x1}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x1ff}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x101}, {0x8, 0xb, 0x3c}, {0x8, 0xb, 0x80}]}, 0x54}, 0x1, 0x0, 0x0, 0x240448f1}, 0x6008800) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, &(0x7f0000000380)={@pptp={0x18, 0x2, {0x0, @multicast1}}, {&(0x7f00000001c0)=""/103, 0x67}, &(0x7f0000000280), 0x20}, 0xa0) 0s ago: executing program 33 (id=5162): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r1, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r1], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x400a, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x200000, 0x20004001}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r1, 0x312}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r11], 0x4c}}, 0x884) kernel console output (not intermixed with test programs): 962] ? __pfx_bpf_prog_load+0x10/0x10 [ 606.888504][T20962] __sys_bpf+0xd0d/0xd90 [ 606.888594][T20962] ? __pfx___sys_bpf+0x10/0x10 [ 606.888686][T20962] ? __fget_files+0x2a/0x420 [ 606.888817][T20962] ? ksys_write+0x242/0x270 [ 606.888909][T20962] ? __pfx_ksys_write+0x10/0x10 [ 606.889018][T20962] __x64_sys_bpf+0xba/0xd0 [ 606.889132][T20962] do_syscall_64+0x166/0x520 [ 606.889196][T20962] ? trace_irq_disable+0x3b/0x140 [ 606.889268][T20962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.889319][T20962] ? clear_bhb_loop+0x70/0xc0 [ 606.889381][T20962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.889422][T20962] RIP: 0033:0x7fabd6b9e159 [ 606.889472][T20962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 606.889516][T20962] RSP: 002b:00007fabd79bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 606.889578][T20962] RAX: ffffffffffffffda RBX: 00007fabd6e25fa0 RCX: 00007fabd6b9e159 [ 606.889624][T20962] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 606.889664][T20962] RBP: 00007fabd79bc090 R08: 0000000000000000 R09: 0000000000000000 [ 606.889699][T20962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 606.889733][T20962] R13: 00007fabd6e26038 R14: 00007fabd6e25fa0 R15: 00007ffeef60f1f8 [ 606.889838][T20962] [ 607.328796][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.387220][T20965] ip_tables: iptables: counters copy to user failed while replacing table [ 607.518983][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.562297][T20975] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4281'. [ 607.614703][T20974] netlink: 156 bytes leftover after parsing attributes in process `syz.1.4284'. [ 607.867112][T20993] syzkaller0: entered promiscuous mode [ 607.867172][T20993] syzkaller0: entered allmulticast mode [ 608.046144][T20978] mac80211_hwsim hwsim28 wlan0: left promiscuous mode [ 608.049086][T20978] mac80211_hwsim hwsim28 wlan0: left allmulticast mode [ 608.211718][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.368614][ T5716] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.742934][T21022] syzkaller0: entered promiscuous mode [ 608.742958][T21022] syzkaller0: entered allmulticast mode [ 608.837921][T21030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4305'. [ 609.170172][T11585] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.424609][T21061] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 609.721783][T21050] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.722323][T21050] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.480821][T21050] 0·: left allmulticast mode [ 610.480850][T21050] hsr_slave_0: left allmulticast mode [ 610.480868][T21050] hsr_slave_1: left allmulticast mode [ 610.956873][T21050] syzkaller0: left promiscuous mode [ 610.956901][T21050] syzkaller0: left allmulticast mode [ 610.990389][T18628] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.990424][T18628] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.990465][T18628] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.990491][T18628] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.990538][T18628] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.990565][T18628] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 610.990601][T18628] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 610.990637][T18628] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 611.126405][T21091] --map-set only usable from mangle table [ 611.351723][T21111] xt_SECMARK: invalid mode: 9 [ 611.385514][T21114] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4321'. [ 611.442885][T21114] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4321'. [ 611.789723][T21130] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4329'. [ 611.985181][T21140] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4334'. [ 612.041003][T21140] vlan2: entered promiscuous mode [ 612.706885][T21169] syz_tun: left allmulticast mode [ 613.045031][T21191] xt_TPROXY: Can be used only with -p tcp or -p udp [ 613.132982][T21194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4354'. [ 613.403336][T21198] pim6reg1: entered promiscuous mode [ 613.403359][T21198] pim6reg1: entered allmulticast mode [ 613.733429][T21221] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 613.745734][T21221] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4363'. [ 613.752527][T21221] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 613.790913][T21225] netlink: 'syz.4.4364': attribute type 10 has an invalid length. [ 613.812290][T21225] .`: (slave netdevsim1): Releasing backup interface [ 613.837571][T21225] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 613.837740][T21225] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 613.841348][T21225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.842403][T21225] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 613.842728][T21225] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 613.844053][T21225] team0: Port device netdevsim1 added [ 613.914168][T21225] netlink: 'syz.4.4364': attribute type 10 has an invalid length. [ 613.914447][T21225] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 613.914606][T21225] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 613.955456][T21225] team0: Port device netdevsim1 removed [ 613.971429][T21225] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 613.973671][T21225] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 613.975438][T21225] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 614.001355][T21225] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 614.126404][T21240] --map-set only usable from mangle table [ 614.249513][T21247] FAULT_INJECTION: forcing a failure. [ 614.249513][T21247] name failslab, interval 1, probability 0, space 0, times 0 [ 614.249546][T21247] CPU: 0 UID: 0 PID: 21247 Comm: syz.4.4371 Not tainted syzkaller #0 PREEMPT(full) [ 614.249569][T21247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 614.249582][T21247] Call Trace: [ 614.249590][T21247] [ 614.249599][T21247] dump_stack_lvl+0xe8/0x150 [ 614.249634][T21247] should_fail_ex+0x410/0x560 [ 614.249661][T21247] should_failslab+0xa8/0x100 [ 614.249686][T21247] ? skb_clone+0x212/0x3a0 [ 614.249713][T21247] kmem_cache_alloc_noprof+0xa1/0x600 [ 614.249746][T21247] ? skb_clone+0x212/0x3a0 [ 614.249779][T21247] skb_clone+0x212/0x3a0 [ 614.249817][T21247] __netlink_deliver_tap+0x413/0x860 [ 614.249858][T21247] ? netlink_deliver_tap+0x2e/0x1b0 [ 614.249889][T21247] netlink_deliver_tap+0x19c/0x1b0 [ 614.249920][T21247] netlink_unicast+0x781/0x940 [ 614.249956][T21247] netlink_sendmsg+0x813/0xb40 [ 614.249998][T21247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.250036][T21247] ? apparmor_socket_sendmsg+0x98/0x360 [ 614.250061][T21247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 614.250089][T21247] sock_sendmsg_nosec+0x13a/0x180 [ 614.250124][T21247] ____sys_sendmsg+0x54e/0x850 [ 614.250155][T21247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 614.250191][T21247] ? import_iovec+0x73/0xa0 [ 614.250219][T21247] ___sys_sendmsg+0x2a5/0x360 [ 614.250244][T21247] ? __lock_acquire+0x747/0x2de0 [ 614.250270][T21247] ? __pfx____sys_sendmsg+0x10/0x10 [ 614.250330][T21247] ? __fget_files+0x2a/0x420 [ 614.250357][T21247] ? __fget_files+0x3a2/0x420 [ 614.250394][T21247] __x64_sys_sendmsg+0x1b1/0x290 [ 614.250423][T21247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 614.250471][T21247] do_syscall_64+0x166/0x520 [ 614.250492][T21247] ? trace_irq_disable+0x3b/0x140 [ 614.250513][T21247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.250534][T21247] ? clear_bhb_loop+0x70/0xc0 [ 614.250559][T21247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 614.250579][T21247] RIP: 0033:0x7f50e159e159 [ 614.250598][T21247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 614.250616][T21247] RSP: 002b:00007f50df7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 614.250637][T21247] RAX: ffffffffffffffda RBX: 00007f50e1825fa0 RCX: 00007f50e159e159 [ 614.250652][T21247] RDX: 000000000000c800 RSI: 00002000000007c0 RDI: 0000000000000004 [ 614.250665][T21247] RBP: 00007f50df7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 614.250678][T21247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 614.250691][T21247] R13: 00007f50e1826038 R14: 00007f50e1825fa0 R15: 00007fffe988d908 [ 614.250722][T21247] [ 614.597479][T21245] bond0: Device is already in use. [ 614.601345][T21250] bond0: Device is already in use. [ 614.609488][T21254] bond0: Device is already in use. [ 614.646012][T21259] bond0: Device is already in use. [ 614.810305][T21234] lo speed is unknown, defaulting to 1000 [ 614.903798][T21266] bond1: option mode: unable to set because the bond device has slaves [ 614.919702][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4375'. [ 614.919721][T21266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4375'. [ 614.974618][T21278] netlink: 'syz.0.4375': attribute type 4 has an invalid length. [ 614.974640][T21278] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4375'. [ 615.173696][T21283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4380'. [ 615.415105][T21302] xt_hashlimit: size too large, truncated to 1048576 [ 615.484729][T21308] x_tables: duplicate underflow at hook 1 [ 615.844041][T21327] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 615.922514][T21327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 615.939126][T21333] bond3: (slave veth0_to_bond): Releasing active interface [ 615.965254][T21327] netlink: 'syz.2.4393': attribute type 1 has an invalid length. [ 615.989239][T21333] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 615.994946][T21324] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '¸ŠŸ>úáÂN9Ü5äx×Ùhˉ½p¡þàn [ 616.035593][T21327] macvlan2: entered promiscuous mode [ 616.035615][T21327] macvlan2: entered allmulticast mode [ 616.041395][T21327] bond0: entered promiscuous mode [ 616.054403][T21327] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 616.061466][T21327] bond0: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 616.062798][T21327] bond0: left promiscuous mode [ 616.122343][T21342] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 616.297007][T21346] netlink: 'syz.2.4398': attribute type 3 has an invalid length. [ 616.325598][T21346] syzkaller0: entered promiscuous mode [ 616.325627][T21346] syzkaller0: entered allmulticast mode [ 616.360816][T21347] x_tables: duplicate underflow at hook 1 [ 616.373089][ T145] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.373150][ T145] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.373185][ T145] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.373219][ T145] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.422911][T21352] lo speed is unknown, defaulting to 1000 [ 616.973456][T21373] __nla_validate_parse: 3 callbacks suppressed [ 616.973480][T21373] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4407'. [ 616.973608][T21373] 1·: renamed from c0· [ 617.002714][T21373] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 617.002739][T21373] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 617.002816][T21373] 1·: entered allmulticast mode [ 617.002831][T21373] hsr_slave_0: entered allmulticast mode [ 617.002846][T21373] hsr_slave_1: entered allmulticast mode [ 617.005632][T21373] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 617.181785][T21384] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4408'. [ 617.250698][T21389] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4411'. [ 617.269806][T21384] 0·: renamed from c1· (while UP) [ 617.274249][T21384] 0·: left promiscuous mode [ 617.274922][T21384] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 617.502183][T21402] --map-set only usable from mangle table [ 617.570768][T21403] 1·: left allmulticast mode [ 617.570793][T21403] hsr_slave_0: left allmulticast mode [ 617.570809][T21403] hsr_slave_1: left allmulticast mode [ 617.614381][T21403] syzkaller0: left promiscuous mode [ 617.614403][T21403] syzkaller0: left allmulticast mode [ 617.677809][T18628] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.678562][T18628] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.678701][T18628] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.678818][T18628] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 617.702516][T21406] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4416'. [ 617.760295][T21406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4416'. [ 617.865582][T21421] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 617.944091][T21431] openvswitch: netlink: Multiple metadata blocks provided [ 618.232822][T21447] netlink: 'syz.1.4429': attribute type 1 has an invalid length. [ 618.318189][T21447] 8021q: adding VLAN 0 to HW filter on device bond0 [ 618.325777][T21449] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 618.354553][T21443] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4429'. [ 618.544434][T21461] x_tables: duplicate underflow at hook 1 [ 618.769913][T21471] FAULT_INJECTION: forcing a failure. [ 618.769913][T21471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.769945][T21471] CPU: 1 UID: 0 PID: 21471 Comm: syz.4.4439 Not tainted syzkaller #0 PREEMPT(full) [ 618.769967][T21471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.769980][T21471] Call Trace: [ 618.769989][T21471] [ 618.769997][T21471] dump_stack_lvl+0xe8/0x150 [ 618.770044][T21471] should_fail_ex+0x410/0x560 [ 618.770072][T21471] _copy_to_user+0x31/0xb0 [ 618.770100][T21471] bpf_verifier_vlog+0x3a2/0x900 [ 618.770142][T21471] bpf_verifier_log_write+0x11d/0x1a0 [ 618.770168][T21471] ? __pfx_bpf_verifier_log_write+0x10/0x10 [ 618.770192][T21471] ? record_arg_access+0x148/0x970 [ 618.770224][T21471] analyze_subprog+0x5d98/0x9e00 [ 618.770247][T21471] ? probe_event_enable+0x6df/0xae0 [ 618.770316][T21471] ? __pfx_analyze_subprog+0x10/0x10 [ 618.770338][T21471] ? __x64_sys_bpf+0xba/0xd0 [ 618.770355][T21471] ? rsc_put+0x1b0/0x1d0 [ 618.770378][T21471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.770434][T21471] ? call_instance+0x263/0x560 [ 618.770456][T21471] ? rcu_is_watching+0x16/0xb0 [ 618.770480][T21471] ? call_instance+0x263/0x560 [ 618.770501][T21471] ? trace_kmalloc+0x2a/0xf0 [ 618.770536][T21471] ? call_instance+0x263/0x560 [ 618.770557][T21471] ? __kvmalloc_node_noprof+0x52f/0x820 [ 618.770580][T21471] ? __kvmalloc_node_noprof+0x345/0x820 [ 618.770601][T21471] ? call_instance+0x263/0x560 [ 618.770621][T21471] ? call_instance+0x263/0x560 [ 618.770659][T21471] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 618.770683][T21471] ? bpf_base_func_proto+0x281/0xb00 [ 618.770709][T21471] ? __pfx_lwt_xmit_func_proto+0x10/0x10 [ 618.770756][T21471] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 618.770787][T21471] ? __kvmalloc_node_noprof+0x345/0x820 [ 618.770807][T21471] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 618.770830][T21471] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 618.770860][T21471] bpf_compute_live_registers+0x8d3/0x1ff0 [ 618.770902][T21471] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 618.770936][T21471] bpf_check+0x25ed/0x2e10 [ 618.770969][T21471] ? ktime_get_with_offset+0x93/0x2d0 [ 618.770995][T21471] ? __pfx_bpf_check+0x10/0x10 [ 618.771026][T21471] ? bpf_obj_name_cpy+0x194/0x1e0 [ 618.771059][T21471] bpf_prog_load+0x14d6/0x1c20 [ 618.771093][T21471] ? __pfx_bpf_prog_load+0x10/0x10 [ 618.771138][T21471] __sys_bpf+0xd0d/0xd90 [ 618.771167][T21471] ? __pfx___sys_bpf+0x10/0x10 [ 618.771198][T21471] ? __fget_files+0x2a/0x420 [ 618.771242][T21471] ? ksys_write+0x242/0x270 [ 618.771274][T21471] ? __pfx_ksys_write+0x10/0x10 [ 618.771308][T21471] __x64_sys_bpf+0xba/0xd0 [ 618.771330][T21471] do_syscall_64+0x166/0x520 [ 618.771352][T21471] ? trace_irq_disable+0x3b/0x140 [ 618.771371][T21471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.771391][T21471] ? clear_bhb_loop+0x70/0xc0 [ 618.771415][T21471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.771435][T21471] RIP: 0033:0x7f50e159e159 [ 618.771453][T21471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.771471][T21471] RSP: 002b:00007f50df7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.771492][T21471] RAX: ffffffffffffffda RBX: 00007f50e1825fa0 RCX: 00007f50e159e159 [ 618.771508][T21471] RDX: 0000000000000094 RSI: 0000200000000380 RDI: 0000000000000005 [ 618.771521][T21471] RBP: 00007f50df7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 618.771534][T21471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 618.771547][T21471] R13: 00007f50e1826038 R14: 00007f50e1825fa0 R15: 00007fffe988d908 [ 618.771578][T21471] [ 619.401190][T21487] ip_tables: iptables: counters copy to user failed while replacing table [ 619.490767][T21492] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4448'. [ 619.490874][T21492] 1·: renamed from c0· [ 619.506593][T21492] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 619.506618][T21492] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 619.535240][T21492] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 619.564704][T21493] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4446'. [ 619.594671][T21493] vlan2: entered promiscuous mode [ 619.594694][T21493] syz_tun: entered promiscuous mode [ 619.671775][T21497] x_tables: duplicate underflow at hook 1 [ 619.837850][T21507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4454'. [ 619.967515][T21512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 619.969108][T21512] xt_hl: Unknown TTL match mode: 237 [ 620.060457][T21525] netlink: 27 bytes leftover after parsing attributes in process `syz.1.4460'. [ 621.179729][T21573] syzkaller0: entered promiscuous mode [ 621.179754][T21573] syzkaller0: entered allmulticast mode [ 621.206471][T18632] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.206541][T18632] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.206577][T18632] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.206610][T18632] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 621.210003][T21570] 1·: renamed from c0· (while UP) [ 621.214798][T21570] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 621.372084][T21579] netlink: 'syz.2.4481': attribute type 10 has an invalid length. [ 621.375456][T21579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 621.387531][T21579] team0: Port device netdevsim1 added [ 621.399798][T21579] netlink: 'syz.2.4481': attribute type 10 has an invalid length. [ 621.431419][T21579] team0: Port device netdevsim1 removed [ 621.435153][T21581] netlink: Unknown NAT attribute (type=2480, max=9) [ 621.435184][T21581] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 621.442545][T21579] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 621.754590][T21594] erspan1: entered allmulticast mode [ 621.821558][T21597] x_tables: duplicate underflow at hook 1 [ 621.849956][T21594] syz.2.4487 (21594) used obsolete PPPIOCDETACH ioctl [ 622.075515][T21602] FAULT_INJECTION: forcing a failure. [ 622.075515][T21602] name failslab, interval 1, probability 0, space 0, times 0 [ 622.075548][T21602] CPU: 1 UID: 0 PID: 21602 Comm: syz.0.4490 Not tainted syzkaller #0 PREEMPT(full) [ 622.075571][T21602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.075584][T21602] Call Trace: [ 622.075592][T21602] [ 622.075601][T21602] dump_stack_lvl+0xe8/0x150 [ 622.075637][T21602] should_fail_ex+0x410/0x560 [ 622.075666][T21602] should_failslab+0xa8/0x100 [ 622.075693][T21602] __kmalloc_noprof+0xfe/0x720 [ 622.075714][T21602] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 622.075739][T21602] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 622.075770][T21602] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 622.075801][T21602] genl_family_rcv_msg_doit+0xda/0x340 [ 622.075831][T21602] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 622.075862][T21602] ? apparmor_capable+0x126/0x170 [ 622.075893][T21602] ? bpf_lsm_capable+0x9/0x20 [ 622.075912][T21602] ? security_capable+0x7e/0x2c0 [ 622.075941][T21602] genl_rcv_msg+0x614/0x7a0 [ 622.075969][T21602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 622.075990][T21602] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 622.076014][T21602] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 622.076037][T21602] ? __pfx_nl80211_post_doit+0x10/0x10 [ 622.076075][T21602] netlink_rcv_skb+0x226/0x4a0 [ 622.076104][T21602] ? __pfx_genl_rcv_msg+0x10/0x10 [ 622.076129][T21602] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 622.076174][T21602] ? down_read+0x2be/0x330 [ 622.076203][T21602] genl_rcv+0x28/0x40 [ 622.076223][T21602] netlink_unicast+0x7bd/0x940 [ 622.076267][T21602] netlink_sendmsg+0x813/0xb40 [ 622.076306][T21602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.076342][T21602] ? apparmor_socket_sendmsg+0x98/0x360 [ 622.076366][T21602] ? __pfx_netlink_sendmsg+0x10/0x10 [ 622.076395][T21602] sock_sendmsg_nosec+0x13a/0x180 [ 622.076430][T21602] ____sys_sendmsg+0x54e/0x850 [ 622.076461][T21602] ? __pfx_____sys_sendmsg+0x10/0x10 [ 622.076495][T21602] ? import_iovec+0x73/0xa0 [ 622.076524][T21602] ___sys_sendmsg+0x2a5/0x360 [ 622.076547][T21602] ? __lock_acquire+0x747/0x2de0 [ 622.076573][T21602] ? __pfx____sys_sendmsg+0x10/0x10 [ 622.076633][T21602] ? __fget_files+0x2a/0x420 [ 622.076661][T21602] ? __fget_files+0x3a2/0x420 [ 622.076699][T21602] __x64_sys_sendmsg+0x1b1/0x290 [ 622.076728][T21602] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 622.076829][T21602] do_syscall_64+0x166/0x520 [ 622.076854][T21602] ? trace_irq_disable+0x3b/0x140 [ 622.076877][T21602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.076902][T21602] ? clear_bhb_loop+0x70/0xc0 [ 622.076930][T21602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.076954][T21602] RIP: 0033:0x7f82a299e159 [ 622.076975][T21602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 622.076996][T21602] RSP: 002b:00007f82a37a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 622.077022][T21602] RAX: ffffffffffffffda RBX: 00007f82a2c25fa0 RCX: 00007f82a299e159 [ 622.077039][T21602] RDX: 000000000000c800 RSI: 00002000000007c0 RDI: 0000000000000004 [ 622.077054][T21602] RBP: 00007f82a37a8090 R08: 0000000000000000 R09: 0000000000000000 [ 622.077068][T21602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.077082][T21602] R13: 00007f82a2c26038 R14: 00007f82a2c25fa0 R15: 00007fff8a6f5d58 [ 622.077118][T21602] [ 622.540243][T21615] __nla_validate_parse: 37 callbacks suppressed [ 622.540274][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4495'. [ 622.540296][T21615] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4495'. [ 622.574333][T21616] FAULT_INJECTION: forcing a failure. [ 622.574333][T21616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 622.574364][T21616] CPU: 1 UID: 0 PID: 21616 Comm: syz.1.4493 Not tainted syzkaller #0 PREEMPT(full) [ 622.574386][T21616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 622.574399][T21616] Call Trace: [ 622.574407][T21616] [ 622.574416][T21616] dump_stack_lvl+0xe8/0x150 [ 622.574449][T21616] should_fail_ex+0x410/0x560 [ 622.574477][T21616] _copy_to_user+0x31/0xb0 [ 622.574510][T21616] simple_read_from_buffer+0xe1/0x170 [ 622.574544][T21616] proc_fail_nth_read+0x1bb/0x230 [ 622.574574][T21616] ? common_file_perm+0x20e/0x2b0 [ 622.574601][T21616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.574636][T21616] ? rw_verify_area+0x24a/0x4c0 [ 622.574666][T21616] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 622.574697][T21616] vfs_read+0x213/0xa80 [ 622.574732][T21616] ? __pfx___mutex_lock+0x10/0x10 [ 622.574755][T21616] ? __pfx_vfs_read+0x10/0x10 [ 622.574786][T21616] ? __fget_files+0x2a/0x420 [ 622.574818][T21616] ? __fget_files+0x3a2/0x420 [ 622.574844][T21616] ? __fget_files+0x2a/0x420 [ 622.574880][T21616] ksys_read+0x150/0x270 [ 622.574911][T21616] ? __pfx_ksys_read+0x10/0x10 [ 622.574952][T21616] do_syscall_64+0x166/0x520 [ 622.574973][T21616] ? trace_irq_disable+0x3b/0x140 [ 622.574993][T21616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.575014][T21616] ? clear_bhb_loop+0x70/0xc0 [ 622.575039][T21616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 622.575059][T21616] RIP: 0033:0x7f1f8b55e98e [ 622.575078][T21616] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 622.575095][T21616] RSP: 002b:00007f1f8c41cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 622.575117][T21616] RAX: ffffffffffffffda RBX: 00007f1f8c41d6c0 RCX: 00007f1f8b55e98e [ 622.575131][T21616] RDX: 000000000000000f RSI: 00007f1f8c41d0a0 RDI: 0000000000000004 [ 622.575144][T21616] RBP: 00007f1f8c41d090 R08: 0000000000000000 R09: 0000000000000000 [ 622.575157][T21616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 622.575169][T21616] R13: 00007f1f8b826128 R14: 00007f1f8b826090 R15: 00007fffaba99188 [ 622.575202][T21616] [ 622.942454][T21622] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4497'. [ 623.859702][T21667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4512'. [ 623.908196][T21670] syzkaller0: left promiscuous mode [ 623.908218][T21670] syzkaller0: left allmulticast mode [ 623.982516][T21676] IPVS: set_ctl: invalid protocol: 94 255.255.255.255:20004 [ 623.987508][T21676] lo: entered allmulticast mode [ 624.011548][T21675] lo: left allmulticast mode [ 624.431336][T21683] lo speed is unknown, defaulting to 1000 [ 624.527557][T21704] netlink: 'syz.2.4524': attribute type 1 has an invalid length. [ 624.581818][T21710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4524'. [ 624.612455][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4520'. [ 624.612477][T21711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4520'. [ 624.679306][T21714] netlink: 'syz.3.4520': attribute type 4 has an invalid length. [ 624.679331][T21714] netlink: 152 bytes leftover after parsing attributes in process `syz.3.4520'. [ 624.845092][T21710] bond5: (slave bridge2): making interface the new active one [ 624.845702][T21710] bond5: (slave bridge2): Enslaving as an active interface with an up link [ 624.880240][T21718] netlink: 'syz.1.4526': attribute type 4 has an invalid length. [ 625.421199][T21740] netlink: 'syz.1.4535': attribute type 10 has an invalid length. [ 625.424898][T21740] netlink: 'syz.1.4535': attribute type 10 has an invalid length. [ 625.622218][T21744] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4539'. [ 625.622323][T21744] 0·: renamed from c1· [ 625.642727][T21744] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 625.642752][T21744] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 625.642838][T21744] 0·: entered allmulticast mode [ 625.642854][T21744] hsr_slave_0: entered allmulticast mode [ 625.642870][T21744] hsr_slave_1: entered allmulticast mode [ 625.679314][T21744] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 625.704550][T21748] x_tables: duplicate underflow at hook 1 [ 626.350315][T21782] nbd: couldn't find a device at index 0 [ 626.376238][ T4933] Bluetooth: hci4: command 0x0406 tx timeout [ 626.542882][T21780] bond6: entered promiscuous mode [ 626.543429][T21780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 626.645167][T21790] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4555'. [ 626.764509][T21799] lo speed is unknown, defaulting to 1000 [ 626.904540][T21806] xt_hashlimit: size too large, truncated to 1048576 [ 627.048768][T21803] 0·: renamed from c1· [ 627.056011][T21803] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 627.056039][T21803] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 627.062147][T21803] 0·: entered allmulticast mode [ 627.062193][T21803] hsr_slave_0: entered allmulticast mode [ 627.092749][T21803] hsr_slave_1: entered allmulticast mode [ 627.101230][T21803] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 627.309854][T21812] 1·: left allmulticast mode [ 627.309877][T21812] hsr_slave_0: left allmulticast mode [ 627.309912][T21812] hsr_slave_1: left allmulticast mode [ 627.383818][T21812] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 627.473262][T21818] FAULT_INJECTION: forcing a failure. [ 627.473262][T21818] name failslab, interval 1, probability 0, space 0, times 0 [ 627.475508][T21818] CPU: 0 UID: 0 PID: 21818 Comm: syz.4.4565 Not tainted syzkaller #0 PREEMPT(full) [ 627.475545][T21818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 627.475561][T21818] Call Trace: [ 627.475569][T21818] [ 627.475579][T21818] dump_stack_lvl+0xe8/0x150 [ 627.475612][T21818] should_fail_ex+0x410/0x560 [ 627.475638][T21818] ? __alloc_skb+0x1db/0x7a0 [ 627.475660][T21818] should_failslab+0xa8/0x100 [ 627.475686][T21818] ? __alloc_skb+0x1db/0x7a0 [ 627.475706][T21818] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 627.475737][T21818] ? __alloc_skb+0x18d/0x7a0 [ 627.475759][T21818] ? __alloc_skb+0x1db/0x7a0 [ 627.475787][T21818] __alloc_skb+0x1db/0x7a0 [ 627.475813][T21818] netlink_ack+0x136/0xb30 [ 627.475839][T21818] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 627.475867][T21818] ? ref_tracker_free+0x689/0x830 [ 627.475894][T21818] ? __pfx_ref_tracker_free+0x10/0x10 [ 627.475927][T21818] netlink_rcv_skb+0x2a4/0x4a0 [ 627.475957][T21818] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 627.475982][T21818] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 627.476021][T21818] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.476050][T21818] ? netlink_deliver_tap+0x2e/0x1b0 [ 627.476083][T21818] netlink_unicast+0x7bd/0x940 [ 627.476119][T21818] netlink_sendmsg+0x813/0xb40 [ 627.476168][T21818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.476204][T21818] ? apparmor_socket_sendmsg+0x98/0x360 [ 627.476229][T21818] ? __pfx_netlink_sendmsg+0x10/0x10 [ 627.476256][T21818] sock_sendmsg_nosec+0x13a/0x180 [ 627.476290][T21818] ____sys_sendmsg+0x54e/0x850 [ 627.476320][T21818] ? __pfx_____sys_sendmsg+0x10/0x10 [ 627.476354][T21818] ? import_iovec+0x73/0xa0 [ 627.476419][T21818] ___sys_sendmsg+0x2a5/0x360 [ 627.476444][T21818] ? __lock_acquire+0x747/0x2de0 [ 627.476467][T21818] ? __pfx____sys_sendmsg+0x10/0x10 [ 627.476526][T21818] ? __fget_files+0x2a/0x420 [ 627.476553][T21818] ? __fget_files+0x3a2/0x420 [ 627.476590][T21818] __x64_sys_sendmsg+0x1b1/0x290 [ 627.476619][T21818] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 627.476666][T21818] do_syscall_64+0x166/0x520 [ 627.476688][T21818] ? trace_irq_disable+0x3b/0x140 [ 627.476708][T21818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.476729][T21818] ? clear_bhb_loop+0x70/0xc0 [ 627.476754][T21818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.476774][T21818] RIP: 0033:0x7f50e159e159 [ 627.476793][T21818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 627.476811][T21818] RSP: 002b:00007f50df7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 627.476833][T21818] RAX: ffffffffffffffda RBX: 00007f50e1825fa0 RCX: 00007f50e159e159 [ 627.476847][T21818] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 627.476867][T21818] RBP: 00007f50df7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 627.476880][T21818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.476891][T21818] R13: 00007f50e1826038 R14: 00007f50e1825fa0 R15: 00007fffe988d908 [ 627.476921][T21818] [ 627.498914][T18628] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.499093][T18628] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.499207][T18628] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.499318][T18628] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.565288][T21820] lo: entered allmulticast mode [ 627.976627][T21819] lo: left allmulticast mode [ 627.978749][T21823] syzkaller1: entered promiscuous mode [ 627.978771][T21823] syzkaller1: entered allmulticast mode [ 628.052323][T21830] __nla_validate_parse: 3 callbacks suppressed [ 628.052344][T21830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4571'. [ 628.106268][T21834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4572'. [ 628.172821][T21837] --map-set only usable from mangle table [ 628.194418][T21832] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4570'. [ 628.194525][T21832] 0·: renamed from c1· [ 628.213244][T21832] 0·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 628.213269][T21832] 0·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 628.226356][T21832] 0·: entered allmulticast mode [ 628.226437][T21832] hsr_slave_0: entered allmulticast mode [ 628.226486][T21832] hsr_slave_1: entered allmulticast mode [ 628.244598][T21832] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 628.279664][T21839] lo: entered allmulticast mode [ 628.280568][T21838] lo: left allmulticast mode [ 628.454906][T21844] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4575'. [ 628.557088][T21863] netlink: 'syz.4.4581': attribute type 10 has an invalid length. [ 628.599980][T21863] .`: (slave netdevsim1): Releasing backup interface [ 628.614783][T21863] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 628.614950][T21863] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 628.634835][T21865] netlink: 'syz.4.4581': attribute type 10 has an invalid length. [ 628.645824][T21863] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.655047][T21863] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 628.655343][T21863] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 628.672220][T21863] team0: Port device netdevsim1 added [ 628.714129][T21865] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 628.714298][T21865] netdevsim netdevsim4 netdevsim1: left allmulticast mode [ 628.740109][T21865] team0: Port device netdevsim1 removed [ 628.753163][T21865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 628.755013][T21865] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 628.755283][T21865] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 628.780469][T21865] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 628.846631][T21871] x_tables: duplicate underflow at hook 1 [ 628.903811][T21875] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4587'. [ 628.904512][T21875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4587'. [ 628.904535][T21875] netlink: 59 bytes leftover after parsing attributes in process `syz.2.4587'. [ 628.957057][T21877] netlink: 180 bytes leftover after parsing attributes in process `syz.0.4586'. [ 629.121541][T21886] ovs-system: entered promiscuous mode [ 629.648287][T21911] sit1: entered promiscuous mode [ 629.681934][T21913] syzkaller0: left promiscuous mode [ 629.681957][T21913] syzkaller0: left allmulticast mode [ 629.752015][T21915] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4604'. [ 629.850840][T21920] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4607'. [ 630.034103][T21925] macsec1: entered allmulticast mode [ 630.034127][T21925] veth1_macvtap: entered allmulticast mode [ 630.068669][T21925] veth1_macvtap (unregistering): left allmulticast mode [ 630.372121][T21937] bond3: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 630.404505][T21937] bond3 (unregistering): Released all slaves [ 630.824328][T21965] ip_tables: iptables: counters copy to user failed while replacing table [ 631.424038][T21995] lo speed is unknown, defaulting to 1000 [ 631.508253][T22005] nbd: couldn't find a device at index 0 [ 632.195862][T22040] block nbd4: not configured, cannot reconfigure [ 632.235736][T22035] pim6reg: entered allmulticast mode [ 632.248602][T22034] pim6reg: left allmulticast mode [ 632.440995][T22045] 0·: renamed from c1· (while UP) [ 632.451876][T22045] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 632.485454][T22054] netlink: 'syz.0.4651': attribute type 10 has an invalid length. [ 632.500148][T22054] .`: (slave netdevsim1): Releasing backup interface [ 632.524312][T22054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.538113][T22054] team0: Port device netdevsim1 added [ 632.539644][T22057] netlink: 'syz.0.4651': attribute type 10 has an invalid length. [ 632.586686][T22057] team0: Port device netdevsim1 removed [ 632.591275][T22057] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 632.593710][T22057] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 632.644718][T22058] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 632.814215][T22068] vlan2: entered promiscuous mode [ 632.814238][T22068] syz_tun: entered promiscuous mode [ 633.459379][T22100] __nla_validate_parse: 9 callbacks suppressed [ 633.459395][T22100] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4673'. [ 633.536355][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4673'. [ 633.789864][T22107] bond3: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 633.791806][T22107] bond3 (unregistering): Released all slaves [ 634.254511][T22139] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4683'. [ 634.290546][T22137] netlink: 9 bytes leftover after parsing attributes in process `syz.1.4684'. [ 634.290656][T22137] 1·: renamed from c0· (while UP) [ 634.296119][T22137] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 634.429312][T11590] lo speed is unknown, defaulting to 1000 [ 634.429339][T11590] syz0: Port: 1 Link ACTIVE [ 634.502931][T22153] netlink: 'syz.1.4688': attribute type 1 has an invalid length. [ 634.502958][T22153] NCSI netlink: No device for ifindex 0 [ 634.908460][T22169] xt_hashlimit: size too large, truncated to 1048576 [ 634.974570][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4696'. [ 635.350551][T22184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4699'. [ 635.350576][T22184] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4699'. [ 635.554102][T22197] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4704'. [ 635.570891][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4705'. [ 635.722643][T22208] ipvlan0: left promiscuous mode [ 635.722722][T22208] ipvlan0: left allmulticast mode [ 635.723137][T22208] netlink: 112 bytes leftover after parsing attributes in process `syz.4.4706'. [ 636.029401][T22221] lo: entered allmulticast mode [ 636.030966][T22218] lo: left allmulticast mode [ 636.170645][T22229] netlink: 'syz.3.4716': attribute type 1 has an invalid length. [ 636.268492][T22229] 8021q: adding VLAN 0 to HW filter on device bond3 [ 636.275601][T22239] bond2: (slave veth0_to_bond): Releasing active interface [ 636.322741][T22229] netlink: 'syz.3.4716': attribute type 1 has an invalid length. [ 636.349272][T22239] bond3: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 636.389185][T22242] ip6gretap0: entered promiscuous mode [ 636.389974][T22242] macsec1: entered allmulticast mode [ 636.389992][T22242] ip6gretap0: entered allmulticast mode [ 636.410099][T22242] ip6gretap0: left allmulticast mode [ 636.410170][T22242] ip6gretap0: left promiscuous mode [ 636.472639][T22239] macvlan2: entered promiscuous mode [ 636.472764][T22239] macvlan2: entered allmulticast mode [ 636.473436][T22239] bond3: entered promiscuous mode [ 636.474252][T22239] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 636.475075][T22239] bond3: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 636.475260][T22239] bond3: left promiscuous mode [ 636.665225][T22244] netlink: 'syz.2.4720': attribute type 13 has an invalid length. [ 636.774813][T22254] syzkaller0: entered promiscuous mode [ 636.774837][T22254] syzkaller0: entered allmulticast mode [ 637.032665][T22262] ovs-system: entered promiscuous mode [ 637.209136][T22267] lo speed is unknown, defaulting to 1000 [ 637.260890][T22273] can: request_module (can-proto-4) failed. [ 637.547113][T22290] 1·: renamed from c0· (while UP) [ 637.555538][T22290] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 637.852221][T22303] vlan0: entered promiscuous mode [ 637.922822][T22306] syzkaller0: entered promiscuous mode [ 637.922843][T22306] syzkaller0: entered allmulticast mode [ 638.249467][T22322] bond1: option mode: unable to set because the bond device has slaves [ 638.251497][T22322] bond0: left promiscuous mode [ 638.251691][T22322] bond0: left allmulticast mode [ 638.285827][T22322] netlink: 'syz.4.4747': attribute type 4 has an invalid length. [ 638.314631][T18628] bond1: (slave .`): link status definitely down, disabling slave [ 638.314850][T18628] bond1: (slave bond0): link status definitely down, disabling slave [ 638.343247][T18628] bond1: now running without any active interface! [ 638.438797][T22340] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 638.506081][T18628] nci: nci_ntf_packet: unsupported ntf opcode 0xf0b [ 638.852352][T22347] syzkaller0: entered promiscuous mode [ 638.852374][T22347] syzkaller0: entered allmulticast mode [ 639.047050][T22352] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 639.216300][T22328] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.528566][T22369] netlink: 'syz.4.4762': attribute type 11 has an invalid length. [ 639.528593][T22369] netlink: 'syz.4.4762': attribute type 4 has an invalid length. [ 639.528609][T22369] __nla_validate_parse: 10 callbacks suppressed [ 639.528623][T22369] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4762'. [ 640.108701][T22378] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4766'. [ 640.474479][T22392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4773'. [ 640.572552][T22391] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4773'. [ 640.628741][T22400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4774'. [ 640.645972][T22401] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 640.843337][T22403] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.4776'. [ 640.843399][T22403] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.4776'. [ 640.880869][T22405] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.4776'. [ 640.880924][T22405] netlink: 4356 bytes leftover after parsing attributes in process `syz.0.4776'. [ 640.928832][T22410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4777'. [ 641.071015][T22414] syzkaller0: entered promiscuous mode [ 641.071039][T22414] syzkaller0: entered allmulticast mode [ 641.183995][T22420] netlink: 'syz.4.4782': attribute type 46 has an invalid length. [ 641.371380][T22431] lo: entered allmulticast mode [ 641.372528][T22430] lo: left allmulticast mode [ 641.885755][T22457] --map-set only usable from mangle table [ 642.084402][T22467] netlink: 'syz.0.4799': attribute type 21 has an invalid length. [ 642.100367][T22467] netlink: 'syz.0.4799': attribute type 4 has an invalid length. [ 642.100386][T22467] netlink: 'syz.0.4799': attribute type 5 has an invalid length. [ 642.149477][T22464] syzkaller0: entered promiscuous mode [ 642.149498][T22464] syzkaller0: entered allmulticast mode [ 642.521438][T22477] 0·: renamed from c1· (while UP) [ 642.528506][T22477] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 642.967168][T22502] x_tables: duplicate underflow at hook 1 [ 643.404164][T22515] netlink: 'syz.2.4820': attribute type 1 has an invalid length. [ 643.464048][T22521] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 643.548317][T22521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 643.588818][T22525] bond3: (slave veth0_to_bond): Releasing active interface [ 643.614130][T22521] netlink: 'syz.3.4822': attribute type 1 has an invalid length. [ 643.629711][T22525] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 643.654604][T22521] macvlan2: entered promiscuous mode [ 643.654625][T22521] macvlan2: entered allmulticast mode [ 643.655129][T22521] bond4: entered promiscuous mode [ 643.667397][T22521] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 643.669789][T22521] bond4: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 643.673335][T22521] bond4: left promiscuous mode [ 643.710370][T22529] syzkaller0: entered promiscuous mode [ 643.710389][T22529] syzkaller0: entered allmulticast mode [ 643.986595][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 643.996054][T22542] 8021q: adding VLAN 0 to HW filter on device .` [ 644.001413][T22542] 8021q: adding VLAN 0 to HW filter on device team0 [ 644.030069][T18627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.030294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.033449][T18627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.035527][T18627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.035696][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.094610][T22542] veth1_vlan: left promiscuous mode [ 644.095782][T22542] veth0_vlan: left promiscuous mode [ 644.099891][T22542] veth0_vlan: entered promiscuous mode [ 644.104922][T22542] veth1_vlan: entered promiscuous mode [ 644.119610][T22542] veth1_macvtap: left promiscuous mode [ 644.120776][T22542] veth0_macvtap: left promiscuous mode [ 644.121987][T22542] veth0_macvtap: entered promiscuous mode [ 644.123181][T22542] veth1_macvtap: entered promiscuous mode [ 644.153407][T22542] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 644.154654][T22542] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 644.155873][T22542] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 644.164823][T22542] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 644.189326][T22542] 8021q: adding VLAN 0 to HW filter on device bond1 [ 644.231130][T22542] 8021q: adding VLAN 0 to HW filter on device bond0 [ 644.251107][T22542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 644.253974][T22542] A link change request failed with some changes committed already. Interface syzkallerB may have been left with an inconsistent configuration, please check. [ 644.305586][T18628] bridge0: port 1(bridge_slave_0) entered blocking state [ 644.305698][T18628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 644.324893][T18628] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.324995][T18628] bridge0: port 2(bridge_slave_1) entered forwarding state [ 644.433107][T22555] syzkaller1: entered promiscuous mode [ 644.433123][T22555] syzkaller1: entered allmulticast mode [ 644.527188][ T8212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.538627][T18627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.573852][ T8212] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.612534][T18627] bond4: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 644.612816][T18627] bond4: (slave veth0_to_bond): making interface the new active one [ 644.650938][T18627] bond4: active interface up! [ 644.655090][T18632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 644.676697][T18630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.677391][T18630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.690421][T18630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 644.802253][T22568] syzkaller0: entered promiscuous mode [ 644.802278][T22568] syzkaller0: entered allmulticast mode [ 644.887987][T22572] __nla_validate_parse: 9 callbacks suppressed [ 644.888007][T22572] netlink: 9 bytes leftover after parsing attributes in process `syz.3.4837'. [ 644.888205][T22572] 1·: renamed from c0· (while UP) [ 645.301800][T22590] xt_connbytes: Forcing CT accounting to be enabled [ 645.306219][T22590] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 645.984123][T22618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4853'. [ 646.059718][T22622] netlink: 144 bytes leftover after parsing attributes in process `syz.4.4854'. [ 646.124221][T22620] syzkaller0: entered promiscuous mode [ 646.124245][T22620] syzkaller0: entered allmulticast mode [ 646.303459][T22635] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4859'. [ 646.533248][T22646] vcan0: entered promiscuous mode [ 647.507865][T22678] smc: net device vlan1 applied user defined pnetid SYZ2 [ 647.782265][T22689] x_tables: duplicate underflow at hook 1 [ 647.824315][T22693] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4877'. [ 648.006248][T22701] lo speed is unknown, defaulting to 1000 [ 648.491671][T22705] vcan0: left promiscuous mode [ 648.492565][T22705] 0·: left allmulticast mode [ 648.492597][T22705] hsr_slave_0: left allmulticast mode [ 648.492613][T22705] hsr_slave_1: left allmulticast mode [ 648.542167][ T2210] lo speed is unknown, defaulting to 1000 [ 648.542188][ T2210] syz0: Port: 1 Link DOWN [ 648.680067][T22714] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4887'. [ 648.712422][T22714] 0·: renamed from c1· (while UP) [ 649.051527][T22735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4890'. [ 649.251964][T18628] net_ratelimit: 12 callbacks suppressed [ 649.251985][T18628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.263052][T18626] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.263262][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.333389][T22734] lo speed is unknown, defaulting to 1000 [ 649.333455][T22734] lo speed is unknown, defaulting to 1000 [ 649.334129][T22734] lo speed is unknown, defaulting to 1000 [ 649.351810][T22734] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 649.351903][T22734] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 649.353717][T22734] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 649.413553][T22734] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 649.494348][T22751] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4898'. [ 649.528405][T22751] vlan2: entered promiscuous mode [ 649.636555][T22734] lo speed is unknown, defaulting to 1000 [ 649.639925][T22734] lo speed is unknown, defaulting to 1000 [ 649.641720][T22734] lo speed is unknown, defaulting to 1000 [ 649.688936][T22734] lo speed is unknown, defaulting to 1000 [ 649.706508][T22734] lo speed is unknown, defaulting to 1000 [ 649.739462][T22734] lo speed is unknown, defaulting to 1000 [ 649.745241][T22734] lo speed is unknown, defaulting to 1000 [ 649.764533][T22756] netlink: 'syz.3.4901': attribute type 2 has an invalid length. [ 649.764572][T22756] netlink: 'syz.3.4901': attribute type 2 has an invalid length. [ 649.860673][T22758] syzkaller0: left promiscuous mode [ 649.860698][T22758] syzkaller0: left allmulticast mode [ 649.894022][T18627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.894205][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 649.966972][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.143014][T22773] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4905'. [ 650.173451][T22778] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 650.298341][T22785] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 650.365803][T22788] lo speed is unknown, defaulting to 1000 [ 650.374600][T22788] lo speed is unknown, defaulting to 1000 [ 650.446724][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 650.655670][T22800] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4915'. [ 650.655778][T22800] 1·: renamed from c0· [ 650.673123][T22800] 1·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 650.673146][T22800] 1·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 650.673264][T22800] 1·: entered allmulticast mode [ 650.673279][T22800] hsr_slave_0: entered allmulticast mode [ 650.673295][T22800] hsr_slave_1: entered allmulticast mode [ 650.674577][T22800] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 651.381874][T22809] x_tables: duplicate underflow at hook 1 [ 651.454849][T22811] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4920'. [ 651.494636][T22811] 8021q: adding VLAN 0 to HW filter on device bond3 [ 651.499838][T22811] bond2: (slave bond3): Enslaving as an active interface with an up link [ 651.507224][T22811] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4920'. [ 651.514108][T22811] 8021q: adding VLAN 0 to HW filter on device bond2 [ 651.648009][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.648227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 652.491558][T22819] xt_hashlimit: size too large, truncated to 1048576 [ 652.548165][T22821] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4923'. [ 653.094696][T22779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 653.320065][T22841] netlink: 'syz.2.4929': attribute type 1 has an invalid length. [ 653.344721][T22840] block nbd3: not configured, cannot reconfigure [ 653.396886][T22841] 8021q: adding VLAN 0 to HW filter on device bond8 [ 653.405681][T22843] bond0: (slave veth0_to_bond): Releasing active interface [ 653.426867][T22839] netlink: 'syz.0.4928': attribute type 1 has an invalid length. [ 653.445195][T22843] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 653.478406][T22841] netlink: 'syz.2.4929': attribute type 1 has an invalid length. [ 653.517433][T22841] macvlan2: entered promiscuous mode [ 653.517466][T22841] macvlan2: entered allmulticast mode [ 653.520500][T22841] bond8: entered promiscuous mode [ 653.521344][T22841] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 653.523017][T22841] bond8: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 653.524593][T22841] bond8: left promiscuous mode [ 653.686579][T22853] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 653.714248][T22855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4937'. [ 653.714275][T22855] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4937'. [ 653.814477][T22857] x_tables: duplicate underflow at hook 2 [ 653.814676][T22857] x_tables: duplicate underflow at hook 1 [ 653.839532][T22861] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4939'. [ 653.839567][T22861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4939'. [ 653.929565][T22864] netlink: 60 bytes leftover after parsing attributes in process `syz.3.4941'. [ 653.970568][T22868] lo: entered allmulticast mode [ 653.972990][T22866] lo: left allmulticast mode [ 654.350456][T22879] syzkaller0: entered promiscuous mode [ 654.350481][T22879] syzkaller0: entered allmulticast mode [ 654.368745][T18627] net_ratelimit: 1 callbacks suppressed [ 654.368795][T18627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 654.564776][T22890] x_tables: duplicate underflow at hook 1 [ 654.666639][T22895] block nbd4: not configured, cannot reconfigure [ 654.845993][T22902] FAULT_INJECTION: forcing a failure. [ 654.845993][T22902] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 654.846026][T22902] CPU: 0 UID: 0 PID: 22902 Comm: syz.1.4954 Not tainted syzkaller #0 PREEMPT(full) [ 654.846051][T22902] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 654.846064][T22902] Call Trace: [ 654.846073][T22902] [ 654.846082][T22902] dump_stack_lvl+0xe8/0x150 [ 654.846117][T22902] should_fail_ex+0x410/0x560 [ 654.846149][T22902] _copy_from_user+0x2d/0xb0 [ 654.846177][T22902] ___sys_sendmsg+0x1c6/0x360 [ 654.846204][T22902] ? __lock_acquire+0x747/0x2de0 [ 654.846230][T22902] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.846263][T22902] ? kstrtouint+0x6e/0xe0 [ 654.846321][T22902] ? __fget_files+0x2a/0x420 [ 654.846349][T22902] ? __fget_files+0x3a2/0x420 [ 654.846388][T22902] __sys_sendmmsg+0x273/0x4d0 [ 654.846421][T22902] ? __pfx___sys_sendmmsg+0x10/0x10 [ 654.846458][T22902] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 654.846504][T22902] ? ksys_write+0x242/0x270 [ 654.846538][T22902] ? __pfx_ksys_write+0x10/0x10 [ 654.846576][T22902] __x64_sys_sendmmsg+0xa0/0xc0 [ 654.846605][T22902] do_syscall_64+0x166/0x520 [ 654.846627][T22902] ? trace_irq_disable+0x3b/0x140 [ 654.846647][T22902] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.846670][T22902] ? clear_bhb_loop+0x70/0xc0 [ 654.846696][T22902] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.846717][T22902] RIP: 0033:0x7f1f8b59e159 [ 654.846736][T22902] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.846754][T22902] RSP: 002b:00007f1f8c43e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 654.846778][T22902] RAX: ffffffffffffffda RBX: 00007f1f8b825fa0 RCX: 00007f1f8b59e159 [ 654.846794][T22902] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 654.846808][T22902] RBP: 00007f1f8c43e090 R08: 0000000000000000 R09: 0000000000000000 [ 654.846822][T22902] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.846835][T22902] R13: 00007f1f8b826038 R14: 00007f1f8b825fa0 R15: 00007fffaba99188 [ 654.846868][T22902] [ 655.016033][T18627] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.016314][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.017946][T18628] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.018147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 655.190592][T22912] __nla_validate_parse: 5 callbacks suppressed [ 655.190612][T22912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4958'. [ 655.192870][T22912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4958'. [ 655.560374][T22933] xt_hashlimit: size too large, truncated to 1048576 [ 655.660069][T22941] netlink: 'syz.4.4964': attribute type 64 has an invalid length. [ 655.766877][T22946] netlink: 240 bytes leftover after parsing attributes in process `syz.1.4967'. [ 655.949606][T22955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4969'. [ 655.949803][T22955] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4969'. [ 655.949824][T22955] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4969'. [ 656.070283][T22957] x_tables: duplicate underflow at hook 1 [ 656.261526][T22963] x_tables: duplicate underflow at hook 1 [ 656.337047][T22965] netlink: 'syz.4.4973': attribute type 5 has an invalid length. [ 656.379199][T22965] netlink: 84 bytes leftover after parsing attributes in process `syz.4.4973'. [ 656.385663][T22965] siw: device registration error -23 [ 656.414288][T22967] lo: entered promiscuous mode [ 656.414308][T22967] lo: entered allmulticast mode [ 656.428457][T22967] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4974'. [ 656.428480][T22967] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 656.465254][T22970] syzkaller0: entered promiscuous mode [ 656.465275][T22970] syzkaller0: entered allmulticast mode [ 656.551550][T22975] sock: sock_set_timeout: `syz.4.4977' (pid 22975) tries to set negative timeout [ 656.555444][T22975] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 656.555831][T22976] openvswitch: netlink: Mixed IPv4 and IPv6 tunnel attributes [ 656.868040][T22984] netlink: 'syz.4.4980': attribute type 30 has an invalid length. [ 656.989787][T22984] netlink: 'syz.4.4980': attribute type 30 has an invalid length. [ 657.078840][T23001] ip_tables: iptables: counters copy to user failed while replacing table [ 657.094619][T22905] Bluetooth: hci0: command 0x0406 tx timeout [ 657.162930][T23008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4988'. [ 657.162954][T23008] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4988'. [ 657.452193][T23019] syzkaller0: entered promiscuous mode [ 657.452234][T23019] syzkaller0: entered allmulticast mode [ 657.955053][T23051] bond1: option mode: unable to set because the bond device has slaves [ 657.964527][T23051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 657.973898][T23051] bond1: (slave bond0): Enslaving as an active interface with an up link [ 657.981894][T23051] netlink: 'syz.1.4999': attribute type 4 has an invalid length. [ 658.329325][T23060] FAULT_INJECTION: forcing a failure. [ 658.329325][T23060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 658.329357][T23060] CPU: 0 UID: 0 PID: 23060 Comm: syz.0.5006 Not tainted syzkaller #0 PREEMPT(full) [ 658.329380][T23060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 658.329392][T23060] Call Trace: [ 658.329401][T23060] [ 658.329409][T23060] dump_stack_lvl+0xe8/0x150 [ 658.329443][T23060] should_fail_ex+0x410/0x560 [ 658.329477][T23060] _copy_from_user+0x2d/0xb0 [ 658.329502][T23060] __copy_msghdr+0x390/0x590 [ 658.329533][T23060] ___sys_sendmsg+0x213/0x360 [ 658.329575][T23060] ? __lock_acquire+0x747/0x2de0 [ 658.329602][T23060] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.329635][T23060] ? kstrtouint+0x6e/0xe0 [ 658.329694][T23060] ? __fget_files+0x2a/0x420 [ 658.329724][T23060] ? __fget_files+0x3a2/0x420 [ 658.329774][T23060] __sys_sendmmsg+0x273/0x4d0 [ 658.329809][T23060] ? __pfx___sys_sendmmsg+0x10/0x10 [ 658.329847][T23060] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 658.329887][T23060] ? ksys_write+0x242/0x270 [ 658.329922][T23060] ? __pfx_ksys_write+0x10/0x10 [ 658.329962][T23060] __x64_sys_sendmmsg+0xa0/0xc0 [ 658.329992][T23060] do_syscall_64+0x166/0x520 [ 658.330014][T23060] ? trace_irq_disable+0x3b/0x140 [ 658.330035][T23060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.330058][T23060] ? clear_bhb_loop+0x70/0xc0 [ 658.330084][T23060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.330106][T23060] RIP: 0033:0x7f82a299e159 [ 658.330126][T23060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.330145][T23060] RSP: 002b:00007f82a37a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 658.330169][T23060] RAX: ffffffffffffffda RBX: 00007f82a2c25fa0 RCX: 00007f82a299e159 [ 658.330185][T23060] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 658.330199][T23060] RBP: 00007f82a37a8090 R08: 0000000000000000 R09: 0000000000000000 [ 658.330213][T23060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.330227][T23060] R13: 00007f82a2c26038 R14: 00007f82a2c25fa0 R15: 00007fff8a6f5d58 [ 658.330260][T23060] [ 658.395634][T23063] ovs-s: entered promiscuous mode [ 658.714659][T23070] 0·: renamed from c1· (while UP) [ 658.949448][T23080] syzkaller1: entered promiscuous mode [ 658.949474][T23080] syzkaller1: entered allmulticast mode [ 659.009227][T23086] 1·: renamed from c0· (while UP) [ 659.274698][T18626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 659.274721][T18626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 659.304000][T23099] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 659.628742][T23110] syzkaller1: entered promiscuous mode [ 659.628769][T23110] syzkaller1: entered allmulticast mode [ 660.031358][T23128] bridge0: port 3(veth1_to_bridge) entered blocking state [ 660.031520][T23128] bridge0: port 3(veth1_to_bridge) entered disabled state [ 660.031710][T23128] veth1_to_bridge: entered allmulticast mode [ 660.035376][T23128] veth1_to_bridge: entered promiscuous mode [ 660.035537][T23128] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 660.035945][T23128] bridge0: port 3(veth1_to_bridge) entered blocking state [ 660.036030][T23128] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 660.224114][T23134] __nla_validate_parse: 10 callbacks suppressed [ 660.224137][T23134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5027'. [ 660.277901][T23145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5028'. [ 660.277927][T23145] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5028'. [ 660.484792][T23152] syzkaller0: left promiscuous mode [ 660.484814][T23152] syzkaller0: left allmulticast mode [ 660.641945][T23159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5032'. [ 660.665295][T23159] vlan2: entered promiscuous mode [ 660.791516][T23162] tap0: tun_chr_ioctl cmd 1074025677 [ 660.791607][T23162] tap0: linktype set to 774 [ 661.326386][T23178] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5039'. [ 661.551148][T23186] Bluetooth: hci0: invalid length 0, exp 2 for type 19 [ 662.092866][T23216] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5053'. [ 662.092981][T23216] 0·: renamed from c1· (while UP) [ 662.110560][T23216] net_ratelimit: 2 callbacks suppressed [ 662.110577][T23216] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 662.380249][T23227] netlink: 116 bytes leftover after parsing attributes in process `syz.2.5057'. [ 662.381738][T23227] netlink: 'syz.2.5057': attribute type 3 has an invalid length. [ 662.507676][T23233] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5059'. [ 662.548524][T23231] netlink: 'syz.2.5060': attribute type 1 has an invalid length. [ 662.588513][T23231] 8021q: adding VLAN 0 to HW filter on device bond9 [ 662.623622][T23231] bond8: (slave veth0_to_bond): Releasing active interface [ 662.648210][T23231] bond9: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 662.648291][T23236] lo speed is unknown, defaulting to 1000 [ 662.651150][T23231] netlink: 'syz.2.5060': attribute type 1 has an invalid length. [ 662.685750][T23231] macvlan2: entered promiscuous mode [ 662.685833][T23231] macvlan2: entered allmulticast mode [ 662.698996][T23231] bond9: entered promiscuous mode [ 662.701241][T23231] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 662.703368][T23231] bond9: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 662.705355][T23231] bond9: left promiscuous mode [ 662.756697][T23236] lo speed is unknown, defaulting to 1000 [ 662.948323][T23248] netlink: 9 bytes leftover after parsing attributes in process `syz.3.5064'. [ 662.948443][T23248] 0·: renamed from c1· (while UP) [ 662.954001][T23248] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 663.009594][T23253] bond4: option mode: unable to set because the bond device has slaves [ 663.011740][T23253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5065'. [ 663.013114][T23253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.014886][T23253] bond4: (slave bond0): Enslaving as an active interface with a down link [ 663.024500][T23253] netlink: 'syz.2.5065': attribute type 4 has an invalid length. [ 663.025523][T23252] 0·: renamed from c1· (while UP) [ 663.064157][T23252] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 663.554559][T23277] netlink: 'syz.3.5074': attribute type 1 has an invalid length. [ 664.645368][T23298] 1·: renamed from c0· (while UP) [ 664.673964][T23298] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 664.781424][T23304] 0·: left allmulticast mode [ 664.781449][T23304] hsr_slave_0: left allmulticast mode [ 664.781466][T23304] hsr_slave_1: left allmulticast mode [ 664.965842][T23303] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 664.980330][T23303] bond3 (unregistering): Released all slaves [ 665.023095][T23315] ip6tnl1: entered allmulticast mode [ 665.025261][T18627] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 665.025401][T18627] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 665.058239][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 665.312516][T23329] block nbd3: not configured, cannot reconfigure [ 665.350494][T23330] nbd: couldn't find a device at index 0 [ 665.554553][T23336] ip6t_frag: unknown flags 4 [ 665.687372][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 665.757783][T23345] __nla_validate_parse: 11 callbacks suppressed [ 665.757799][T23345] netlink: 9 bytes leftover after parsing attributes in process `syz.2.5097'. [ 665.757894][T23345] 1·: renamed from c0· (while UP) [ 665.780756][T23345] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 665.817640][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 665.935126][T23347] x_tables: duplicate underflow at hook 2 [ 666.058130][ T5619] Bluetooth: hci2: link tx timeout [ 666.058151][ T5619] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 666.135058][T23365] netlink: 'syz.3.5104': attribute type 9 has an invalid length. [ 666.308961][T23370] syzkaller1: entered promiscuous mode [ 666.308988][T23370] syzkaller1: entered allmulticast mode [ 666.428629][T23376] netlink: 'syz.1.5110': attribute type 1 has an invalid length. [ 666.499843][T23376] 8021q: adding VLAN 0 to HW filter on device bond4 [ 666.559128][T23376] netlink: 'syz.1.5110': attribute type 1 has an invalid length. [ 666.569087][T23377] netlink: 'syz.2.5108': attribute type 21 has an invalid length. [ 666.637137][T23389] bond0: (slave veth0_to_bond): Releasing backup interface [ 666.644544][T23389] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 666.700853][T23384] syzkaller0: entered promiscuous mode [ 666.700875][T23384] syzkaller0: entered allmulticast mode [ 666.862701][T23405] ip_tables: iptables: counters copy to user failed while replacing table [ 667.033470][T23411] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5113'. [ 668.126325][T22905] Bluetooth: hci2: command 0x0406 tx timeout [ 668.768408][T23396] macvlan3: entered promiscuous mode [ 668.768436][T23396] macvlan3: entered allmulticast mode [ 668.769154][T23396] bond4: entered promiscuous mode [ 668.769929][T23396] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 668.770652][T23396] bond4: (slave macvlan3): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 668.771389][T23396] bond4: left promiscuous mode [ 668.816291][T23411] 1·: renamed from c0· (while UP) [ 668.824907][T23411] A link change request failed with some changes committed already. Interface c1· may have been left with an inconsistent configuration, please check. [ 668.944133][T23433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5120'. [ 668.986617][T23422] macsec1: entered promiscuous mode [ 669.087454][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 669.220968][T23437] ipvlan0: entered promiscuous mode [ 669.231633][T23437] team0: Device ipvlan0 failed to register rx_handler [ 669.246645][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.246879][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.247105][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.247311][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.247497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.247685][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.247874][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.248070][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.248297][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 669.581563][T23457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5126'. [ 669.864055][T23469] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5130'. [ 669.864173][T23469] 0·: renamed from c1· (while UP) [ 669.978944][T23477] syzkaller0: left promiscuous mode [ 669.978969][T23477] syzkaller0: left allmulticast mode [ 670.701182][T23525] netlink: 'syz.0.5142': attribute type 10 has an invalid length. [ 670.719262][T23525] .`: (slave netdevsim1): Releasing backup interface [ 670.743176][T23525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 670.744707][T23525] team0: Port device netdevsim1 added [ 670.780173][T23525] netlink: 'syz.0.5142': attribute type 10 has an invalid length. [ 670.802340][T23525] team0: Port device netdevsim1 removed [ 670.827995][T23525] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 670.857559][T23525] .`: (slave netdevsim1): Enslaving as an active interface with an up link [ 671.035865][T23534] netlink: 9 bytes leftover after parsing attributes in process `syz.0.5145'. [ 671.039187][T23534] 1·: renamed from c0· (while UP) [ 671.310301][T23542] netlink: 836 bytes leftover after parsing attributes in process `syz.1.5147'. [ 671.820809][T23572] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5150'. [ 672.234114][T23544] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 673.101889][T23595] syzkaller0: entered promiscuous mode [ 673.101911][T23595] syzkaller0: entered allmulticast mode [ 673.826518][ C1] net_ratelimit: 5844 callbacks suppressed [ 673.826539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 673.826921][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 673.827280][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 673.827659][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 673.828045][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 673.828471][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 673.828895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 673.829322][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 673.829683][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 673.830078][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 674.013930][T23624] FAULT_INJECTION: forcing a failure. [ 674.013930][T23624] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 674.013964][T23624] CPU: 0 UID: 0 PID: 23624 Comm: syz.4.5161 Not tainted syzkaller #0 PREEMPT(full) [ 674.013988][T23624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 674.014001][T23624] Call Trace: [ 674.014010][T23624] [ 674.014020][T23624] dump_stack_lvl+0xe8/0x150 [ 674.014056][T23624] should_fail_ex+0x410/0x560 [ 674.014085][T23624] _copy_from_user+0x2d/0xb0 [ 674.014114][T23624] kstrtouint_from_user+0xd6/0x180 [ 674.014140][T23624] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 674.014182][T23624] ? lock_acquire+0x115/0x350 [ 674.014210][T23624] proc_fail_nth_write+0x8e/0x210 [ 674.014232][T23624] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 674.014276][T23624] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 674.014310][T23624] vfs_write+0x296/0xba0 [ 674.014351][T23624] ? __pfx_vfs_write+0x10/0x10 [ 674.014385][T23624] ? __fget_files+0x2a/0x420 [ 674.014429][T23624] ? __fget_files+0x3a2/0x420 [ 674.014455][T23624] ? __fget_files+0x2a/0x420 [ 674.014492][T23624] ksys_write+0x150/0x270 [ 674.014525][T23624] ? __pfx_ksys_write+0x10/0x10 [ 674.014567][T23624] do_syscall_64+0x166/0x520 [ 674.014588][T23624] ? trace_irq_disable+0x3b/0x140 [ 674.014609][T23624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.014629][T23624] ? clear_bhb_loop+0x70/0xc0 [ 674.014655][T23624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.014675][T23624] RIP: 0033:0x7f50e155e98e [ 674.014695][T23624] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 674.014712][T23624] RSP: 002b:00007f50df7d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 674.014734][T23624] RAX: ffffffffffffffda RBX: 00007f50df7d56c0 RCX: 00007f50e155e98e [ 674.014749][T23624] RDX: 0000000000000001 RSI: 00007f50df7d50a0 RDI: 0000000000000003 [ 674.014762][T23624] RBP: 00007f50df7d5090 R08: 0000000000000000 R09: 0000000000000000 [ 674.014775][T23624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 674.014787][T23624] R13: 00007f50e1826128 R14: 00007f50e1826090 R15: 00007fffe988d908 [ 674.014819][T23624] [ 674.383429][T23629] netlink: 'syz.1.5162': attribute type 1 has an invalid length. [ 674.411107][T23631] xt_hashlimit: size too large, truncated to 1048576 [ 674.471700][T23634] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5163'. [ 674.529577][T23636] netlink: 'syz.1.5162': attribute type 1 has an invalid length. [ 677.411677][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 677.565880][ C1] sched: DL replenish lagged too much [ 678.836204][ C1] net_ratelimit: 17289 callbacks suppressed [ 678.836226][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.836491][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 678.836605][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.836885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 678.837264][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 678.837648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 678.837869][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 678.838025][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 678.838339][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.838527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 683.846455][ C0] net_ratelimit: 20148 callbacks suppressed [ 683.846479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 683.846533][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 683.846865][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 683.847236][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 683.847616][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 683.847627][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.847969][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 683.848005][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.848389][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 683.848804][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 685.730064][ C0] ip6_tunnel: syztnl2 xmit: Local address not yet configured! [ 685.730531][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 688.856296][ C1] net_ratelimit: 20298 callbacks suppressed [ 688.856314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.856318][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.856731][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.857128][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.857470][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.857567][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.857960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.858492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.858807][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 688.858961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.866431][ C0] net_ratelimit: 19884 callbacks suppressed [ 693.866454][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.866665][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 693.866890][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.867014][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.867271][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.867368][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.867652][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.868060][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.868523][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.868690][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 694.067798][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 698.876332][ C1] net_ratelimit: 20195 callbacks suppressed [ 698.876356][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.876428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 698.876846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 698.877260][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 698.877609][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 698.877664][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 698.878006][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.878101][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 698.878431][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.878569][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 703.886368][ C0] net_ratelimit: 20484 callbacks suppressed [ 703.886390][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 703.886724][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 703.886921][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 703.887106][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 703.887440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 703.887472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.887817][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.887932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 703.888516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 703.889095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.896235][ C1] net_ratelimit: 19965 callbacks suppressed [ 708.896260][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.896353][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.896642][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.896749][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.897111][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.897478][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.897839][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.898272][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.898707][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.898787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 713.906347][ C0] net_ratelimit: 20229 callbacks suppressed [ 713.906406][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 713.906811][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 713.907213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 713.907526][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 713.907638][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 713.907916][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 713.908014][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 713.908468][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 713.908987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 713.909165][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 716.455191][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 718.916241][ C0] net_ratelimit: 20218 callbacks suppressed [ 718.916265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 718.916338][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 718.916645][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 718.916688][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.917025][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 718.917032][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.917432][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.917474][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 718.917843][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 718.917923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 723.926371][ C0] net_ratelimit: 20411 callbacks suppressed [ 723.926395][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 723.926448][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 723.926742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 723.926815][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.927087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 723.927172][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.927459][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 723.927531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 723.927802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 723.927895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.966394][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 728.936291][ C0] net_ratelimit: 20111 callbacks suppressed [ 728.936315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 728.936674][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 728.937527][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 728.937548][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 728.937900][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 728.937917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 728.938350][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 728.938345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 728.938763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 728.938778][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.946366][ C0] net_ratelimit: 20358 callbacks suppressed [ 733.946390][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 733.946760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 733.947151][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 733.947523][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 733.947627][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 733.947892][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 733.947970][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 733.948314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 733.948367][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 733.948750][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 738.956144][ C0] net_ratelimit: 21070 callbacks suppressed [ 738.956175][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 738.956278][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.956545][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 738.956746][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.956951][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 738.957190][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.957306][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 738.957615][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 738.957648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 738.957991][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 743.966324][ C0] net_ratelimit: 20724 callbacks suppressed [ 743.966347][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 743.966720][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 743.967136][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 743.967553][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 743.967959][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 743.968174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 743.968416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 743.968623][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 743.968902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 743.969052][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.976366][ C1] net_ratelimit: 20042 callbacks suppressed [ 748.976389][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 748.976401][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 748.976741][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.976819][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 748.977128][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.977198][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 748.977477][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.977583][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 748.977823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 748.977961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 753.986180][ C0] net_ratelimit: 20357 callbacks suppressed [ 753.986204][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 753.986401][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.986565][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 753.986779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.986932][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 753.987185][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.987363][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 753.987606][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 753.987761][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 753.988173][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 758.996394][ C1] net_ratelimit: 20449 callbacks suppressed [ 758.996411][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 758.996418][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.996787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 758.996824][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 758.997129][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.997202][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 758.997512][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.997580][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 758.997854][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.997967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.006391][ C0] net_ratelimit: 20832 callbacks suppressed [ 764.006414][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.006795][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.007229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.007587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 764.007632][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.007964][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 764.008041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.008383][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 764.008498][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 764.008807][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 769.016194][ C0] net_ratelimit: 20115 callbacks suppressed [ 769.016217][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.016312][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 769.016635][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.017015][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.017453][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.017901][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.018354][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.018625][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 769.018801][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 769.019050][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 774.026348][ C1] net_ratelimit: 18928 callbacks suppressed [ 774.026348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 774.026371][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 774.026760][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 774.026812][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.027161][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 774.027246][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 774.027572][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 774.027672][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 774.027949][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 774.028087][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.036154][ C0] net_ratelimit: 19788 callbacks suppressed [ 779.036179][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 779.036321][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 779.036538][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 779.036726][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.036914][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 779.037118][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 779.037274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 779.037517][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 779.037634][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 779.037911][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.046189][ C0] net_ratelimit: 19596 callbacks suppressed [ 784.046214][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 784.046304][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 784.046602][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 784.046717][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.046933][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 784.047109][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.047250][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 784.047571][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 784.047858][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 784.047887][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 789.056332][ C0] net_ratelimit: 19863 callbacks suppressed [ 789.056357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 789.056774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 789.057150][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 789.057197][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 789.057543][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 789.057571][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 789.057986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 789.058077][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 789.058455][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 789.058513][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 794.066202][ C0] net_ratelimit: 19849 callbacks suppressed [ 794.066227][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 794.066733][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 794.066804][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 794.067121][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 794.067147][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 794.067501][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 794.067504][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 794.067848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 794.067887][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 794.068219][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 798.369077][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 799.076166][ C0] net_ratelimit: 20119 callbacks suppressed [ 799.076187][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 799.076208][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.076594][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 799.076964][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 799.077005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 799.077409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 799.077811][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 799.078256][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 799.078732][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 799.079065][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 804.086434][ C0] net_ratelimit: 19762 callbacks suppressed [ 804.086457][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 804.086832][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 804.087287][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 804.087348][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 804.087660][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 804.087712][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 804.088030][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 804.088069][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 804.088484][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 804.088502][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 809.096091][ C0] net_ratelimit: 19630 callbacks suppressed [ 809.096114][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 809.096497][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 809.096520][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.096881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 809.096951][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.097292][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 809.097668][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 809.097815][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 809.098049][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 809.098495][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 814.106491][ C0] net_ratelimit: 20007 callbacks suppressed [ 814.106516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 814.106876][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 814.107269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 814.107443][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 814.107632][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 814.107811][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 814.107987][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 814.108243][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 814.108399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 814.108678][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 819.116330][ C0] net_ratelimit: 19971 callbacks suppressed [ 819.116353][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.116702][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.117045][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.117124][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 819.117404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.117496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 819.117748][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.117871][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 819.118088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 819.118272][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 824.126222][ C0] net_ratelimit: 20991 callbacks suppressed [ 824.126247][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 824.126360][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 824.126597][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 824.126749][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.126937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 824.127102][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.127286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 824.127628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 824.127853][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 824.128002][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.136199][ C1] net_ratelimit: 20432 callbacks suppressed [ 829.136222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.136388][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.136730][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.137034][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.137081][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.137391][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 829.137434][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.137778][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.138181][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 829.138206][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.146353][ C0] net_ratelimit: 21024 callbacks suppressed [ 834.146377][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.146810][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.146831][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.147212][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.147218][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.147670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.148074][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.148085][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 834.148536][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 834.148995][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 838.848383][ T32] INFO: task dhcpcd:5278 blocked for more than 149 seconds. [ 838.848414][ T32] Not tainted syzkaller #0 [ 838.848427][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.848439][ T32] task:dhcpcd state:D stack:21384 pid:5278 tgid:5278 ppid:5277 task_flags:0x400140 flags:0x00080000 [ 838.848502][ T32] Call Trace: [ 838.848512][ T32] [ 838.848528][ T32] __schedule+0x17db/0x58f0 [ 838.848594][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.848628][ T32] ? __pfx___schedule+0x10/0x10 [ 838.848676][ T32] ? schedule+0x90/0x2b0 [ 838.848702][ T32] schedule+0x164/0x2b0 [ 838.848728][ T32] schedule_preempt_disabled+0x13/0x30 [ 838.848751][ T32] __mutex_lock+0x7c1/0x1550 [ 838.848784][ T32] ? __mutex_lock+0x5d4/0x1550 [ 838.848815][ T32] ? inet6_rtm_deladdr+0x249/0x390 [ 838.848849][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 838.848889][ T32] ? __nla_parse+0x40/0x60 [ 838.848926][ T32] inet6_rtm_deladdr+0x249/0x390 [ 838.848960][ T32] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 838.849015][ T32] ? __pfx_inet6_rtm_deladdr+0x10/0x10 [ 838.849044][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 838.849071][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 838.849110][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 838.849138][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.849168][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.849207][ T32] netlink_rcv_skb+0x226/0x4a0 [ 838.849243][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.849281][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 838.849355][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.849386][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.849422][ T32] netlink_unicast+0x7bd/0x940 [ 838.849462][ T32] netlink_sendmsg+0x813/0xb40 [ 838.849504][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.849544][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 838.849571][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.849601][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 838.849638][ T32] ____sys_sendmsg+0x54e/0x850 [ 838.849673][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.849711][ T32] ? import_iovec+0x73/0xa0 [ 838.849741][ T32] ___sys_sendmsg+0x2a5/0x360 [ 838.849769][ T32] ? __asan_memcpy+0x40/0x70 [ 838.849805][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.849856][ T32] ? vfs_read+0x804/0xa80 [ 838.849913][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 838.849944][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 838.849995][ T32] do_syscall_64+0x166/0x520 [ 838.850019][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.850042][ T32] ? clear_bhb_loop+0x70/0xc0 [ 838.850080][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.850101][ T32] RIP: 0033:0x7fc8dcd81407 [ 838.850120][ T32] RSP: 002b:00007ffd668dd920 EFLAGS: 00000202 ORIG_RAX: 000000000000002e [ 838.850141][ T32] RAX: ffffffffffffffda RBX: 00007fc8dccf7780 RCX: 00007fc8dcd81407 [ 838.850157][ T32] RDX: 0000000000000000 RSI: 00007ffd668f1b00 RDI: 0000000000000004 [ 838.850171][ T32] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 838.850183][ T32] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffd66901d30 [ 838.850197][ T32] R13: 00007fc8dccf7708 R14: 000000000000002c R15: 00007ffd668f1b00 [ 838.850229][ T32] [ 838.850319][ T32] INFO: task syz.1.5162:23632 blocked for more than 149 seconds. [ 838.850336][ T32] Not tainted syzkaller #0 [ 838.850346][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.850356][ T32] task:syz.1.5162 state:D stack:26960 pid:23632 tgid:23626 ppid:17782 task_flags:0x400140 flags:0x00080002 [ 838.850413][ T32] Call Trace: [ 838.850420][ T32] [ 838.850433][ T32] __schedule+0x17db/0x58f0 [ 838.850492][ T32] ? __pfx___schedule+0x10/0x10 [ 838.850533][ T32] ? schedule+0x90/0x2b0 [ 838.850555][ T32] schedule+0x164/0x2b0 [ 838.850577][ T32] schedule_preempt_disabled+0x13/0x30 [ 838.850597][ T32] __mutex_lock+0x7c1/0x1550 [ 838.850625][ T32] ? __mutex_lock+0x5d4/0x1550 [ 838.850651][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 838.850677][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 838.850709][ T32] ? ns_capable+0x89/0xe0 [ 838.850737][ T32] ? rtnl_nets_add+0x16c/0x300 [ 838.850760][ T32] ? refcount_inc+0x46/0x70 [ 838.850783][ T32] rtnl_newlink+0xc10/0x1c30 [ 838.850819][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 838.850844][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.850873][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.850908][ T32] ? lock_acquire+0x115/0x350 [ 838.850935][ T32] ? lock_acquire+0x115/0x350 [ 838.850965][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 838.850997][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.851024][ T32] ? __kernel_text_address+0xd/0x30 [ 838.851047][ T32] ? unwind_get_return_address+0x4d/0x90 [ 838.851072][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 838.851093][ T32] ? arch_stack_walk+0xfb/0x150 [ 838.851127][ T32] ? lock_acquire+0x115/0x350 [ 838.851148][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 838.851183][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 838.851206][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 838.851227][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 838.851266][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 838.851290][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.851314][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.851348][ T32] netlink_rcv_skb+0x226/0x4a0 [ 838.851378][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.851404][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 838.851446][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.851474][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.851509][ T32] netlink_unicast+0x7bd/0x940 [ 838.851546][ T32] netlink_sendmsg+0x813/0xb40 [ 838.851585][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.851623][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 838.851648][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.851677][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 838.851712][ T32] ____sys_sendmsg+0x54e/0x850 [ 838.851744][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.851779][ T32] ? import_iovec+0x73/0xa0 [ 838.851808][ T32] ___sys_sendmsg+0x2a5/0x360 [ 838.851833][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.851858][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.851889][ T32] ? futex_wait+0x2a2/0x390 [ 838.851947][ T32] ? __fget_files+0x2a/0x420 [ 838.851974][ T32] ? __fget_files+0x3a2/0x420 [ 838.852012][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 838.852042][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 838.852089][ T32] do_syscall_64+0x166/0x520 [ 838.852110][ T32] ? trace_irq_disable+0x3b/0x140 [ 838.852131][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.852152][ T32] ? clear_bhb_loop+0x70/0xc0 [ 838.852177][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.852198][ T32] RIP: 0033:0x7f1f8b59e159 [ 838.852215][ T32] RSP: 002b:00007f1f8c3fc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.852236][ T32] RAX: ffffffffffffffda RBX: 00007f1f8b826180 RCX: 00007f1f8b59e159 [ 838.852252][ T32] RDX: 0000000000008000 RSI: 0000200000000280 RDI: 0000000000000004 [ 838.852271][ T32] RBP: 00007f1f8b63503b R08: 0000000000000000 R09: 0000000000000000 [ 838.852284][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.852297][ T32] R13: 00007f1f8b826218 R14: 00007f1f8b826180 R15: 00007fffaba99188 [ 838.852329][ T32] [ 838.852338][ T32] INFO: task syz.1.5162:23636 blocked for more than 149 seconds. [ 838.852353][ T32] Not tainted syzkaller #0 [ 838.852364][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.852373][ T32] task:syz.1.5162 state:D stack:26080 pid:23636 tgid:23626 ppid:17782 task_flags:0x400140 flags:0x00080002 [ 838.852430][ T32] Call Trace: [ 838.852437][ T32] [ 838.852450][ T32] __schedule+0x17db/0x58f0 [ 838.852496][ T32] ? __pfx__printk+0x10/0x10 [ 838.852527][ T32] ? __pfx___schedule+0x10/0x10 [ 838.852567][ T32] ? schedule+0x90/0x2b0 [ 838.852590][ T32] schedule+0x164/0x2b0 [ 838.852612][ T32] schedule_preempt_disabled+0x13/0x30 [ 838.852631][ T32] __mutex_lock+0x7c1/0x1550 [ 838.852658][ T32] ? __mutex_lock+0x5d4/0x1550 [ 838.852684][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 838.852709][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 838.852741][ T32] ? ns_capable+0x89/0xe0 [ 838.852770][ T32] ? rtnl_nets_add+0x16c/0x300 [ 838.852794][ T32] ? refcount_inc+0x46/0x70 [ 838.852816][ T32] rtnl_newlink+0xc10/0x1c30 [ 838.852851][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 838.852876][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.852932][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.852961][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.852989][ T32] ? lock_acquire+0x115/0x350 [ 838.853019][ T32] ? lock_acquire+0x115/0x350 [ 838.853051][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 838.853084][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.853113][ T32] ? __kernel_text_address+0xd/0x30 [ 838.853136][ T32] ? unwind_get_return_address+0x4d/0x90 [ 838.853162][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 838.853183][ T32] ? arch_stack_walk+0xfb/0x150 [ 838.853220][ T32] ? lock_acquire+0x115/0x350 [ 838.853263][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 838.853288][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 838.853312][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 838.853346][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 838.853371][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.853398][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.853433][ T32] netlink_rcv_skb+0x226/0x4a0 [ 838.853465][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.853493][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 838.853537][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.853568][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.853604][ T32] netlink_unicast+0x7bd/0x940 [ 838.853645][ T32] netlink_sendmsg+0x813/0xb40 [ 838.853686][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.853727][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 838.853753][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 838.853785][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 838.853821][ T32] ____sys_sendmsg+0x54e/0x850 [ 838.853855][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 838.853893][ T32] ? import_iovec+0x73/0xa0 [ 838.853922][ T32] ___sys_sendmsg+0x2a5/0x360 [ 838.853950][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.853976][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 838.854009][ T32] ? futex_wait+0x2a2/0x390 [ 838.854071][ T32] ? __fget_files+0x2a/0x420 [ 838.854099][ T32] ? __fget_files+0x3a2/0x420 [ 838.854140][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 838.854171][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 838.854222][ T32] do_syscall_64+0x166/0x520 [ 838.854244][ T32] ? trace_irq_disable+0x3b/0x140 [ 838.854272][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.854294][ T32] ? clear_bhb_loop+0x70/0xc0 [ 838.854321][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 838.854343][ T32] RIP: 0033:0x7f1f8b59e159 [ 838.854362][ T32] RSP: 002b:00007f1f8c3db028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 838.854384][ T32] RAX: ffffffffffffffda RBX: 00007f1f8b826270 RCX: 00007f1f8b59e159 [ 838.854401][ T32] RDX: 0000000000040000 RSI: 0000200000000040 RDI: 0000000000000005 [ 838.854415][ T32] RBP: 00007f1f8b63503b R08: 0000000000000000 R09: 0000000000000000 [ 838.854429][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 838.854442][ T32] R13: 00007f1f8b826308 R14: 00007f1f8b826270 R15: 00007fffaba99188 [ 838.854477][ T32] [ 838.854486][ T32] INFO: task syz.1.5162:23637 blocked for more than 149 seconds. [ 838.854502][ T32] Not tainted syzkaller #0 [ 838.854514][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 838.854524][ T32] task:syz.1.5162 state:D stack:26960 pid:23637 tgid:23626 ppid:17782 task_flags:0x400140 flags:0x00080002 [ 838.854585][ T32] Call Trace: [ 838.854592][ T32] [ 838.854606][ T32] __schedule+0x17db/0x58f0 [ 838.854668][ T32] ? __pfx___schedule+0x10/0x10 [ 838.854711][ T32] ? schedule+0x90/0x2b0 [ 838.854736][ T32] schedule+0x164/0x2b0 [ 838.854759][ T32] schedule_preempt_disabled+0x13/0x30 [ 838.854780][ T32] __mutex_lock+0x7c1/0x1550 [ 838.854809][ T32] ? __mutex_lock+0x5d4/0x1550 [ 838.854837][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 838.854865][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 838.854899][ T32] ? ns_capable+0x89/0xe0 [ 838.854928][ T32] ? rtnl_nets_add+0x16c/0x300 [ 838.854954][ T32] ? refcount_inc+0x46/0x70 [ 838.854977][ T32] rtnl_newlink+0xc10/0x1c30 [ 838.855015][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 838.855042][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.855072][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.855101][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.855130][ T32] ? lock_acquire+0x115/0x350 [ 838.855159][ T32] ? lock_acquire+0x115/0x350 [ 838.855191][ T32] ? is_bpf_text_address+0x26/0x2b0 [ 838.855224][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.855253][ T32] ? __kernel_text_address+0xd/0x30 [ 838.855283][ T32] ? unwind_get_return_address+0x4d/0x90 [ 838.855309][ T32] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 838.855330][ T32] ? arch_stack_walk+0xfb/0x150 [ 838.855366][ T32] ? lock_acquire+0x115/0x350 [ 838.855404][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 838.855428][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 838.855452][ T32] ? netlink_sendmsg+0x5d4/0xb40 [ 838.855496][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 838.855519][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.855545][ T32] ? __lock_acquire+0x747/0x2de0 [ 838.855578][ T32] netlink_rcv_skb+0x226/0x4a0 [ 838.855608][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 838.855634][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 838.855676][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.855705][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 838.855740][ T32] netlink_unicast+0x7bd/0x940 [ 839.156119][ C1] net_ratelimit: 20019 callbacks suppressed [ 839.156142][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.156355][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.156756][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.156978][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.157143][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.157375][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.157526][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.157902][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 839.158277][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 839.158328][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 841.331722][ T32] netlink_sendmsg+0x813/0xb40 [ 841.331773][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.331813][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 841.331839][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.331867][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 841.331903][ T32] ____sys_sendmsg+0x54e/0x850 [ 841.331935][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.331971][ T32] ? import_iovec+0x73/0xa0 [ 841.331999][ T32] ___sys_sendmsg+0x2a5/0x360 [ 841.332024][ T32] ? __lock_acquire+0x747/0x2de0 [ 841.332057][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.332088][ T32] ? futex_wait+0x2a2/0x390 [ 841.332146][ T32] ? __fget_files+0x2a/0x420 [ 841.332175][ T32] ? __fget_files+0x3a2/0x420 [ 841.332212][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 841.332243][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.332290][ T32] do_syscall_64+0x166/0x520 [ 841.332312][ T32] ? trace_irq_disable+0x3b/0x140 [ 841.332332][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.332353][ T32] ? clear_bhb_loop+0x70/0xc0 [ 841.332379][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.332400][ T32] RIP: 0033:0x7f1f8b59e159 [ 841.332419][ T32] RSP: 002b:00007f1f8c3ba028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.332441][ T32] RAX: ffffffffffffffda RBX: 00007f1f8b826360 RCX: 00007f1f8b59e159 [ 841.332456][ T32] RDX: 0000000000000884 RSI: 0000200000000240 RDI: 0000000000000009 [ 841.332470][ T32] RBP: 00007f1f8b63503b R08: 0000000000000000 R09: 0000000000000000 [ 841.332483][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.332496][ T32] R13: 00007f1f8b8263f8 R14: 00007f1f8b826360 R15: 00007fffaba99188 [ 841.332528][ T32] [ 841.332543][ T32] INFO: task syz.4.5163:23634 blocked for more than 151 seconds. [ 841.332559][ T32] Not tainted syzkaller #0 [ 841.332570][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 841.332580][ T32] task:syz.4.5163 state:D stack:26080 pid:23634 tgid:23630 ppid:16962 task_flags:0x400140 flags:0x00080002 [ 841.332637][ T32] Call Trace: [ 841.332645][ T32] [ 841.332657][ T32] __schedule+0x17db/0x58f0 [ 841.332705][ T32] ? __pfx__printk+0x10/0x10 [ 841.332736][ T32] ? __pfx___schedule+0x10/0x10 [ 841.332777][ T32] ? schedule+0x90/0x2b0 [ 841.332799][ T32] schedule+0x164/0x2b0 [ 841.332822][ T32] schedule_preempt_disabled+0x13/0x30 [ 841.332841][ T32] __mutex_lock+0x7c1/0x1550 [ 841.332869][ T32] ? __mutex_lock+0x5d4/0x1550 [ 841.332895][ T32] ? rtnl_newlink+0xc10/0x1c30 [ 841.332921][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 841.332953][ T32] ? ns_capable+0x89/0xe0 [ 841.332981][ T32] ? rtnl_nets_add+0x16c/0x300 [ 841.333004][ T32] ? refcount_inc+0x46/0x70 [ 841.333026][ T32] rtnl_newlink+0xc10/0x1c30 [ 841.333077][ T32] ? netlink_unicast+0x781/0x940 [ 841.333105][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 841.333127][ T32] ? do_syscall_64+0x166/0x520 [ 841.333147][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.333203][ T32] ? kasan_quarantine_put+0xbb/0x1f0 [ 841.333225][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 841.333251][ T32] ? nlmon_xmit+0xb0/0x100 [ 841.333271][ T32] ? kmem_cache_free+0x182/0x650 [ 841.333304][ T32] ? __lock_acquire+0x747/0x2de0 [ 841.333334][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 841.333361][ T32] ? lockdep_hardirqs_on+0x7b/0x110 [ 841.333382][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 841.333409][ T32] ? __local_bh_enable_ip+0xd6/0x140 [ 841.333434][ T32] ? __dev_queue_xmit+0x29b/0x3820 [ 841.333470][ T32] ? lock_acquire+0x115/0x350 [ 841.333490][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 841.333525][ T32] ? __pfx_rtnl_newlink+0x10/0x10 [ 841.333547][ T32] rtnetlink_rcv_msg+0x802/0xc00 [ 841.333575][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 841.333598][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 841.333620][ T32] ? ref_tracker_free+0x689/0x830 [ 841.333647][ T32] ? __pfx_ref_tracker_free+0x10/0x10 [ 841.333682][ T32] netlink_rcv_skb+0x226/0x4a0 [ 841.333711][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 841.333737][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 841.333778][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 841.333807][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 841.333841][ T32] netlink_unicast+0x7bd/0x940 [ 841.333879][ T32] netlink_sendmsg+0x813/0xb40 [ 841.333918][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.333956][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 841.333980][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 841.334010][ T32] sock_sendmsg_nosec+0x13a/0x180 [ 841.334049][ T32] ____sys_sendmsg+0x54e/0x850 [ 841.334082][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 841.334117][ T32] ? import_iovec+0x73/0xa0 [ 841.334145][ T32] ___sys_sendmsg+0x2a5/0x360 [ 841.334170][ T32] ? __lock_acquire+0x747/0x2de0 [ 841.334195][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 841.334225][ T32] ? futex_wake+0x51b/0x5f0 [ 841.334283][ T32] ? __fget_files+0x2a/0x420 [ 841.334310][ T32] ? __fget_files+0x3a2/0x420 [ 841.334347][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 841.334377][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 841.334425][ T32] do_syscall_64+0x166/0x520 [ 841.334446][ T32] ? trace_irq_disable+0x3b/0x140 [ 841.334466][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.334487][ T32] ? clear_bhb_loop+0x70/0xc0 [ 841.334512][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 841.334533][ T32] RIP: 0033:0x7f50e159e159 [ 841.334550][ T32] RSP: 002b:00007f50df7d5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 841.334571][ T32] RAX: ffffffffffffffda RBX: 00007f50e1826090 RCX: 00007f50e159e159 [ 841.334586][ T32] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 841.334599][ T32] RBP: 00007f50e163503b R08: 0000000000000000 R09: 0000000000000000 [ 841.334613][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 841.334626][ T32] R13: 00007f50e1826128 R14: 00007f50e1826090 R15: 00007fffe988d908 [ 841.334657][ T32] [ 841.334680][ T32] [ 841.334680][ T32] Showing all locks held in the system: [ 841.334690][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 841.334705][ T32] #0: ffffffff8ec364b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 841.334761][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 841.334776][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 841.334824][ T32] locks held by kworker/u8:2/38: 4, last CPU#0: [ 841.334839][ T32] #0: ffff888032362140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.334898][ T32] #1: ffffc90000ae7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.334954][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 841.335004][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: NF_HOOK+0xa2/0x3f0 [ 841.335063][ T32] locks held by kworker/u8:3/50: 4, last CPU#1: [ 841.335078][ T32] #0: ffff888032362140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.335137][ T32] #1: ffffc90000bb7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.335191][ T32] #2: ffff88807ab6d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 841.335251][ T32] #3: ffff88807b339700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 841.335312][ T32] locks held by kworker/u8:5/145: 2, last CPU#1: [ 841.335327][ T32] #0: ffff888031ae5940 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.335382][ T32] #1: ffffc90002e87c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.335437][ T32] locks held by kworker/u8:6/204: 4, last CPU#1: [ 841.335452][ T32] #0: ffff88801f6f6940 ((wq_completion)krds_cp_wq#4/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.335506][ T32] #1: ffffc900031b7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.335561][ T32] #2: ffff888055f5a180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 841.335616][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 841.335668][ T32] locks held by kworker/0:3/2210: 3, last CPU#0: [ 841.335683][ T32] #0: ffff888079ed1140 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.335742][ T32] #1: ffffc900072b7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.335812][ T32] #2: ffff88802c9d1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 841.335882][ T32] locks held by kworker/u8:10/3383: 3, last CPU#1: [ 841.335897][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.335952][ T32] #1: ffffc9000f2efc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 841.336007][ T32] #2: ffff88802b7aa258 (&devlink->lock_key#7){+.+.}-{4:4} [ 844.166238][ C1] net_ratelimit: 18864 callbacks suppressed [ 844.166294][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.168087][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.168527][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.168943][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.169358][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.169548][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 844.169736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.169904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:26:d1:60:50:13:e1, vlan:0) [ 844.170144][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 844.170277][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 844.695440][ T32] , at: nsim_dev_trap_report_work+0x57/0xb40 [ 844.695483][ T32] locks held by klogd/4972: 1, last CPU#0: [ 844.695498][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 844.695552][ T32] locks held by dhcpcd/5278: 1, on CPU#0: [ 844.695567][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_deladdr+0x249/0x390 [ 844.695622][ T32] locks held by getty/5372: 2, on CPU#0: [ 844.695636][ T32] #0: ffff8880329950a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 844.695694][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 844.695746][ T32] locks held by syz-executor/5605: 2, last CPU#0: [ 844.695760][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 844.695806][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 844.695865][ T32] locks held by kworker/1:4/5716: 3, last CPU#1: [ 844.695879][ T32] #0: ffff888056dfbd40 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.695938][ T32] #1: ffffc90004687c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.696006][ T32] #2: ffff888055965440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 844.709638][ T32] locks held by kworker/0:5/5723: 2, last CPU#0: [ 844.709663][ T32] #0: ffff888056dfbd40 ((wq_completion)wg-kex-wg0#16){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.709730][ T32] #1: ffffc900046f7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.709804][ T32] locks held by kworker/1:10/8209: 5, last CPU#1: [ 844.709819][ T32] #0: ffff888079ed1140 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.709877][ T32] #1: ffffc90004cb7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.709946][ T32] #2: ffff88802de12ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 844.710006][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 844.710053][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 844.710104][ T32] locks held by kworker/1:12/8211: 3, on CPU#1: [ 844.710119][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.710174][ T32] #1: ffffc90004c97c40 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.710228][ T32] #2: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0xac/0x1110 [ 844.710277][ T32] locks held by kworker/1:14/8213: 2, last CPU#1: [ 844.710291][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.710351][ T32] #1: ffffc90004c77c40 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.710408][ T32] locks held by kworker/u8:14/11577: 3, last CPU#0: [ 844.710423][ T32] #0: ffff888057860140 ((wq_completion)bond9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.710477][ T32] #1: ffffc9000599fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.710536][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 844.710594][ T32] locks held by kworker/0:11/11588: 2, last CPU#0: [ 844.710609][ T32] #0: ffff8880752b3140 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.710668][ T32] #1: ffffc900060afc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.710737][ T32] locks held by syz-executor/15970: 4, last CPU#0: [ 844.710752][ T32] #0: ffff888051f7c460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 844.710804][ T32] #1: ffff888055c820b0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 844.710871][ T32] #2: ffffffff8f4f0f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 844.710920][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 844.710971][ T32] locks held by syz-executor/17414: 4, last CPU#0: [ 844.710986][ T32] #0: ffff888052152460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 844.711037][ T32] #1: ffff88807640b8d0 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 844.711097][ T32] #2: ffffffff8f4f0f78 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 844.711144][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 844.711194][ T32] locks held by kworker/u8:15/18595: 1, last CPU#0: [ 844.711208][ T32] #0: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 844.711252][ T32] locks held by kworker/u8:18/18598: 2, last CPU#0: [ 844.711267][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.711325][ T32] #1: ffffc90004b97c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.711378][ T32] locks held by kworker/u8:19/18614: 5, last CPU#0: [ 844.711392][ T32] #0: ffff888055a7d140 ((wq_completion)krds_cp_wq#10/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.711443][ T32] #1: ffffc90003ae7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.711496][ T32] #2: ffff888055f5b980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 844.711548][ T32] #3: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 844.711593][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_check_no_obj_freed+0xcb/0x450 [ 844.711645][ T32] locks held by kworker/u8:20/18615: 3, last CPU#0: [ 844.711659][ T32] #0: ffff888056de6940 ((wq_completion)bond3#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.711716][ T32] #1: ffffc90004907c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.711769][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 844.711825][ T32] locks held by kworker/u8:21/18616: 3, last CPU#0: [ 844.711838][ T32] #0: ffff888055c76140 ((wq_completion)bond2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.711895][ T32] #1: ffffc90003aa7c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.711947][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 844.712002][ T32] locks held by kworker/u8:23/18626: 4, last CPU#0: [ 844.712017][ T32] #0: ffff888035094140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.712078][ T32] #1: ffffc900038e7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.712132][ T32] #2: ffff88802c85d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 844.712188][ T32] #3: ffff88802de120e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 844.712271][ T32] locks held by kworker/u8:24/18627: 4, last CPU#1: [ 844.712291][ T32] #0: ffff8880263cd140 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.712353][ T32] #1: ffffc90003827c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.712408][ T32] #2: ffff888055965440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 844.712465][ T32] #3: ffff88807abd34b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 844.712522][ T32] locks held by kworker/u8:25/18628: 4, last CPU#1: [ 844.712535][ T32] #0: ffff888035094940 ((wq_completion)wg-kex-wg0#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.712588][ T32] #1: ffffc90003817c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.712638][ T32] #2: ffff88802c9d1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 844.712691][ T32] #3: ffff88803355bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 844.712745][ T32] locks held by kworker/u8:27/18630: 3, last CPU#0: [ 844.712758][ T32] #0: ffff8880554cb140 ((wq_completion)bond4#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.712811][ T32] #1: ffffc90003747c40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.712864][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf0/0x1840 [ 844.712917][ T32] locks held by kworker/u8:28/18632: 3, on CPU#0: [ 844.712931][ T32] #0: ffff888031d27140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.712982][ T32] #1: ffffc9000370fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 844.713035][ T32] #2: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 844.713085][ T32] locks held by syz.0.5160/23621: 1, last CPU#1: [ 844.713099][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 844.713148][ T32] locks held by syz.1.5162/23629: 3, last CPU#0: [ 844.713162][ T32] #0: ffffffff907a6940 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 844.713218][ T32] #1: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 844.713265][ T32] #2: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 844.713317][ T32] locks held by syz.1.5162/23632: 1, on CPU#0: [ 844.713332][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 844.713379][ T32] locks held by syz.1.5162/23636: 2, on CPU#0: [ 844.713392][ T32] #0: ffffffff907a6940 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 844.713451][ T32] #1: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 844.713500][ T32] locks held by syz.1.5162/23637: 2, on CPU#0: [ 844.713513][ T32] #0: ffffffff8f9977e8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 844.713568][ T32] #1: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 844.713616][ T32] locks held by syz.4.5163/23634: 1, on CPU#0: [ 844.713630][ T32] #0: ffffffff902524e0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 844.713678][ T32] locks held by syz-executor/23638: 2, last CPU#0: [ 844.713692][ T32] #0: ffff88807b505038 (&mm->mmap_lock){++++}-{4:4}, at: map_vdso+0x69/0x6a0 [ 844.713734][ T32] #1: ffffffff8eeac370 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 844.713780][ T32] [ 844.713786][ T32] ============================================= [ 844.713786][ T32] [ 844.713809][ T32] NMI backtrace for cpu 1 [ 844.713824][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 844.713854][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.713865][ T32] Call Trace: [ 844.713873][ T32] [ 844.713883][ T32] dump_stack_lvl+0xe8/0x150 [ 844.713912][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 844.713940][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 844.713972][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 844.714002][ T32] sys_info+0x135/0x170 [ 844.714026][ T32] watchdog+0xfd7/0x1030 [ 844.714053][ T32] ? watchdog+0x1c7/0x1030 [ 844.714078][ T32] kthread+0x38b/0x480 [ 844.714098][ T32] ? __pfx_watchdog+0x10/0x10 [ 844.714115][ T32] ? __pfx_kthread+0x10/0x10 [ 844.714135][ T32] ret_from_fork+0x514/0xb70 [ 844.714157][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 844.714185][ T32] ? __switch_to+0xc89/0x1420 [ 844.714214][ T32] ? __pfx_kthread+0x10/0x10 [ 844.714235][ T32] ret_from_fork_asm+0x1a/0x30 [ 844.714278][ T32] [ 844.714285][ T32] Sending NMI from CPU 1 to CPUs 0: [ 844.714317][ C0] NMI backtrace for cpu 0 [ 844.714331][ C0] CPU: 0 UID: 0 PID: 18614 Comm: kworker/u8:19 Not tainted syzkaller #0 PREEMPT(full) [ 844.714349][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 844.714361][ C0] Workqueue: krds_cp_wq#10/0 rds_connect_worker [ 844.714379][ C0] RIP: 0010:match_held_lock+0x0/0x120 [ 844.714398][ C0] Code: 67 48 0f b9 3a 90 31 db 48 89 d8 5b 41 5e 41 5f e9 05 00 03 00 cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 57 41 56 53 bb 01 00 00 00 48 39 77 10 0f 84 c6 00 00 00 0f b7 [ 844.714412][ C0] RSP: 0018:ffffc900000072d8 EFLAGS: 00000083 [ 844.714426][ C0] RAX: 0000000000000006 RBX: ffff88802623ab18 RCX: 8000000000000101 [ 844.714439][ C0] RDX: 8000000000000100 RSI: ffffffff8ed5c8a0 RDI: ffff88802623ab18 [ 844.714452][ C0] RBP: 00000000ffffffff R08: 0000000000000100 R09: ffffc90000007650 [ 844.714463][ C0] R10: ffffc900000074a0 R11: fffff52000000e96 R12: 0000000000000246 [ 844.714475][ C0] R13: ffff888026239f40 R14: ffffffff8ed5c8a0 R15: 0000000000000001 [ 844.714488][ C0] FS: 0000000000000000(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 844.714502][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 844.714514][ C0] CR2: 00007fc2b3c00218 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 844.714529][ C0] Call Trace: [ 844.714536][ C0] [ 844.714541][ C0] lock_is_held_type+0x89/0x150 [ 844.714560][ C0] ip6_ignore_linkdown+0x66/0x140 [ 844.714583][ C0] find_match+0x9c/0xb40 [ 844.714607][ C0] __find_rr_leaf+0x243/0x740 [ 844.714632][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 844.714653][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 844.714673][ C0] ? __lock_acquire+0x747/0x2de0 [ 844.714691][ C0] fib6_table_lookup+0x3c6/0xae0 [ 844.714726][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 844.714750][ C0] ? nft_match_eval+0x1ad/0x2b0 [ 844.714777][ C0] ip6_pol_route+0x229/0x14d0 [ 844.714801][ C0] ? ip6_pol_route+0x163/0x14d0 [ 844.714833][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 844.714865][ C0] fib6_rule_lookup+0x556/0x730 [ 844.714889][ C0] ? __pfx_ip6_pol_route_input+0x10/0x10 [ 844.714914][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 844.714947][ C0] ip6_route_input+0x78d/0xb20 [ 844.714965][ C0] ? __pfx_ip6_route_input+0x10/0x10 [ 844.714985][ C0] ? nf_nat_ipv6_in+0x200/0x2c0 [ 844.715010][ C0] ? lock_acquire+0x115/0x350 [ 844.715028][ C0] ? ip6_rcv_finish_core+0x222/0x420 [ 844.715049][ C0] ip6_rcv_finish+0x141/0x280 [ 844.715069][ C0] NF_HOOK+0x336/0x3c0 [ 844.715089][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 844.715107][ C0] ? NF_HOOK+0x9e/0x3c0 [ 844.715125][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 844.715145][ C0] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 844.715169][ C0] process_backlog+0x795/0x18b0 [ 844.715188][ C0] ? call_timer_fn+0xd5/0x5f0 [ 844.715208][ C0] ? process_backlog+0x3de/0x18b0 [ 844.715230][ C0] __napi_poll+0xaa/0x330 [ 844.715247][ C0] net_rx_action+0x61d/0xf50 [ 844.715269][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 844.715298][ C0] handle_softirqs+0x226/0x860 [ 844.715322][ C0] ? do_softirq+0x77/0xd0 [ 844.715344][ C0] ? tcp_sock_set_nodelay+0x2a/0x180 [ 844.715365][ C0] do_softirq+0x77/0xd0 [ 844.715384][ C0] [ 844.715390][ C0] [ 844.715396][ C0] __local_bh_enable_ip+0x100/0x140 [ 844.715418][ C0] tcp_sock_set_nodelay+0x2a/0x180 [ 844.715439][ C0] rds_tcp_tune+0xc8/0x920 [ 844.715459][ C0] ? __pfx_rds_tcp_tune+0x10/0x10 [ 844.715477][ C0] ? __sock_create+0x86f/0x9d0 [ 844.715497][ C0] rds_tcp_conn_path_connect+0x2fa/0x920 [ 844.715523][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 844.715547][ C0] ? lock_acquire+0x115/0x350 [ 844.715567][ C0] rds_connect_worker+0x1d8/0x290 [ 844.715583][ C0] ? process_scheduled_works+0x97a/0x1630 [ 844.715604][ C0] process_scheduled_works+0xc3d/0x1630 [ 844.715638][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 844.715662][ C0] ? assign_work+0x3cf/0x5d0 [ 844.715684][ C0] worker_thread+0xa47/0xfb0 [ 844.715717][ C0] kthread+0x38b/0x480 [ 844.715732][ C0] ? __pfx_worker_thread+0x10/0x10 [ 844.715753][ C0] ? __pfx_kthread+0x10/0x10 [ 844.715768][ C0] ret_from_fork+0x514/0xb70 [ 844.715784][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 844.715813][ C0] ? __switch_to+0xc89/0x1420 [ 844.715836][ C0] ? __pfx_kthread+0x10/0x10 [ 844.715852][ C0] ret_from_fork_asm+0x1a/0x30 [ 844.715883][ C0] [ 844.727989][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 848.399940][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 848.409081][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 848.419192][ T32] Call Trace: [ 848.422507][ T32] [ 848.425452][ T32] vpanic+0x56d/0xa60 [ 848.429485][ T32] ? __pfx_vpanic+0x10/0x10 [ 848.434021][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 848.439605][ T32] panic+0xc5/0xd0 [ 848.443359][ T32] ? __pfx_panic+0x10/0x10 [ 848.447835][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 848.452891][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 848.459089][ T32] watchdog+0x1030/0x1030 [ 848.463454][ T32] ? watchdog+0x1c7/0x1030 [ 848.467910][ T32] kthread+0x38b/0x480 [ 848.471997][ T32] ? __pfx_watchdog+0x10/0x10 [ 848.476700][ T32] ? __pfx_kthread+0x10/0x10 [ 848.481335][ T32] ret_from_fork+0x514/0xb70 [ 848.485972][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 848.491116][ T32] ? __switch_to+0xc89/0x1420 [ 848.495832][ T32] ? __pfx_kthread+0x10/0x10 [ 848.500440][ T32] ret_from_fork_asm+0x1a/0x30 [ 848.505251][ T32] [ 848.508469][ T32] Kernel Offset: disabled [ 848.512819][ T32] Rebooting in 86400 seconds..