last executing test programs: 1m7.988009995s ago: executing program 4 (id=956): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000100)=0xf, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x2}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r1, 0x893}, 0x8) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xc}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000300)=ANY=[@ANYBLOB="18120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70300001800009f6703000020000000bfa400000000000007040000f8ffffffb705000008000000850000001900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) close(0x3) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 1m5.660713735s ago: executing program 4 (id=964): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0a41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4002}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="00000018030403000700c5001000451d00e100680000052f90780040"], 0xef) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYRES8=r3], 0x0, 0x34}, 0x28) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000040)={r3, @in={{0x2, 0x4e23, @local}}}, &(0x7f0000000000)=0x84) 1m3.831922759s ago: executing program 2 (id=969): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a080006"], 0xd8}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000300)=""/8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000faff60190400000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xb6) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r1, @ANYBLOB="020000000000800080001200080001007674693674000200"], 0xa0}}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x2, @void}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r3, 0x1, 0x4d, &(0x7f00000014c0)=""/145, &(0x7f0000000080)=0x91) 1m3.566424984s ago: executing program 4 (id=971): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$XFS_IOC_FSGROWFSDATA(r0, 0x4010586e, &(0x7f0000000200)={0xffffffffffffffff, 0x6}) (async, rerun: 64) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000000, 0x10, r0, 0xb63a4000) (async, rerun: 64) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x30, 0x1406, 0x100, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x16, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff000000287110bf000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90) (async) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) (async) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0xf, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x90, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a4, 0x4, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0x7f, 0x6}}]}, 0x90}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x4, &(0x7f00000010c0)=@raw=[@generic={0x15, 0x0, 0x0, 0x2}, @generic={0x81, 0x1}, @generic={0x85, 0x0, 0x0, 0x0, 0x56}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000240)={'pim6reg1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) (async) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000001980)=@generic={0x3, 0x1, 0x7}) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0) 1m3.32807312s ago: executing program 1 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x4c, r2, 0x1, 0x70bd25, 0x0, {}, [@TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x80000001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3f48345f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20001014}, 0x4004) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000600)={0x1c, r3, 0x103, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}]}, 0x1c}}, 0x0) 1m3.05122254s ago: executing program 2 (id=973): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) pwritev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="8e", 0x1}], 0x1, 0x4008001, 0x80) close(r1) sendfile(r1, r0, 0x0, 0xf03a0005) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42082, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x200040, 0x0) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x1) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r5 = socket$inet6(0xa, 0x2, 0x0) (async) socket$inet6(0xa, 0x2, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r6) (async) socket$packet(0x11, 0x3, 0x300) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r6, @ANYRES32=r3]) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r5, 0x8918, &(0x7f0000000240)={@mcast1, 0x7e, r8}) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) (async) r10 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r10, 0x0, 0x0, 0x200540c0, &(0x7f00000001c0)={0x11, 0x8, r8, 0x1, 0xda, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) ioctl$TUNSETPERSIST(r4, 0x400454cb, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, [@map_fd={0x18, 0x1, 0x1, 0x0, r2}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 1m2.207573186s ago: executing program 1 (id=974): socket$kcm(0x10, 0x2, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) socket$kcm(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$kcm(0x10, 0x400000002, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r3], 0xfe33) socket$kcm(0x10, 0x2, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000840)=""/4093, 0xffd}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x3, 0x10) (async) socket$kcm(0x29, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f0000000000)) (async) write$cgroup_subtree(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="934300004300338b4ab502000000000000", @ANYRES32, @ANYRES8=r3], 0xfe33) (async) 1m2.083919417s ago: executing program 3 (id=975): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x64}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r6, 0x84, 0x81, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES64=r6], 0x14}, 0x1, 0x0, 0x0, 0x40008000}, 0x40080) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="86feae88000004001c00128009000100766c616e0000000019000280060001000100000008000500", @ANYRES32=r10, @ANYBLOB="0a000100aaaaaaaaaabb0000"], 0x50}}, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xffe4) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f00000005c0)={0x3, {{0xa, 0x4e23, 0xc, @mcast1, 0xfffffff8}}}, 0x90) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYRES16=r7, @ANYRES32=0x0, @ANYBLOB="00000000464e29b8fcfa50170b00010067726574617000002400028008000700640101000600e65f1008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r11], 0x5c}, 0x1, 0x0, 0x0, 0x45}, 0xc0) 1m1.851692123s ago: executing program 4 (id=976): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x48}}, 0x400400c0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0x300, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0xc, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000094}, 0x24004041) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r5, 0x110, 0x5, &(0x7f00000000c0)=[0x0, 0x4], 0x2) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$sock_timeval(r6, 0x1, 0x14, &(0x7f0000000040)={0x0, 0xea60}, 0x10) read(r6, &(0x7f0000000100)=""/41, 0x29) shutdown(r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e50226bd7000feffffff07000000", @ANYRES32=r10, @ANYBLOB="20000100", @ANYRES32=r10], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x20000100) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xb, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$sock(r5, &(0x7f0000000700)={&(0x7f0000000280)=@qipcrtr={0x2a, 0xffffffff}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)="efe6e4d3f76b75a9cf8d0950059f3b15c6fa40b1a9e8aef962d764cbb1f5b63a1af9b383c2ed42c572f3f727458e91ebb67266a25801f7f1744279", 0x3b}, {&(0x7f0000000340)="233f3417c8a9c100583fba4d4bbee1a1ee0a6f082a88ebf6d227ae39fe5c1fd544436d9303f3be0fcf4f92a4661713c246b4a178f237e9dbbe0680313ea3c0c8eb5e22ac7fcde20f1092299e0e658bb400a8ffe1d7438c1b2e4140a7843665336097394085b3d89d2fd1d0301058e7f51e74ec810e842ede7f999fb80ffca79c67db3677115373e121102cf8ed64e4f8582ced67cb5d5115c31e715cf730fda2fa8cfae8a9f81acf3cfadee8ad7437f5ad1be21bd4ba617d19af1013a5d9edd2e065116413bb2474317a4fcbb63aca3c", 0xd0}, {&(0x7f0000000880)="ff021c671a3e59a51925106b88dc3a46c39602ad9e787bf281f4e92bcb0c119c916efb6c4066eb1ef087a3c295b5e884d5ec769d44bc8aa5d8112bd8efea5e7e2e5538e2ddd2c7dd0459028e27bb88373069416235d93824f4c90d7621025f9cc264acf0f0086ddae934d433855d6347229665b8f1d6190cd55536228c1ef5c9b7ab46c5cf5e43fd445516a73c59b52ad0e2424a0c71944975cb138cb45bbbef4949fa6a59344eff46303d0c5a7c8379dd16da40d93c3e9041228bf6eb4259b9d71f9af7966dad6106d8a5c4dcf5b900d7bc2d31c40e7aa72357d85a058c5510e3d423d7681317899bb8fc6a5e", 0xed}, {&(0x7f0000000540)="10fafcf7482cb7497522973985a2fa25552c3ae57d34d4bcff16763d1e819a9e63706bf5eca2047d620065d85f483edac2a183c7618d2960deeeeb50477f0c7c9cc3327c1a90e7d367ef86a5615ebaea5f3c561698684d06b8456701f12ada4462024da45787a155e6545ea2c93c828377e11229102f3c0f89c07a032c5b1d584f46269932b67a60d1107962c47014d5aec5ee66b0e34b", 0x97}, {&(0x7f0000000600)="810646cb520d91616c471e0e1891490337b79546c9bd5459ce381c341fcd47d2eae9d0f8c94ff23c070939a8c7f2655d4300530e1efc6c1400b5ffdfbd6fcee5e253e24a650639a502a90729", 0x4c}], 0x5}, 0x0) sendmsg$IPSET_CMD_CREATE(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000000c00078008001140000000000d0003006c6973743a73657400000000050001000700000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b0000000034a060d87137a8a01c068e61ccaa63fa6f964a6e0169c1c181b80b13617593fe08d2ec"], 0x60}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x8) 1m1.336742152s ago: executing program 0 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmmsg$inet6(r1, &(0x7f00000004c0)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000ffffac1414aa", @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00)'], 0x50}}], 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x1, 0x4, 0x6ca4dfaf31dc9b21, 0x0, 0x0, {0xe, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'veth0_vlan\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001980)=@raw={'raw\x00', 0x3c1, 0x3, 0x440, 0x148, 0x168, 0x9, 0x148, 0xb, 0x370, 0x250, 0x250, 0x370, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [0x0, 0xffffffff], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x100, 0x148, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connmark={{0x30}, {0x4, 0x3f, 0x1}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x228, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@private0, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x13}}, [0xffffffff, 0xffffff00], @ipv4=@multicast2, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0x11, 0x4}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4a0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x33, &(0x7f0000000600)={@local, @empty, @void, {@llc={0x4, {@snap={0x1, 0xaa, "f5e8", "0df86a", 0x8914, "53c1ec15f655e34ccb89c0bca35b57dba985e34dad9d047373ca2f1f"}}}}}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r7, &(0x7f0000000600)="05031600d3fc140000004788031c09103c28e808ba4217694d538df38de3a4f593c81248f4c0a159e43e99831f769d2f856f0b9b", 0x34, 0x814, &(0x7f0000000140)={0x11, 0x86dd, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0xb8, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9f6}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x400}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x140}}, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000200)={0xffffff, 0x4}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000016500000000c0a010300000000000000010000000000000040000000000900010073797a30000000002800038024000080200001801a00010010c4e3257eaa66a5725a38cd58d26115453baa910be00000140000001000010000000000000000000000000a"], 0xd4}}, 0x0) write(r9, &(0x7f0000000000)="240000001a00590214f9f407000904101f00000000000100000200000800040001000000", 0x24) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r5) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r11, &(0x7f0000000080)=[{0x0}, {&(0x7f0000000980)=""/4096, 0x734}], 0x2) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$TUNSETVNETHDRSZ(r11, 0x400454d8, &(0x7f0000000100)=0x730) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 1m0.948273117s ago: executing program 2 (id=978): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000001a40)={{0xffffffffffffffff, &(0x7f0000000000)='/proc/sys/net/ip]\x11tiox_control\x00'/42, 0x200, 0x0, 0x7ff, 0x0, 0x0}, 0x0, 0x0}) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) (async) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000500)={'bridge0\x00'}) 58.273419277s ago: executing program 1 (id=979): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r1 = openat$cgroup_devices(r0, 0x0, 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0xa) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f00000064c0)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x8004}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/4137, 0x1029}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000080)=""/82, 0x52}, {&(0x7f0000000340)=""/88, 0x58}, {&(0x7f0000000200)=""/209, 0xd1}], 0x5}, 0x400000}, {{0x0, 0x0, 0x0}}], 0x4, 0x30100, 0x0) 55.518156744s ago: executing program 3 (id=980): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$TIPC_NL_MON_GET(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffff8001}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ff73bf2294d190ffff002f00"], 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x40000) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1a0, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6}, {0x5}, {0x6, 0x11, 0xe}, {0x8, 0xb, 0x7cd}}, {{@nsim={{0x66}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7ff}, {0x6, 0x16, 0x40}, {0x5}, {0x6, 0x11, 0x1}, {0x8, 0xb, 0xffff}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xff}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x13}, {0x8, 0xb, 0x4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3e4}, {0x6, 0x16, 0x4d}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x9dbd}, {0x8, 0xb, 0x400}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x16, 0xaa3}, {0x5}, {0x6, 0x11, 0x101}, {0x8, 0xb, 0x40}}]}, 0xffffffffffffffd0}, 0x1, 0x0, 0x0, 0x40054}, 0x44004814) 54.643527975s ago: executing program 0 (id=981): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000140)=0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001640)=ANY=[@ANYBLOB="9feb010020000000010000001800000019000000010000000000000001"], 0x0, 0x3a, 0x0, 0x1, 0x6}, 0x28) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, 0x1, 0x4, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_MODE={0xa, 0x2, {0x7, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x65}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000180)={r1}, &(0x7f0000000080)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r6, 0x29, 0x16, 0x0, &(0x7f0000000240)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x2c, r5, 0x2, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x2c}}, 0x4800) 52.982961335s ago: executing program 3 (id=982): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}}, 0x0) 51.329509101s ago: executing program 0 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000200100000c000280080002006c6f000018000380040001000800020005000000080004001f000000"], 0x38}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000007500)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x6, @private1, 0x2}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000480)="36701f", 0x3}], 0x1}}, {{&(0x7f0000000680)={0xa, 0x4e22, 0x1a10479d, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x81}, 0x1c, &(0x7f0000001b00)=[{&(0x7f00000006c0)="b7ead8f46a", 0x5}, {0x0}], 0x2}}], 0x2, 0x4000044) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000004700)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@private, @in6=@remote}}, {{@in=@multicast1}, 0x0, @in=@multicast2}}, &(0x7f0000000100)=0xe8) 50.328937418s ago: executing program 3 (id=984): getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0xa9c, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={r1, 0x2c, &(0x7f0000000100)=[@in6={0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xff}, @in={0x2, 0x4e24, @broadcast}]}, &(0x7f0000000180)=0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x188, r2, 0x100, 0x70bd25, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000001}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xf}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xe}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x81}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb8}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8051}, 0x94) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000480)=""/4096, &(0x7f0000001480)=0x1000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r3, &(0x7f0000001680)={&(0x7f00000014c0), 0xc, &(0x7f0000001640)={&(0x7f0000001500)={0x128, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5}}]}, 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x20044001) pipe(&(0x7f00000016c0)={0xffffffffffffffff}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000001700), 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r6, 0x10f, 0x86) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001780), r3) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000017c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x30, r7, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0xc001) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001940)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000001980)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r9, &(0x7f0000001a80)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x50, r10, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xb}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x0) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r3, 0x4058587a, &(0x7f0000001c80)={{r5, &(0x7f0000001ac0)='pci\x00', 0xd469afcd7bf6be3d, &(0x7f0000001b00)={@_ha_fsid={[0x9, 0x7fffffff]}, {0x2, 0xf4e1, 0x8001, 0xdf0e}}, 0x5, &(0x7f0000001b40)={@_ha_fsid}, &(0x7f0000001b80)=0x101}, {[0x6, 0x55d5cbde, 0x4, 0x6]}, 0x2, 0xa9, &(0x7f0000001bc0)=""/169}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r13, 0x84, 0x78, &(0x7f0000001d00), 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000001d40)={r1}, &(0x7f0000001d80)=0x8) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000001dc0)=@int=0xfffffff8, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r4, 0x84, 0x66, &(0x7f0000001e00)={0x0, 0x4}, &(0x7f0000001e40)=0x8) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001ec0), r9) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001f40)={&(0x7f0000001f00)={0x3c, r14, 0x800, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1e}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2c}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x20000001) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000001fc0)={r1, @in={{0x2, 0x4e24, @loopback}}, 0x1, 0x5, 0x3, 0x4, 0x15, 0x6, 0x9}, 0x9c) 50.158781025s ago: executing program 1 (id=985): r0 = socket$inet(0x2, 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r1, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xfffffdef}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000000000000000000071f000a14000000020a010100000000000000000a000003140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) write$cgroup_subtree(r2, &(0x7f0000000700)=ANY=[], 0xfe33) r4 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="170000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000002f2bfb18ea7a14366a00"/37], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800ca000000000000000000850000008a0000009500000000000000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x5, 0x3) r8 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000030000000000001302000000002e0e000f0c72192316784f02c3df81a7cca131354007a87078b80d406d1f29f62e249aebde0df4e92adfcaaa625d7aa225c563a8fda5155b587b0a00fc8342483ac742421469c6ccdf7886f52092d2ffcb7b0ca4c46b6d66294fd45241d56275a816bc31005c2bd63137f7c25d3a8a404a3702c37e6d609af342b7553a1aabf96ba30cd587642c4e0d1f78ad318b668432ac9de62d08bdc5e5f1d1a67f01d670eed23669da05b68d5d6bae6721dd68fe0970d851f047f47bee6d38000000"], 0x0, 0x28}, 0x20) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa5a01f3c2f13608060001080006040002aaaaaa8aaaaaac1414bbaaaaaaaaaaaaac1414bb"], 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x4a, &(0x7f0000000180)=0x6, 0x4) ioctl$sock_inet6_tcp_SIOCINQ(r9, 0x541b, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x2c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0x8, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x4, 0xe}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014}, 0x4004810) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00002bbd7000fedbdf255500000008000300", @ANYRES32=r12, @ANYBLOB="00000000000000220000000000147bf5da74187bb1f2fe2dc0be312556a000056022b450ef312301de50af891108fa1e0360d01705594acd62e8c232fbc9ca10e5d7b0af829fff0d0e76eaba06"], 0x28}, 0x1, 0x0, 0x0, 0x20000055}, 0x8004) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) 49.735293107s ago: executing program 0 (id=986): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r0, 0x400, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x1, 0x39}}}}, [@key_params=[@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x4}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0x18, 0x34, @random="2849e4bd121beaab76f24d0bb75f966811f23c87"}, @key_params=[@NL80211_ATTR_KEY_SEQ={0xf, 0xa, "f311b38587c5d3f2bd5fe1"}]]}, 0x7c}, 0x1, 0x0, 0x0, 0x8a1}, 0x804) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r2) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x3}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}]}]}, 0x4c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005002100000000080500010004"], 0x4c}}, 0x0) (async) sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001480)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000140001cd060001000a00000008000500010000004800028014000100000000000000000000000000000000010600020050000000080003000000000008000400010000000800050000000000080006000000000006000e004e210000"], 0x70}, 0x1, 0x0, 0x0, 0x4806}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3}, {0xc, 0x8, {0x3}}}}]}]}, 0x48}}, 0x0) 49.300784058s ago: executing program 2 (id=987): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000ffe500020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000280)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5}]}, 0x30}}, 0x4000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8ee}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r2, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8ee}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x81) (async) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r2, 0x4, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x81) 49.281205594s ago: executing program 3 (id=988): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000080000000300000000000000", @ANYRES32, @ANYBLOB="f81f3f38e7e4b500000000000000000000000000000000000000386d4b4ab4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000200"/28], 0x48) r1 = accept4$unix(r0, &(0x7f0000000000)=@abs, &(0x7f0000000080)=0x6e, 0x80000) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x23, 0x0, &(0x7f0000000080)=0xc00) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x9, 0x4, 0xd1, 0xb}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r3, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r4}, 0xc) sendfile(r1, r0, &(0x7f0000000140)=0x5, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet(0xa, 0x801, 0x84) connect$inet(r9, 0x0, 0x0) listen(r9, 0x8) r10 = accept4(r9, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r10, 0x84, 0xa, &(0x7f0000001980)={0x9, 0x4, 0x200, 0x3, 0x6, 0x32e35e75, 0x7, 0x80000001}, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) write(r11, &(0x7f0000000700)="ffffffffffff0011223344554305000f320018000001001122334455001122334455", 0x22) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="f80000000000000000000000fddbdf25000000000000000000000000d380af3100000001fc0200000000000000000000000000014ed400a0e724a4172301014e2400190a0080e0210400ff", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa000000000000000000000000000004d33c0000000a010102000000000000000000000000080000000000000004000000000000000a000000000000000200000000000000010000800000000008000000000000005c00000000000000090000000000000004000000000000007d9d000000000000080000000000000094000000000000000800000001000000050000002dbd7000000000000200020120000000000000000800180001000080"], 0xf8}, 0x1, 0x0, 0x0, 0xc004}, 0x4000015) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x22, 0x5b, "0444ed3973da3c3c5cec9cae9abad9a307b1d6be94a85689b700bb667b53"}]}, 0x40}}, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r15, @ANYBLOB="1d003300d0000900080211000001080211000000505050505050"], 0x44}}, 0x0) 47.095095406s ago: executing program 4 (id=989): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @chandef_params, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r4, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) listen(r4, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x4c, 0x1, [@m_bpf={0x48, 0xb, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x4}]}, {0x17, 0x6, "8c5e889680ea699f0286c6926deecbcf795b71"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x60}}, 0x20040000) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000004) setsockopt$packet_int(r3, 0x107, 0x8, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000680)=[{0x1, 0x4, 0xf, 0xa}, {0x3, 0x1, 0x2, 0x6}, {0x0, 0x1, 0xb, 0xd}, {0x0, 0x1, 0xa, 0xa}], 0x10, 0x1ff}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002f010000100001800a000200626f6e6430000000140002800800010000000000080002"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) 45.268875142s ago: executing program 2 (id=990): r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c114}, 0x20000040) r5 = socket(0x6, 0x6, 0x7fffffff) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=@getchain={0x24, 0x66, 0x0, 0x0, 0x25dfdbff}, 0x24}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000200)={0x2, 'bond_slave_0\x00', {0xfffffffb}, 0x3}) getsockname$packet(r0, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendto$inet(r5, &(0x7f0000000180)="2ce493d1f71cad407d679e69f01fcf17d1ff4dac6332224284421af2bcfa1e1134", 0x21, 0x20008011, &(0x7f00000001c0)={0x2, 0x4e23, @local}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1b000000190001001a848efa961fb2d82d"], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x4040048) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000010000104000000000001000000000000", @ANYRES32=r6, @ANYBLOB="000100006c3000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r6, @ANYBLOB="0f04ea2f4cbec51196a925f74008a42fc59e33ee257d2012f7d9e8fb03546de0e07b15215a83b7e7b35465328c9973f18351f761ea6cdf34cac5375c2a1cb7a10c9ed589e427f7ddda5294e7a9e18f0dff73fe4542ed962d66cb9d4f72f1640b8d20fc96213ac462e55574c709878b8b7aad5502457d88"], 0x3c}}, 0xeb64d656001f6f32) 43.822023322s ago: executing program 0 (id=991): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000140)) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x90}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4048000) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f0000000140)) (async) sendmsg$NFNL_MSG_ACCT_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xfffffff7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x90}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x4048000) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x0, 0x201a0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_PORT={0x6, 0x2, 0x1, 0x0, 0x4e24}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x44}}, 0x800) (async) 42.58422669s ago: executing program 3 (id=992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/250, 0xfa}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x500, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x48) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r8, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001640)=""/4082, 0xff2}], 0x1}, 0x2}], 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28f60000da2a3fac35b6f8b261809f2d0c058d86f5f858189e891e90342d1149da11307584b6981cc79730860a942e77545bcac8db10d4182336e1a410374fdd7c", @ANYRES16=r9, @ANYBLOB="20002bbd7000fbdbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004000) syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c204"], 0x0) 41.297386758s ago: executing program 4 (id=993): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000000140)={0x3c, @empty, 0x4e24, 0x3, 'rr\x00', 0x18, 0x7, 0x12}, 0x2c) socket$packet(0x11, 0x2, 0x300) socket(0x2c, 0x6, 0xdc63) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRESOCT=r4], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0x0) 40.199069168s ago: executing program 1 (id=994): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x14, 0x3, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) 40.050572436s ago: executing program 2 (id=995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0x0, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x998ed4ed88999c67}, 0x4c840) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x2, 0xfff3}, {0x0, 0xfff3}, {0xfff1, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @rand_addr=' \x01\x00'}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0x0, 0xff000000]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x25dfdbfb, {}, [@IFLA_MASTER={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x4) (async) 40.050109102s ago: executing program 0 (id=996): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x1, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, 0xffffffffffffffff, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r4, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$rds(0x15, 0x5, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r5, &(0x7f0000001b00)="a6", 0xffb8, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffc, @loopback, 0xfffffffd}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x30, r6, 0x1, 0x70bd27, 0x25dfdbfb, {{0x12}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x600}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008084}, 0x40) 36.2303469s ago: executing program 1 (id=997): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', 0x0}) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000000), r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7c0000001000010400e5ffff0200000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a48001280110001006272696467655f736c61766500000000300005800400180005001e00070000000500090001000000080025008000000006001f00060000000500010003000000140003006272696467655f736c6176655f30"], 0x7c}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000200)={0x54, r2, 0xa9c62c888825097f, 0x70bd2d, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40004}, 0x884) 0s ago: executing program 32 (id=992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r1 = socket$packet(0x11, 0x3, 0x300) readv(r0, &(0x7f0000000840)=[{&(0x7f0000000440)=""/250, 0xfa}], 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2], 0x20}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x500, 0x0, 0x0, '\x00', 0x0, r7, 0x1, 0x3}, 0x48) sendmsg$tipc(r6, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x845) close(r6) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r8, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r4, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001640)=""/4082, 0xff2}], 0x1}, 0x2}], 0x1, 0x0, 0x0) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28f60000da2a3fac35b6f8b261809f2d0c058d86f5f858189e891e90342d1149da11307584b6981cc79730860a942e77545bcac8db10d4182336e1a410374fdd7c", @ANYRES16=r9, @ANYBLOB="20002bbd7000fbdbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000080}, 0x4004000) syz_emit_ethernet(0x4e, &(0x7f00000019c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa86dd6080a08300180000fc010000000000000000000000000000fe8000000000000000000000000000bb0002000000000000040100040100c204"], 0x0) kernel console output (not intermixed with test programs): ode [ 78.577895][ T5612] team0: Port device team_slave_0 added [ 78.602775][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.603315][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.603443][ T5618] bridge_slave_0: entered allmulticast mode [ 78.605394][ T5618] bridge_slave_0: entered promiscuous mode [ 78.608389][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.608509][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.608624][ T5619] bridge_slave_1: entered allmulticast mode [ 78.614231][ T5619] bridge_slave_1: entered promiscuous mode [ 78.631116][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.631223][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.631346][ T5620] bridge_slave_1: entered allmulticast mode [ 78.634024][ T5620] bridge_slave_1: entered promiscuous mode [ 78.653886][ T5612] team0: Port device team_slave_1 added [ 78.654489][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.654593][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.654714][ T5618] bridge_slave_1: entered allmulticast mode [ 78.656771][ T5618] bridge_slave_1: entered promiscuous mode [ 78.731431][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.768271][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.770608][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.813409][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.815617][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.829094][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.829110][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.829131][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.835524][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.838865][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.871381][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.871397][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.871424][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.886301][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.920146][ T5620] team0: Port device team_slave_0 added [ 78.965672][ T5616] team0: Port device team_slave_0 added [ 78.967940][ T5620] team0: Port device team_slave_1 added [ 78.994362][ T5619] team0: Port device team_slave_0 added [ 78.996315][ T5616] team0: Port device team_slave_1 added [ 79.032501][ T5618] team0: Port device team_slave_0 added [ 79.035104][ T5619] team0: Port device team_slave_1 added [ 79.059447][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.059463][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.059483][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.083910][ T5612] hsr_slave_0: entered promiscuous mode [ 79.085024][ T5612] hsr_slave_1: entered promiscuous mode [ 79.089133][ T5618] team0: Port device team_slave_1 added [ 79.105560][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.105575][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.105596][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.138243][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.138260][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.138280][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.160210][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.160228][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.160251][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.162108][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.162121][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.162145][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.164149][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.164162][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.164182][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.166221][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.166232][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.166253][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.205067][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.205083][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.205104][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.440316][ T5616] hsr_slave_0: entered promiscuous mode [ 79.441014][ T5616] hsr_slave_1: entered promiscuous mode [ 79.441718][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 79.441778][ T5616] Cannot create hsr debugfs directory [ 79.465149][ T5620] hsr_slave_0: entered promiscuous mode [ 79.466291][ T5620] hsr_slave_1: entered promiscuous mode [ 79.467042][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 79.467059][ T5620] Cannot create hsr debugfs directory [ 79.507358][ T5619] hsr_slave_0: entered promiscuous mode [ 79.508041][ T5619] hsr_slave_1: entered promiscuous mode [ 79.508504][ T5619] debugfs: 'hsr0' already exists in 'hsr' [ 79.508524][ T5619] Cannot create hsr debugfs directory [ 79.517267][ T5618] hsr_slave_0: entered promiscuous mode [ 79.518713][ T5618] hsr_slave_1: entered promiscuous mode [ 79.519438][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 79.519456][ T5618] Cannot create hsr debugfs directory [ 79.952252][ T5612] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.964028][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.004499][ T5612] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.008527][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.043598][ T5612] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.046460][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.047721][ T5612] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.051737][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.137125][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.151457][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.152266][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.158362][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.160471][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.172326][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.175502][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.187422][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.294771][ T5620] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.298151][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.298978][ T5620] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.305813][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.324654][ T5620] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.340261][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.343425][ T5614] Bluetooth: hci0: command tx timeout [ 80.343457][ T5614] Bluetooth: hci1: command tx timeout [ 80.357886][ T5620] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.366750][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.450685][ T5618] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.465901][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.466927][ T5618] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.470659][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.501280][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.503416][ T5623] Bluetooth: hci3: command tx timeout [ 80.508105][ T5618] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.520205][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.538864][ T5618] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.551456][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.583609][ T5623] Bluetooth: hci4: command tx timeout [ 80.592996][ T5623] Bluetooth: hci2: command tx timeout [ 80.596113][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.637808][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.641667][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.651605][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.668135][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.671792][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.690070][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.695164][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.699412][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.699553][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.729139][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.735758][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.748058][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.748153][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.761910][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.791607][ T115] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.791706][ T115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.845488][ T115] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.846044][ T115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.883282][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.967680][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.009380][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.009499][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.039492][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.058794][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.058910][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.185903][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.238311][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.238432][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.284538][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.300085][ T1113] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.300209][ T1113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.420904][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.480162][ T4331] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.480280][ T4331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.534720][ T4331] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.534839][ T4331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.067024][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.237418][ T5612] veth0_vlan: entered promiscuous mode [ 82.284998][ T5612] veth1_vlan: entered promiscuous mode [ 82.401707][ T5612] veth0_macvtap: entered promiscuous mode [ 82.425025][ T5623] Bluetooth: hci1: command tx timeout [ 82.425060][ T5623] Bluetooth: hci0: command tx timeout [ 82.460461][ T5612] veth1_macvtap: entered promiscuous mode [ 82.562540][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.583807][ T5614] Bluetooth: hci3: command tx timeout [ 82.600917][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.663879][ T5614] Bluetooth: hci2: command tx timeout [ 82.663914][ T5614] Bluetooth: hci4: command tx timeout [ 82.691341][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.920416][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.993979][ T60] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.093364][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.093417][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.093453][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.178182][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.178206][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.220969][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.296120][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.296143][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.422525][ T5620] veth0_vlan: entered promiscuous mode [ 83.460533][ T5612] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.479073][ T5620] veth1_vlan: entered promiscuous mode [ 83.591340][ T5618] veth0_vlan: entered promiscuous mode [ 83.628159][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.640797][ T5618] veth1_vlan: entered promiscuous mode [ 83.689470][ T5620] veth0_macvtap: entered promiscuous mode [ 83.742589][ T5620] veth1_macvtap: entered promiscuous mode [ 83.796713][ T5616] veth0_vlan: entered promiscuous mode [ 83.829980][ T5618] veth0_macvtap: entered promiscuous mode [ 83.851194][ T5618] veth1_macvtap: entered promiscuous mode [ 83.865543][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.867066][ T5616] veth1_vlan: entered promiscuous mode [ 83.896424][ T5619] veth0_vlan: entered promiscuous mode [ 83.901906][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.953312][ T963] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.953358][ T963] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.953882][ T963] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.953922][ T963] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.974866][ T5619] veth1_vlan: entered promiscuous mode [ 83.981003][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.020289][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.077913][ T1113] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.078018][ T1113] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.078053][ T1113] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.078085][ T1113] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.085591][ T5616] veth0_macvtap: entered promiscuous mode [ 84.116462][ T5616] veth1_macvtap: entered promiscuous mode [ 84.210777][ T5619] veth0_macvtap: entered promiscuous mode [ 84.281153][ T5619] veth1_macvtap: entered promiscuous mode [ 84.303843][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.303863][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.329004][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.379739][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.428450][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.428472][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.487313][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.503062][ T5623] Bluetooth: hci0: command tx timeout [ 84.503098][ T5623] Bluetooth: hci1: command tx timeout [ 84.511062][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.511085][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.527904][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.560049][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.560074][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.593659][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.595241][ T36] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.595309][ T36] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.595345][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.649426][ T5828] netlink: 56 bytes leftover after parsing attributes in process `syz.2.10'. [ 84.663903][ T5614] Bluetooth: hci3: command tx timeout [ 84.704676][ T963] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.706957][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.707003][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.707039][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.751745][ T5614] Bluetooth: hci4: command tx timeout [ 84.751782][ T5614] Bluetooth: hci2: command tx timeout [ 84.856224][ T13] IPVS: starting estimator thread 0... [ 84.944630][ T5836] IPVS: using max 26 ests per chain, 62400 per kthread [ 84.965095][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.965121][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.220600][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.220623][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.247152][ T5846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 85.478822][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.478846][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.536105][ T5842] mac80211_hwsim hwsim7 ÿ: renamed from wlan1 (while UP) [ 85.742383][ T5857] syz.4.5 uses obsolete (PF_INET,SOCK_PACKET) [ 86.016041][ T1113] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.016065][ T1113] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.295761][ T5875] Zero length message leads to an empty skb [ 86.545806][ T5879] netlink: 'syz.4.17': attribute type 21 has an invalid length. [ 86.545967][ T5879] netlink: 156 bytes leftover after parsing attributes in process `syz.4.17'. [ 86.732487][ T5884] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 86.742252][ T5882] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.766336][ T5882] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1'. [ 86.967491][ T25] cfg80211: failed to load regulatory.db [ 87.010247][ T5897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.22'. [ 87.251745][ T5902] tipc: Started in network mode [ 87.251781][ T5902] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 87.271401][ T5902] tipc: Enabled bearer , priority 10 [ 87.308675][ T5902] Cannot find add_set index 0 as target [ 87.310388][ T5882] ip_tables: iptables: counters copy to user failed while replacing table [ 87.431667][ T5882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.458169][ T5882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.488722][ T5910] netlink: 64 bytes leftover after parsing attributes in process `syz.2.24'. [ 87.522634][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 87.534371][ T5913] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 87.850918][ T5925] netlink: 'syz.2.29': attribute type 1 has an invalid length. [ 87.850942][ T5925] netlink: 208 bytes leftover after parsing attributes in process `syz.2.29'. [ 87.956021][ T1113] IPVS: starting estimator thread 0... [ 88.120118][ T5935] sctp: [Deprecated]: syz.2.31 (pid 5935) Use of int in maxseg socket option. [ 88.120118][ T5935] Use struct sctp_assoc_value instead [ 88.158632][ T5927] IPVS: Scheduler module ip_vs_mh not found [ 88.158684][ T5928] IPVS: using max 23 ests per chain, 55200 per kthread [ 88.394441][ T5729] tipc: Node number set to 4269801488 [ 88.436949][ T5927] IPVS: Scheduler module ip_vs_mh not found [ 88.458362][ T5947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.458379][ T5947] IPv6: NLM_F_CREATE should be set when creating new route [ 88.458472][ T5947] IPv6: NLM_F_CREATE should be set when creating new route [ 88.458500][ T5947] IPv6: NLM_F_CREATE should be set when creating new route [ 88.473451][ T5947] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.491485][ T5947] ip_tables: iptables: counters copy to user failed while replacing table [ 88.522747][ T5947] netlink: 'syz.1.33': attribute type 3 has an invalid length. [ 88.748999][ T5927] IPVS: Scheduler module ip_vs_mh not found [ 88.787282][ T5927] IPVS: Scheduler module ip_vs_mh not found [ 88.995036][ T5964] wg0 speed is unknown, defaulting to 1000 [ 89.030650][ T5965] erspan0: entered promiscuous mode [ 89.050241][ T5964] wg0 speed is unknown, defaulting to 1000 [ 89.073522][ T5964] wg0 speed is unknown, defaulting to 1000 [ 89.087118][ T5964] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 89.087153][ T5964] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 89.087187][ T5964] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 89.129612][ T5964] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 89.179507][ T5972] macvtap0: entered allmulticast mode [ 89.179531][ T5972] veth0_macvtap: entered allmulticast mode [ 89.226704][ T5964] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 89.345490][ T5964] wg0 speed is unknown, defaulting to 1000 [ 89.351498][ T5964] wg0 speed is unknown, defaulting to 1000 [ 89.364710][ T5964] wg0 speed is unknown, defaulting to 1000 [ 89.370646][ T5964] wg0 speed is unknown, defaulting to 1000 [ 89.376423][ T5964] wg0 speed is unknown, defaulting to 1000 [ 111.006754][ T5992] __nla_validate_parse: 5 callbacks suppressed [ 111.006776][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 111.020179][ T5994] Cannot find set identified by id 0 to match [ 111.282687][ T5999] netlink: 48 bytes leftover after parsing attributes in process `syz.4.49'. [ 111.700856][ T6024] Bluetooth: MGMT ver 1.23 [ 111.722173][ T6028] Cannot find del_set index 0 as target [ 111.729991][ T6024] Bluetooth: hci0: unsupported parameter 5134 [ 111.730011][ T6024] Bluetooth: hci0: unsupported parameter 8192 [ 111.730022][ T6024] Bluetooth: hci0: unsupported parameter 5134 [ 111.730032][ T6024] Bluetooth: hci0: unsupported parameter 8192 [ 111.939241][ T6036] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 112.586207][ T6064] syzkaller0: entered promiscuous mode [ 112.586233][ T6064] syzkaller0: entered allmulticast mode [ 113.100301][ T6080] Driver unsupported XDP return value 0 on prog (id 21) dev N/A, expect packet loss! [ 113.227073][ T6082] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 113.227217][ T6082] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 113.302396][ T6099] xt_TPROXY: Can be used only with -p tcp or -p udp [ 113.361329][ T6096] openvswitch: netlink: Duplicate or invalid key (type 0). [ 113.488936][ T6105] netlink: 'syz.0.80': attribute type 3 has an invalid length. [ 113.781528][ T6117] xt_NFQUEUE: number of total queues is 0 [ 114.121596][ T6131] netlink: 20 bytes leftover after parsing attributes in process `syz.0.88'. [ 114.177053][ T6131] netlink: 'syz.0.88': attribute type 6 has an invalid length. [ 114.177076][ T6131] netlink: 72 bytes leftover after parsing attributes in process `syz.0.88'. [ 114.284972][ T6138] x_tables: unsorted entry at hook 4 [ 114.287480][ T6138] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 114.287617][ T6141] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 114.330310][ T6133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.87'. [ 114.382856][ T6141] nbd: must specify an index to disconnect [ 114.450449][ T6148] netlink: 'syz.2.92': attribute type 1 has an invalid length. [ 114.562039][ T6148] bond1: entered promiscuous mode [ 114.562678][ T6148] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.711971][ T6153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 114.725326][ T6153] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 114.725351][ T6153] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 114.776725][ T6153] bond1: (slave wireguard0): making interface the new active one [ 114.776748][ T6153] wireguard0: entered promiscuous mode [ 114.779051][ T6153] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 114.882735][ T6159] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 114.908283][ T6159] bond1 (unregistering): Released all slaves [ 115.102026][ T6186] openvswitch: netlink: Tunnel attr 347 out of range max 16 [ 115.105410][ T6187] openvswitch: netlink: Tunnel attr 347 out of range max 16 [ 115.108276][ T6186] netlink: 260 bytes leftover after parsing attributes in process `syz.0.97'. [ 115.170540][ T6171] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 115.180086][ T6171] bond1 (unregistering): Released all slaves [ 115.293315][ T6196] x_tables: duplicate underflow at hook 1 [ 115.301756][ T6189] syzkaller0: entered promiscuous mode [ 115.301776][ T6189] syzkaller0: entered allmulticast mode [ 115.343813][ T6203] x_tables: duplicate underflow at hook 1 [ 115.471004][ T6208] xt_l2tp: missing protocol rule (udp|l2tpip) [ 116.057080][ T6238] netlink: 36 bytes leftover after parsing attributes in process `syz.1.111'. [ 116.639525][ T6267] netlink: 17 bytes leftover after parsing attributes in process `syz.3.114'. [ 116.702350][ T6274] netlink: 5 bytes leftover after parsing attributes in process `syz.1.115'. [ 116.857434][ T6269] syz.4.116 (6269) used greatest stack depth: 18088 bytes left [ 117.046485][ T6290] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.119'. [ 117.046650][ T6290] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 117.049468][ T6290] 0ªX¹¦Dö»: entered allmulticast mode [ 117.049535][ T6283] netlink: 96 bytes leftover after parsing attributes in process `syz.4.117'. [ 117.058008][ T6288] netlink: 'syz.2.119': attribute type 1 has an invalid length. [ 117.058027][ T6288] netlink: 224 bytes leftover after parsing attributes in process `syz.2.119'. [ 117.508410][ T6314] FAULT_INJECTION: forcing a failure. [ 117.508410][ T6314] name failslab, interval 1, probability 0, space 0, times 0 [ 117.508445][ T6314] CPU: 0 UID: 0 PID: 6314 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(full) [ 117.508467][ T6314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 117.508478][ T6314] Call Trace: [ 117.508485][ T6314] [ 117.508494][ T6314] dump_stack_lvl+0xe8/0x150 [ 117.508530][ T6314] should_fail_ex+0x410/0x560 [ 117.508560][ T6314] should_failslab+0xa8/0x100 [ 117.508582][ T6314] ? dst_alloc+0x105/0x170 [ 117.508599][ T6314] kmem_cache_alloc_noprof+0xa1/0x600 [ 117.508626][ T6314] ? dst_alloc+0x105/0x170 [ 117.508642][ T6314] ? fib_lookup+0x76/0x440 [ 117.508661][ T6314] dst_alloc+0x105/0x170 [ 117.508682][ T6314] ip_route_input_rcu+0x20ca/0x3190 [ 117.508713][ T6314] ? __pfx_ip_route_input_rcu+0x10/0x10 [ 117.508757][ T6314] ? kasan_save_track+0x4f/0x80 [ 117.508775][ T6314] ? kasan_save_track+0x3e/0x80 [ 117.508797][ T6314] ? ip_route_input_noref+0xad/0x270 [ 117.508817][ T6314] ip_route_input_noref+0x17c/0x270 [ 117.508839][ T6314] ? __pfx_ip_route_input_noref+0x10/0x10 [ 117.508865][ T6314] ? ipt_do_table+0x2b9/0x15d0 [ 117.508890][ T6314] ? __pfx_ipt_do_table+0x10/0x10 [ 117.508916][ T6314] ip_rcv_finish_core+0x593/0x1c00 [ 117.508955][ T6314] ip_rcv_finish+0x14c/0x2a0 [ 117.508990][ T6314] NF_HOOK+0x336/0x3c0 [ 117.509013][ T6314] ? __pfx_ip_rcv_finish+0x10/0x10 [ 117.509032][ T6314] ? NF_HOOK+0x9e/0x3c0 [ 117.509052][ T6314] ? __pfx_NF_HOOK+0x10/0x10 [ 117.509073][ T6314] ? __pfx_ip_rcv_finish+0x10/0x10 [ 117.509100][ T6314] ? netif_receive_skb+0x102/0xbf0 [ 117.509116][ T6314] ? __pfx_ip_rcv+0x10/0x10 [ 117.509136][ T6314] netif_receive_skb+0x45b/0xbf0 [ 117.509158][ T6314] ? __pfx_netif_receive_skb+0x10/0x10 [ 117.509179][ T6314] ? tun_rx_batched+0x185/0x790 [ 117.509200][ T6314] tun_rx_batched+0x1de/0x790 [ 117.509223][ T6314] ? __pfx_tun_rx_batched+0x10/0x10 [ 117.509241][ T6314] ? lock_acquire+0x115/0x350 [ 117.509264][ T6314] ? tun_get_user+0x23ba/0x44d0 [ 117.509282][ T6314] ? __local_bh_enable_ip+0xd6/0x140 [ 117.509302][ T6314] ? tun_get_user+0x27b0/0x44d0 [ 117.509321][ T6314] tun_get_user+0x2be0/0x44d0 [ 117.509351][ T6314] ? tun_get_user+0x27b0/0x44d0 [ 117.509367][ T6314] ? aa_file_perm+0x18b/0x15f0 [ 117.509392][ T6314] ? aa_file_perm+0x4ed/0x15f0 [ 117.509412][ T6314] ? __pfx_tun_get_user+0x10/0x10 [ 117.509432][ T6314] ? __lock_acquire+0x747/0x2de0 [ 117.509450][ T6314] ? kstrtoull+0x137/0x1d0 [ 117.509474][ T6314] ? ref_tracker_alloc+0x341/0x4b0 [ 117.509493][ T6314] ? lock_acquire+0x115/0x350 [ 117.509510][ T6314] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 117.509532][ T6314] ? lock_acquire+0x115/0x350 [ 117.509547][ T6314] ? tun_get+0x1c/0x2f0 [ 117.509569][ T6314] ? tun_get+0x1c/0x2f0 [ 117.509586][ T6314] ? tun_get+0x1c/0x2f0 [ 117.509607][ T6314] tun_chr_write_iter+0x113/0x200 [ 117.509627][ T6314] vfs_write+0x612/0xba0 [ 117.509658][ T6314] ? __pfx_vfs_write+0x10/0x10 [ 117.509690][ T6314] ? __fget_files+0x2a/0x420 [ 117.509719][ T6314] ksys_write+0x150/0x270 [ 117.509743][ T6314] ? __pfx_ksys_write+0x10/0x10 [ 117.509776][ T6314] do_syscall_64+0x166/0x520 [ 117.509795][ T6314] ? trace_irq_disable+0x3b/0x140 [ 117.509810][ T6314] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.509826][ T6314] ? clear_bhb_loop+0x70/0xc0 [ 117.509846][ T6314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.509861][ T6314] RIP: 0033:0x7f2fb379e159 [ 117.509877][ T6314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.509891][ T6314] RSP: 002b:00007f2fb466c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 117.509908][ T6314] RAX: ffffffffffffffda RBX: 00007f2fb3a25fa0 RCX: 00007f2fb379e159 [ 117.509920][ T6314] RDX: 000000000000006a RSI: 0000200000000280 RDI: 0000000000000003 [ 117.509929][ T6314] RBP: 00007f2fb466c090 R08: 0000000000000000 R09: 0000000000000000 [ 117.509939][ T6314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.509948][ T6314] R13: 00007f2fb3a26038 R14: 00007f2fb3a25fa0 R15: 00007ffc7e870368 [ 117.509981][ T6314] [ 118.140516][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 118.354324][ T6339] netlink: 80 bytes leftover after parsing attributes in process `syz.1.130'. [ 118.482268][ T6343] warning: `syz.1.130' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.493756][ T6378] netlink: 12 bytes leftover after parsing attributes in process `syz.4.144'. [ 119.727288][ T6388] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 119.727476][ T6388] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.731387][ T6389] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 119.870453][ T6396] netlink: 'syz.4.151': attribute type 3 has an invalid length. [ 120.204708][ T6414] netlink: 'syz.4.155': attribute type 11 has an invalid length. [ 120.204731][ T6414] netlink: 4 bytes leftover after parsing attributes in process `syz.4.155'. [ 120.571243][ T6435] netlink: 'syz.4.162': attribute type 1 has an invalid length. [ 120.660723][ T6444] openvswitch: netlink: nsh attr 1 has unexpected len 4 expected 8 [ 120.680538][ T6439] netlink: 'syz.4.162': attribute type 4 has an invalid length. [ 120.778443][ T6435] bond1: entered promiscuous mode [ 120.782144][ T6435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.891590][ T6449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.892051][ T6449] bond1: (slave xfrm1): The slave device specified does not support setting the MAC address [ 120.892072][ T6449] bond1: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 120.934771][ T6449] bond1: (slave xfrm1): making interface the new active one [ 120.934796][ T6449] xfrm1: entered promiscuous mode [ 120.959272][ T6449] bond1: (slave xfrm1): Enslaving as an active interface with an up link [ 121.100239][ T6465] openvswitch: netlink: Flow key attr not present in new flow. [ 121.107118][ T6465] __nla_validate_parse: 1 callbacks suppressed [ 121.107143][ T6465] netlink: 288 bytes leftover after parsing attributes in process `syz.1.170'. [ 121.125774][ T6466] openvswitch: netlink: Flow key attr not present in new flow. [ 121.149777][ T6469] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 121.150090][ T6466] netlink: 288 bytes leftover after parsing attributes in process `syz.1.170'. [ 121.398101][ T6473] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 121.400080][ T6473] bond2 (unregistering): Released all slaves [ 121.464180][ T6485] vlan2: entered promiscuous mode [ 121.464222][ T6485] geneve1: entered promiscuous mode [ 121.464439][ T6485] vlan2: entered allmulticast mode [ 121.464453][ T6485] geneve1: entered allmulticast mode [ 121.514569][ T6482] FAULT_INJECTION: forcing a failure. [ 121.514569][ T6482] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 121.514603][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.1.173 Not tainted syzkaller #0 PREEMPT(full) [ 121.514625][ T6482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 121.514636][ T6482] Call Trace: [ 121.514645][ T6482] [ 121.514654][ T6482] dump_stack_lvl+0xe8/0x150 [ 121.514686][ T6482] should_fail_ex+0x410/0x560 [ 121.514715][ T6482] _copy_to_user+0x31/0xb0 [ 121.514744][ T6482] simple_read_from_buffer+0xe1/0x170 [ 121.514778][ T6482] proc_fail_nth_read+0x1bb/0x230 [ 121.514794][ T6482] ? common_file_perm+0x20e/0x2b0 [ 121.514822][ T6482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.514846][ T6482] ? rw_verify_area+0x24a/0x4c0 [ 121.514874][ T6482] ? tun_chr_write_iter+0x18a/0x200 [ 121.514902][ T6482] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 121.514921][ T6482] vfs_read+0x213/0xa80 [ 121.514955][ T6482] ? __pfx___mutex_lock+0x10/0x10 [ 121.514983][ T6482] ? __pfx_vfs_read+0x10/0x10 [ 121.515013][ T6482] ? __fget_files+0x2a/0x420 [ 121.515042][ T6482] ? __fget_files+0x3a2/0x420 [ 121.515067][ T6482] ? __fget_files+0x2a/0x420 [ 121.515152][ T6482] ksys_read+0x150/0x270 [ 121.515183][ T6482] ? __pfx_ksys_read+0x10/0x10 [ 121.515224][ T6482] do_syscall_64+0x166/0x520 [ 121.515249][ T6482] ? trace_irq_disable+0x3b/0x140 [ 121.515268][ T6482] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.515289][ T6482] ? clear_bhb_loop+0x70/0xc0 [ 121.515314][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.515334][ T6482] RIP: 0033:0x7fb3c355e98e [ 121.515355][ T6482] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 121.515371][ T6482] RSP: 002b:00007fb3c44fafe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 121.515393][ T6482] RAX: ffffffffffffffda RBX: 00007fb3c44fb6c0 RCX: 00007fb3c355e98e [ 121.515408][ T6482] RDX: 000000000000000f RSI: 00007fb3c44fb0a0 RDI: 0000000000000006 [ 121.515420][ T6482] RBP: 00007fb3c44fb090 R08: 0000000000000000 R09: 0000000000000000 [ 121.515433][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 121.515445][ T6482] R13: 00007fb3c3826038 R14: 00007fb3c3825fa0 R15: 00007ffc8cb9e238 [ 121.515480][ T6482] [ 121.770070][ T6493] netlink: 'syz.3.176': attribute type 8 has an invalid length. [ 121.958703][ T6506] netlink: Setting conntrack mark requires 'commit' flag. [ 121.958739][ T6506] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 122.372620][ T6526] netlink: 'syz.2.189': attribute type 1 has an invalid length. [ 122.525089][ T6521] bond1: option resend_igmp: invalid value (32767) [ 122.525119][ T6521] bond1: option resend_igmp: allowed values 0 - 255 [ 122.569553][ T6521] bond1 (unregistering): Released all slaves [ 122.819148][ T6528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 122.842230][ T6528] bond2: (slave bond3): making interface the new active one [ 122.854753][ T6528] bond2: (slave bond3): Enslaving as an active interface with an up link [ 122.860701][ T6535] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'. [ 122.888851][ T6541] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 122.956625][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.196'. [ 123.051915][ T6560] netlink: 12 bytes leftover after parsing attributes in process `syz.2.198'. [ 123.141674][ T6563] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 123.141697][ T6563] netlink: 'syz.1.199': attribute type 2 has an invalid length. [ 123.160541][ T6563] netlink: 'syz.1.199': attribute type 1 has an invalid length. [ 123.160563][ T6563] netlink: 'syz.1.199': attribute type 2 has an invalid length. [ 124.449925][ T6602] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.587867][ T6602] bridge_slave_0: left allmulticast mode [ 124.587897][ T6602] bridge_slave_0: left promiscuous mode [ 124.588468][ T6602] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.646975][ T6606] Bluetooth: hci0: unsupported parameter 5134 [ 124.647000][ T6606] Bluetooth: hci0: unsupported parameter 8192 [ 124.647012][ T6606] Bluetooth: hci0: unsupported parameter 5134 [ 124.647023][ T6606] Bluetooth: hci0: unsupported parameter 8192 [ 124.710673][ T6602] bridge_slave_1: left allmulticast mode [ 124.710701][ T6602] bridge_slave_1: left promiscuous mode [ 124.711869][ T6602] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.787365][ T6602] bond0: (slave bond_slave_0): Releasing backup interface [ 124.825640][ T6602] bond0: (slave bond_slave_1): Releasing backup interface [ 124.891845][ T6602] team0: Port device team_slave_0 removed [ 124.928421][ T6602] team0: Port device team_slave_1 removed [ 124.940324][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.940349][ T6602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.980488][ T6602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.980515][ T6602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.007058][ T6602] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 125.049043][ T5613] wg0 speed is unknown, defaulting to 1000 [ 125.159393][ T6606] team0: Port device xfrm0 added [ 125.186834][ T6607] tipc: Enabled bearer , priority 0 [ 125.256221][ T6613] gretap0: entered promiscuous mode [ 125.643657][ T6620] pim6reg: entered allmulticast mode [ 125.647936][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'. [ 125.961884][ T6633] netlink: 180 bytes leftover after parsing attributes in process `syz.1.219'. [ 126.360025][ T6650] netlink: 'syz.2.226': attribute type 12 has an invalid length. [ 126.360050][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 126.375246][ T6652] ip_tables: iptables: counters copy to user failed while replacing table [ 126.413400][ T6650] netlink: 'syz.2.226': attribute type 12 has an invalid length. [ 126.413423][ T6650] netlink: 4 bytes leftover after parsing attributes in process `syz.2.226'. [ 126.425727][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.442247][ T1157] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.442287][ T1157] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.442316][ T1157] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.650758][ T6660] netlink: 'syz.4.229': attribute type 12 has an invalid length. [ 126.833937][ T6667] syzkaller0: entered promiscuous mode [ 126.833969][ T6667] syzkaller0: entered allmulticast mode [ 126.922556][ T6665] tipc: Enabled bearer , priority 0 [ 126.970484][ T6664] tipc: Resetting bearer [ 127.032236][ T6664] tipc: Disabling bearer [ 127.454081][ T6684] netlink: 'syz.1.237': attribute type 3 has an invalid length. [ 128.077849][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 128.097915][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 128.113529][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 128.126823][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 128.139784][ T6710] netlink: 28 bytes leftover after parsing attributes in process `syz.1.248'. [ 128.144209][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 128.165565][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 128.178969][ T6704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.246'. [ 128.431801][ T6717] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 128.444561][ T6717] openvswitch: netlink: Flow key attr not present in new flow. [ 129.653338][ T6749] wg0 speed is unknown, defaulting to 1000 [ 130.152356][ T6786] siw: device registration error -23 [ 131.001030][ T6815] macsec2: entered promiscuous mode [ 131.001053][ T6815] bridge0: entered promiscuous mode [ 131.001253][ T6815] macsec2: entered allmulticast mode [ 131.001267][ T6815] bridge0: entered allmulticast mode [ 131.034899][ T6815] bridge0: port 3(macsec2) entered blocking state [ 131.035182][ T6815] bridge0: port 3(macsec2) entered disabled state [ 131.058076][ T6815] bridge0: left allmulticast mode [ 131.103885][ T6817] macsec2: entered promiscuous mode [ 131.104088][ T6817] macsec2: entered allmulticast mode [ 131.104101][ T6817] bridge0: entered allmulticast mode [ 131.105736][ T6817] bridge0: port 3(macsec2) entered blocking state [ 131.105869][ T6817] bridge0: port 3(macsec2) entered disabled state [ 131.111343][ T6817] bridge0: left allmulticast mode [ 131.259194][ T5613] bridge0: left promiscuous mode [ 131.585602][ T6828] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 131.611307][ T6828] bond4 (unregistering): Released all slaves [ 131.751885][ T6822] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 132.024772][ T6848] __nla_validate_parse: 40 callbacks suppressed [ 132.024795][ T6848] netlink: 72 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.062278][ T6849] netlink: 72 bytes leftover after parsing attributes in process `syz.3.281'. [ 132.301159][ T6855] openvswitch: netlink: VXLAN extension 317 out of range max 1 [ 132.345304][ T6862] netlink: 'syz.2.287': attribute type 3 has an invalid length. [ 132.362205][ T6862] netlink: 'syz.2.287': attribute type 3 has an invalid length. [ 132.810545][ T6878] ip_tables: iptables: counters copy to user failed while replacing table [ 132.831581][ T6878] netlink: 'syz.0.292': attribute type 4 has an invalid length. [ 132.990956][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.991023][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.210192][ T6893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.297'. [ 133.762948][ T6905] bridge1: entered allmulticast mode [ 133.851331][ T6913] netlink: 20 bytes leftover after parsing attributes in process `syz.1.300'. [ 133.851394][ T6913] openvswitch: netlink: Missing key (keys=c0, expected=100) [ 133.877059][ T6917] netlink: 'syz.3.303': attribute type 2 has an invalid length. [ 133.881180][ T6917] netlink: 344 bytes leftover after parsing attributes in process `syz.3.303'. [ 134.013486][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.1.300'. [ 134.130123][ T6923] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 135.043762][ T6944] netlink: 28 bytes leftover after parsing attributes in process `syz.0.310'. [ 135.281675][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.3.311'. [ 135.661998][ T6969] ip_tables: iptables: counters copy to user failed while replacing table [ 135.670386][ T6969] netlink: 'syz.1.317': attribute type 4 has an invalid length. [ 135.751532][ T6973] netlink: 16 bytes leftover after parsing attributes in process `syz.3.319'. [ 135.751741][ T6974] netlink: 16 bytes leftover after parsing attributes in process `syz.3.319'. [ 136.597774][ T7001] ipt_REJECT: TCP_RESET invalid for non-tcp [ 137.646276][ T7026] openvswitch: netlink: Unknown key attributes 1 [ 138.119953][ T7044] ip_tables: iptables: counters copy to user failed while replacing table [ 138.959632][ T7076] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 139.150832][ T7083] syzkaller1: entered promiscuous mode [ 139.150855][ T7083] syzkaller1: entered allmulticast mode [ 139.295839][ T7090] netlink: 'syz.1.348': attribute type 16 has an invalid length. [ 139.295863][ T7090] __nla_validate_parse: 3 callbacks suppressed [ 139.295874][ T7090] netlink: 20 bytes leftover after parsing attributes in process `syz.1.348'. [ 139.507594][ T7090] netlink: 'syz.1.348': attribute type 1 has an invalid length. [ 139.635165][ T5623] Bluetooth: hci4: link tx timeout [ 139.635244][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.640323][ T5623] Bluetooth: hci4: link tx timeout [ 139.640344][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.051925][ T5623] Bluetooth: hci4: link tx timeout [ 140.051948][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.111509][ T5623] Bluetooth: hci4: link tx timeout [ 140.111533][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.337153][ T5623] Bluetooth: hci4: link tx timeout [ 140.337175][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.743396][ T5623] Bluetooth: hci4: link tx timeout [ 140.743421][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.136143][ T7113] bond2: option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 141.168614][ T7113] bond2 (unregistering): Released all slaves [ 141.397923][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 141.397961][ T7143] netlink: 28 bytes leftover after parsing attributes in process `syz.3.356'. [ 141.547599][ T5623] Bluetooth: hci4: link tx timeout [ 141.547622][ T5623] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 141.706518][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 142.388648][ T7133] netlink: 'syz.2.355': attribute type 1 has an invalid length. [ 142.503448][ T7138] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'. [ 142.656932][ T7241] IPv6: NLM_F_CREATE should be specified when creating new route [ 142.658726][ T7133] bond4: option mode: invalid value (8) [ 142.781646][ T7133] bond4 (unregistering): Released all slaves [ 143.578844][ T7286] netlink: 24 bytes leftover after parsing attributes in process `syz.1.368'. [ 143.767385][ T7292] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 143.924530][ T7297] xt_hashlimit: size too large, truncated to 1048576 [ 144.009597][ T7299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.372'. [ 144.394672][ T7304] netlink: 4 bytes leftover after parsing attributes in process `syz.4.373'. [ 144.589522][ T7281] netlink: 4 bytes leftover after parsing attributes in process `syz.0.367'. [ 144.694824][ T7197] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.705681][ T7273] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.705903][ T7271] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.705941][ T7271] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.765912][ T7310] sctp: [Deprecated]: syz.2.374 (pid 7310) Use of struct sctp_assoc_value in delayed_ack socket option. [ 144.765912][ T7310] Use struct sctp_sack_info instead [ 144.843709][ T7314] netlink: 'syz.4.376': attribute type 1 has an invalid length. [ 145.048359][ T7314] 8021q: adding VLAN 0 to HW filter on device bond2 [ 145.051424][ T7317] netlink: 'syz.4.376': attribute type 7 has an invalid length. [ 145.284724][ T7330] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 145.284764][ T7330] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.362227][ T7328] can: request_module (can-proto-0) failed. [ 145.387133][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 145.440712][ T7336] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 145.905076][ T7346] netlink: 288 bytes leftover after parsing attributes in process `syz.0.380'. [ 146.303447][ T7366] syzkaller1: left promiscuous mode [ 146.303469][ T7366] syzkaller1: left allmulticast mode [ 146.607282][ T7376] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 147.136288][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 147.299410][ T7396] macvlan2: entered promiscuous mode [ 147.299434][ T7396] macvlan2: entered allmulticast mode [ 147.355271][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.3.393'. [ 147.497097][ T7403] macvlan2: entered promiscuous mode [ 147.500299][ T7403] macvlan2: entered allmulticast mode [ 147.640064][ T7407] macvlan2: entered promiscuous mode [ 147.640087][ T7407] macvlan2: entered allmulticast mode [ 147.642704][ T7268] IPVS: starting estimator thread 0... [ 147.670457][ T7414] IPVS: set_ctl: invalid protocol: 22 255.255.255.255:20004 [ 147.752798][ T7415] IPVS: using max 28 ests per chain, 67200 per kthread [ 148.517743][ T7446] netlink: 'syz.0.408': attribute type 10 has an invalid length. [ 148.522402][ T7446] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.523184][ T7446] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.621824][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.410'. [ 148.621848][ T7455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.410'. [ 148.666907][ T7446] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.667088][ T7446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.667403][ T7446] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.667517][ T7446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.681294][ T7453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.408'. [ 148.715649][ T7446] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 148.722393][ T7453] bridge_slave_1: left allmulticast mode [ 148.722805][ T7453] bridge_slave_1: left promiscuous mode [ 148.730767][ T7453] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.768252][ T7453] bridge_slave_0: left allmulticast mode [ 148.772203][ T7453] bridge_slave_0: left promiscuous mode [ 148.773468][ T7453] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.847776][ T7453] bond0: (slave bridge0): Releasing backup interface [ 148.952502][ T7460] netlink: 20 bytes leftover after parsing attributes in process `syz.3.412'. [ 148.970321][ T7460] IPVS: mh: UDP 127.0.0.1:20000 - no destination available [ 149.405887][ T7479] netdevsim netdevsim4 : renamed from netdevsim0 (while UP) [ 149.572012][ T7483] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 150.068294][ T7497] netlink: 168 bytes leftover after parsing attributes in process `syz.1.423'. [ 150.221194][ T7499] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 150.333716][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 150.333759][ T7504] netlink: 4 bytes leftover after parsing attributes in process `syz.4.426'. [ 150.384955][ T7501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 150.632052][ T7512] netlink: 16 bytes leftover after parsing attributes in process `syz.4.430'. [ 150.762553][ T7518] Cannot find del_set index 4 as target [ 151.355804][ T7535] netlink: 220 bytes leftover after parsing attributes in process `syz.4.437'. [ 151.473284][ T7539] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 151.541670][ T7540] netlink: 27 bytes leftover after parsing attributes in process `syz.3.438'. [ 151.646963][ T7542] netlink: 20 bytes leftover after parsing attributes in process `syz.0.440'. [ 151.755382][ T7544] netlink: 76 bytes leftover after parsing attributes in process `syz.0.440'. [ 151.789138][ T7542] geneve2: entered allmulticast mode [ 151.828170][ T7545] netlink: 'syz.4.441': attribute type 28 has an invalid length. [ 151.828193][ T7545] netlink: 'syz.4.441': attribute type 3 has an invalid length. [ 151.828205][ T7545] netlink: 132 bytes leftover after parsing attributes in process `syz.4.441'. [ 152.055168][ T7554] erspan0: entered promiscuous mode [ 152.772640][ T7574] team0 (unregistering): Port device team_slave_0 removed [ 152.864909][ T7574] team0 (unregistering): Port device team_slave_1 removed [ 152.980025][ T7573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.056121][ T7595] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 153.213366][ T7583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 153.758171][ T7621] netlink: 'syz.2.461': attribute type 1 has an invalid length. [ 154.140084][ T7626] 8021q: adding VLAN 0 to HW filter on device bond5 [ 154.154086][ T7626] bond4: (slave bond5): making interface the new active one [ 154.155779][ T7626] bond4: (slave bond5): Enslaving as an active interface with an up link [ 154.204974][ T7627] bond4: (slave gretap0): Enslaving as a backup interface with an up link [ 154.263339][ T7621] 8021q: adding VLAN 0 to HW filter on device bond4 [ 154.811343][ T7641] syzkaller0: entered promiscuous mode [ 154.812207][ T7641] syzkaller0: entered allmulticast mode [ 154.860867][ T7642] tipc: Started in network mode [ 154.860897][ T7642] tipc: Node identity 8e1acdc00249, cluster identity 4711 [ 154.862167][ T7642] tipc: Enabled bearer , priority 0 [ 154.923192][ T7634] tipc: Resetting bearer [ 154.996222][ T7634] tipc: Disabling bearer [ 155.086892][ T7672] IPVS: set_ctl: invalid protocol: 60 255.255.255.255:20002 [ 155.240381][ T7679] __nla_validate_parse: 12 callbacks suppressed [ 155.240404][ T7679] netlink: 20 bytes leftover after parsing attributes in process `syz.0.473'. [ 155.888569][ T7698] netlink: 8 bytes leftover after parsing attributes in process `syz.2.479'. [ 156.379512][ T7730] Bluetooth: MGMT ver 1.23 [ 157.539827][ T7763] xt_cgroup: path and classid specified [ 157.704834][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 157.750152][ T7770] netlink: 24 bytes leftover after parsing attributes in process `syz.4.493'. [ 158.172161][ T7782] netlink: 32 bytes leftover after parsing attributes in process `syz.0.496'. [ 158.382027][ T7796] FAULT_INJECTION: forcing a failure. [ 158.382027][ T7796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 158.382060][ T7796] CPU: 1 UID: 0 PID: 7796 Comm: syz.4.499 Not tainted syzkaller #0 PREEMPT(full) [ 158.382080][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 158.382091][ T7796] Call Trace: [ 158.382104][ T7796] [ 158.382112][ T7796] dump_stack_lvl+0xe8/0x150 [ 158.382145][ T7796] should_fail_ex+0x410/0x560 [ 158.382174][ T7796] _copy_to_user+0x31/0xb0 [ 158.382202][ T7796] simple_read_from_buffer+0xe1/0x170 [ 158.382235][ T7796] proc_fail_nth_read+0x1bb/0x230 [ 158.382254][ T7796] ? common_file_perm+0x20e/0x2b0 [ 158.382282][ T7796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.382305][ T7796] ? rw_verify_area+0x24a/0x4c0 [ 158.382334][ T7796] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 158.382353][ T7796] vfs_read+0x213/0xa80 [ 158.382387][ T7796] ? __pfx___mutex_lock+0x10/0x10 [ 158.382414][ T7796] ? __pfx_vfs_read+0x10/0x10 [ 158.382444][ T7796] ? __fget_files+0x2a/0x420 [ 158.382476][ T7796] ? __fget_files+0x3a2/0x420 [ 158.382500][ T7796] ? __fget_files+0x2a/0x420 [ 158.382536][ T7796] ksys_read+0x150/0x270 [ 158.382567][ T7796] ? __pfx_ksys_read+0x10/0x10 [ 158.382609][ T7796] do_syscall_64+0x166/0x520 [ 158.382631][ T7796] ? trace_irq_disable+0x3b/0x140 [ 158.382651][ T7796] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.382670][ T7796] ? clear_bhb_loop+0x70/0xc0 [ 158.382694][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.382713][ T7796] RIP: 0033:0x7f5fa315e98e [ 158.382733][ T7796] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 158.382747][ T7796] RSP: 002b:00007f5fa40fffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 158.382768][ T7796] RAX: ffffffffffffffda RBX: 00007f5fa41006c0 RCX: 00007f5fa315e98e [ 158.382781][ T7796] RDX: 000000000000000f RSI: 00007f5fa41000a0 RDI: 0000000000000007 [ 158.382793][ T7796] RBP: 00007f5fa4100090 R08: 0000000000000000 R09: 0000000000000000 [ 158.382805][ T7796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 158.382815][ T7796] R13: 00007f5fa3426218 R14: 00007f5fa3426180 R15: 00007ffce82a5e88 [ 158.382850][ T7796] [ 158.699346][ T7799] Cannot find set identified by id 65534 to match [ 158.890201][ T7803] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 158.941866][ T7807] netlink: 12 bytes leftover after parsing attributes in process `syz.0.503'. [ 158.960729][ T7811] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 159.077326][ T7803] bond3: entered allmulticast mode [ 159.083511][ T7803] 8021q: adding VLAN 0 to HW filter on device bond3 [ 159.365118][ T7812] bond4: entered allmulticast mode [ 159.365603][ T7812] 8021q: adding VLAN 0 to HW filter on device bond4 [ 159.578447][ T7826] C: renamed from lo (while UP) [ 159.626745][ T7826] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 159.735434][ T7832] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 160.067037][ T7842] netlink: 104 bytes leftover after parsing attributes in process `syz.4.511'. [ 161.250716][ T7876] netlink: 196 bytes leftover after parsing attributes in process `syz.3.518'. [ 164.441346][ T7915] netlink: 'syz.2.524': attribute type 32 has an invalid length. [ 164.538721][ T7919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.524'. [ 164.538755][ T7919] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 165.081920][ T7941] netlink: 'syz.0.527': attribute type 4 has an invalid length. [ 166.945741][ T7902] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 167.202254][ T7950] netlink: 36 bytes leftover after parsing attributes in process `syz.3.530'. [ 167.913636][ T7967] netlink: 'syz.3.538': attribute type 10 has an invalid length. [ 168.104622][ T7967] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 168.299731][ T7977] sctp: [Deprecated]: syz.4.540 (pid 7977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.299731][ T7977] Use struct sctp_sack_info instead [ 168.330978][ T7977] x_tables: duplicate underflow at hook 2 [ 168.420783][ T7982] sctp: [Deprecated]: syz.4.540 (pid 7982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.420783][ T7982] Use struct sctp_sack_info instead [ 168.421163][ T7986] x_tables: duplicate underflow at hook 2 [ 168.622005][ T7992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.543'. [ 169.208399][ T8017] netlink: 'syz.0.552': attribute type 2 has an invalid length. [ 170.011621][ T8040] netlink: 116 bytes leftover after parsing attributes in process `syz.3.557'. [ 170.082501][ T8040] nbd: must specify a device to reconfigure [ 170.570944][ T8055] xt_ecn: cannot match TCP bits for non-tcp packets [ 171.156373][ T8069] netlink: NAT attribute has 8 unknown bytes [ 171.156411][ T8069] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 171.161846][ T8069] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 171.161867][ T8069] netlink: 14 bytes leftover after parsing attributes in process `syz.0.563'. [ 171.193997][ T8071] netlink: 4 bytes leftover after parsing attributes in process `syz.0.563'. [ 171.194018][ T8071] netlink: 14 bytes leftover after parsing attributes in process `syz.0.563'. [ 171.364205][ T8072] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 171.479720][ T8068] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 172.387063][ T8102] ip_tables: iptables: counters copy to user failed while replacing table [ 172.651766][ T8119] netlink: 16 bytes leftover after parsing attributes in process `syz.1.573'. [ 173.376011][ T8136] netlink: 'syz.3.578': attribute type 12 has an invalid length. [ 173.414935][ T8138] netlink: 'syz.1.580': attribute type 2 has an invalid length. [ 173.440988][ T8146] netlink: 'syz.3.578': attribute type 12 has an invalid length. [ 173.557645][ T8136] bond1: option primary_reselect: invalid value (255) [ 173.580988][ T8136] bond1 (unregistering): Released all slaves [ 173.777580][ T8146] bond1: option primary_reselect: invalid value (255) [ 173.792100][ T8146] bond1 (unregistering): Released all slaves [ 174.549537][ T8188] netlink: 'syz.1.591': attribute type 3 has an invalid length. [ 174.633141][ T8178] ip6gre2: entered allmulticast mode [ 174.675545][ T8176] netlink: 'syz.4.588': attribute type 12 has an invalid length. [ 174.689118][ T7209] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 174.689682][ T8178] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 174.692550][ T8176] netlink: 'syz.4.588': attribute type 12 has an invalid length. [ 174.694086][ T8176] netlink: 'syz.4.588': attribute type 12 has an invalid length. [ 174.694303][ T8176] netlink: 'syz.4.588': attribute type 12 has an invalid length. [ 174.694505][ T8176] netlink: 'syz.4.588': attribute type 12 has an invalid length. [ 174.694702][ T8176] netlink: 'syz.4.588': attribute type 12 has an invalid length. [ 174.705579][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 174.705597][ T8188] netlink: 80 bytes leftover after parsing attributes in process `syz.1.591'. [ 174.705610][ T8188] netlink: 24 bytes leftover after parsing attributes in process `syz.1.591'. [ 175.940881][ T8234] lo: entered promiscuous mode [ 175.954735][ T8231] lo: left promiscuous mode [ 176.289263][ T8246] ip_tables: iptables: counters copy to user failed while replacing table [ 176.626323][ T8262] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 177.546701][ T8296] Bluetooth: hci0: unsupported parameter 5161 [ 177.546728][ T8296] Bluetooth: hci0: unsupported parameter 8192 [ 177.546740][ T8296] Bluetooth: hci0: unsupported parameter 5161 [ 177.546752][ T8296] Bluetooth: hci0: unsupported parameter 8192 [ 177.582950][ T8297] netlink: 8 bytes leftover after parsing attributes in process `syz.1.617'. [ 177.987608][ T8307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.620'. [ 178.010940][ T8305] syzkaller0: left promiscuous mode [ 178.011193][ T8305] syzkaller0: left allmulticast mode [ 178.872087][ T8341] netlink: zone id is out of range [ 178.872104][ T8341] netlink: zone id is out of range [ 178.872111][ T8341] netlink: zone id is out of range [ 178.872127][ T8341] netlink: zone id is out of range [ 178.872153][ T8341] netlink: zone id is out of range [ 178.872165][ T8341] netlink: zone id is out of range [ 178.872174][ T8341] netlink: zone id is out of range [ 178.872181][ T8341] netlink: zone id is out of range [ 178.872192][ T8341] netlink: zone id is out of range [ 178.983030][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 179.092540][ T8349] netlink: 16 bytes leftover after parsing attributes in process `syz.4.628'. [ 179.591281][ T8354] wg0 speed is unknown, defaulting to 1000 [ 180.320430][ T8401] validate_nla: 59 callbacks suppressed [ 180.320452][ T8401] netlink: 'syz.3.637': attribute type 10 has an invalid length. [ 180.789639][ T8401] team0: Device dummy0 is of different type [ 181.470250][ T8418] can: request_module (can-proto-0) failed. [ 181.674122][ T8426] netlink: 16 bytes leftover after parsing attributes in process `syz.0.644'. [ 181.754222][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'. [ 181.754248][ T8429] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'. [ 181.793436][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.646'. [ 181.793466][ T8431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.646'. [ 181.951314][ T8437] netlink: 'syz.3.648': attribute type 1 has an invalid length. [ 181.951337][ T8437] netlink: 224 bytes leftover after parsing attributes in process `syz.3.648'. [ 182.984765][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 182.984792][ T8477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 183.464381][ T8489] netlink: 12 bytes leftover after parsing attributes in process `syz.2.659'. [ 183.522107][ T8489] 8021q: adding VLAN 0 to HW filter on device bond6 [ 183.610885][ T8489] macvlan2: entered promiscuous mode [ 183.610909][ T8489] macvlan2: entered allmulticast mode [ 183.648758][ T8494] netlink: 48 bytes leftover after parsing attributes in process `syz.2.659'. [ 184.129823][ T8510] netlink: 'syz.0.665': attribute type 2 has an invalid length. [ 184.221271][ T8519] netlink: 256 bytes leftover after parsing attributes in process `syz.1.666'. [ 184.654252][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 184.766264][ T8544] netlink: 'syz.4.670': attribute type 8 has an invalid length. [ 184.875167][ T8546] netlink: 'syz.4.670': attribute type 8 has an invalid length. [ 184.875448][ T8551] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 186.505060][ T8581] bond0: entered promiscuous mode [ 186.505086][ T8581] bond_slave_0: entered promiscuous mode [ 186.505364][ T8581] bond_slave_1: entered promiscuous mode [ 186.551104][ T8581] batadv0: entered promiscuous mode [ 186.560794][ T8581] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 186.574997][ T8581] bond0: left promiscuous mode [ 186.575053][ T8581] bond_slave_0: left promiscuous mode [ 186.575318][ T8581] bond_slave_1: left promiscuous mode [ 186.577998][ T8588] netlink: 132 bytes leftover after parsing attributes in process `syz.0.679'. [ 186.582592][ T8581] batadv0: left promiscuous mode [ 186.969665][ T8600] netlink: 14975 bytes leftover after parsing attributes in process `syz.3.682'. [ 187.241599][ T8606] netlink: 'syz.3.687': attribute type 17 has an invalid length. [ 187.241623][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.687'. [ 187.241648][ T8606] netlink: 28 bytes leftover after parsing attributes in process `syz.3.687'. [ 187.298508][ T8611] netlink: 16 bytes leftover after parsing attributes in process `syz.3.687'. [ 188.022996][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 188.121724][ T8634] netlink: 'syz.2.695': attribute type 21 has an invalid length. [ 188.178131][ T8635] netlink: 'syz.2.695': attribute type 21 has an invalid length. [ 188.286537][ T8625] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.287998][ T8625] bridge0: port 1(bond1) entered blocking state [ 188.288190][ T8625] bridge0: port 1(bond1) entered disabled state [ 188.288332][ T8625] bond1: entered allmulticast mode [ 188.320684][ T8625] bond1: entered promiscuous mode [ 188.331719][ T8625] bridge0: port 1(bond1) entered blocking state [ 188.331852][ T8625] bridge0: port 1(bond1) entered forwarding state [ 188.352440][ T8634] netlink: 'syz.2.695': attribute type 4 has an invalid length. [ 188.352461][ T8634] netlink: 'syz.2.695': attribute type 5 has an invalid length. [ 188.371885][ T8635] netlink: 'syz.2.695': attribute type 4 has an invalid length. [ 188.371907][ T8635] netlink: 'syz.2.695': attribute type 5 has an invalid length. [ 188.445207][ T7272] bridge0: port 1(bond1) entered disabled state [ 188.912563][ T8651] __nla_validate_parse: 4 callbacks suppressed [ 188.912585][ T8651] netlink: 32 bytes leftover after parsing attributes in process `syz.0.700'. [ 189.070764][ T8656] bond0: (slave bond_slave_0): Releasing backup interface [ 189.101942][ T8656] bond0: (slave bond_slave_1): Releasing backup interface [ 189.133349][ T8656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.133376][ T8656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.141428][ T8656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.141452][ T8656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.181562][ T8656] net_ratelimit: 5 callbacks suppressed [ 189.181584][ T8656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 189.362585][ T8665] veth0: entered promiscuous mode [ 189.395717][ T8665] veth0: left promiscuous mode [ 189.409483][ T8655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.701'. [ 190.081321][ T7272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.081345][ T7272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.140024][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.170902][ T8685] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.630755][ T8701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.712'. [ 190.912281][ T8707] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 192.203101][ T8715] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 192.403237][ T8715] netlink: 8 bytes leftover after parsing attributes in process `syz.1.717'. [ 192.498811][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.0.719'. [ 193.062328][ T8734] ip_tables: iptables: counters copy to user failed while replacing table [ 193.077824][ T8734] sch_fq: defrate 2147483649 ignored. [ 193.204214][ T8735] netlink: 32 bytes leftover after parsing attributes in process `syz.1.723'. [ 193.774579][ T8740] netlink: zone id is out of range [ 193.774596][ T8740] netlink: zone id is out of range [ 193.774604][ T8740] netlink: zone id is out of range [ 193.774612][ T8740] netlink: zone id is out of range [ 193.774619][ T8740] netlink: zone id is out of range [ 193.774627][ T8740] netlink: zone id is out of range [ 193.774635][ T8740] netlink: set zone limit has 4 unknown bytes [ 195.141269][ T8749] netlink: 'syz.0.729': attribute type 15 has an invalid length. [ 195.141296][ T8749] netlink: 'syz.0.729': attribute type 7 has an invalid length. [ 195.459282][ T8756] netlink: 36 bytes leftover after parsing attributes in process `syz.3.730'. [ 195.555850][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.4.731'. [ 195.731444][ T8759] vlan0: entered allmulticast mode [ 195.731470][ T8759] bond0: entered allmulticast mode [ 195.731484][ T8759] bridge0: entered allmulticast mode [ 195.847487][ T8761] gretap0: entered promiscuous mode [ 195.849413][ T8761] netlink: 8 bytes leftover after parsing attributes in process `syz.0.733'. [ 195.849438][ T8761] gretap0: left promiscuous mode [ 195.849601][ T8762] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 196.636990][ T8771] bridge_slave_0: left allmulticast mode [ 196.637442][ T8771] bridge_slave_0: left promiscuous mode [ 196.639507][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.771936][ T8771] bridge_slave_1: left allmulticast mode [ 196.779084][ T8771] bridge_slave_1: left promiscuous mode [ 196.793102][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.854888][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.735'. [ 196.890954][ T8771] bond0: (slave bond_slave_0): Releasing backup interface [ 197.101712][ T8771] bond0: (slave bond_slave_1): Releasing backup interface [ 197.612691][ T8771] team0: Port device team_slave_0 removed [ 197.730055][ T8771] team0: Port device team_slave_1 removed [ 197.732726][ T8771] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 197.746566][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 197.766912][ T8771] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 197.767143][ T8771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 197.792582][ T8771] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 198.641608][ T8798] netlink: 24 bytes leftover after parsing attributes in process `syz.4.740'. [ 199.095437][ T8794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.739'. [ 200.282057][ T8811] syzkaller0: entered promiscuous mode [ 200.282287][ T8811] syzkaller0: entered allmulticast mode [ 200.313290][ T8818] netlink: 26 bytes leftover after parsing attributes in process `syz.1.745'. [ 200.316015][ T8819] netlink: 'syz.1.745': attribute type 10 has an invalid length. [ 200.586815][ T8819] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 200.783311][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.0.748'. [ 201.142870][ T8811] tipc: Enabling of bearer rejected, failed to enable media [ 201.196137][ T8833] netlink: 52 bytes leftover after parsing attributes in process `syz.1.750'. [ 201.630504][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 201.630549][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 201.630578][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 201.630605][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 201.738138][ T8844] netlink: 32 bytes leftover after parsing attributes in process `syz.4.752'. [ 202.020998][ T8851] netlink: 36 bytes leftover after parsing attributes in process `syz.3.754'. [ 203.074937][ T8863] netlink: 44 bytes leftover after parsing attributes in process `syz.3.758'. [ 203.074965][ T8863] netlink: 43 bytes leftover after parsing attributes in process `syz.3.758'. [ 203.074980][ T8863] netlink: 'syz.3.758': attribute type 6 has an invalid length. [ 203.074992][ T8863] netlink: 'syz.3.758': attribute type 5 has an invalid length. [ 203.075004][ T8863] netlink: 43 bytes leftover after parsing attributes in process `syz.3.758'. [ 203.432893][ T8871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.657288][ T8868] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 203.699690][ T8874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.761'. [ 204.594799][ T8874] hsr_slave_1 (unregistering): left promiscuous mode [ 204.800935][ T8884] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 205.303006][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 205.930595][ T8896] tc_dump_action: action bad kind [ 206.228011][ T8904] netlink: 108 bytes leftover after parsing attributes in process `syz.1.769'. [ 206.228040][ T8904] netlink: 8 bytes leftover after parsing attributes in process `syz.1.769'. [ 206.402459][ T5631] Bluetooth: hci4: link tx timeout [ 206.402482][ T5631] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 207.068795][ T8931] netlink: 60 bytes leftover after parsing attributes in process `syz.4.775'. [ 207.135874][ T8931] ip_tables: iptables: counters copy to user failed while replacing table [ 208.425814][ T5621] Bluetooth: hci4: command 0x0406 tx timeout [ 209.076722][ T8974] netlink: 'syz.1.785': attribute type 16 has an invalid length. [ 209.076747][ T8974] netlink: 'syz.1.785': attribute type 17 has an invalid length. [ 210.614086][ T8995] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 210.860085][ T8974] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 210.867983][ T8974] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 210.955545][ T8974] mac80211_hwsim hwsim5 wlan0: left promiscuous mode [ 211.159330][ T8974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.642599][ T9043] netlink: 104 bytes leftover after parsing attributes in process `syz.3.799'. [ 213.691666][ T9043] netlink: 'syz.3.799': attribute type 1 has an invalid length. [ 213.773459][ T9036] veth3: entered allmulticast mode [ 215.977348][ T9074] netlink: 256 bytes leftover after parsing attributes in process `syz.4.805'. [ 218.020736][ T9108] netlink: 56 bytes leftover after parsing attributes in process `syz.3.812'. [ 218.209797][ T9113] hsr0: entered promiscuous mode [ 221.330393][ T9164] syzkaller0: entered promiscuous mode [ 221.330625][ T9164] syzkaller0: entered allmulticast mode [ 221.853188][ T9192] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 222.479430][ T9192] 8021q: adding VLAN 0 to HW filter on device bond1 [ 223.634066][ T9215] 8021q: VLANs not supported on syzkaller1 [ 223.946150][ T9215] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 224.323176][ T9230] netlink: 28 bytes leftover after parsing attributes in process `syz.1.835'. [ 224.323216][ T9230] netlink: 'syz.1.835': attribute type 7 has an invalid length. [ 224.323230][ T9230] netlink: 'syz.1.835': attribute type 8 has an invalid length. [ 224.323242][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.835'. [ 225.385934][ T9227] bridge_slave_0: left allmulticast mode [ 225.386384][ T9227] bridge_slave_0: left promiscuous mode [ 225.387564][ T9227] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.904699][ T9254] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 226.058802][ T9254] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 227.371415][ T9281] wg0 speed is unknown, defaulting to 1000 [ 227.396088][ T9287] netlink: 36 bytes leftover after parsing attributes in process `syz.1.844'. [ 228.142344][ T9297] ip_tables: iptables: counters copy to user failed while replacing table [ 228.310221][ T9298] netlink: 32 bytes leftover after parsing attributes in process `syz.2.848'. [ 228.367138][ T9298] netlink: 4 bytes leftover after parsing attributes in process `syz.2.848'. [ 228.367185][ T9298] netlink: 24 bytes leftover after parsing attributes in process `syz.2.848'. [ 229.108814][ T9314] macvlan0: entered promiscuous mode [ 230.205017][ T9341] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 230.433679][ T9341] netlink: 'syz.3.857': attribute type 10 has an invalid length. [ 230.596776][ T9341] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 230.627593][ T9341] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 230.640919][ T9341] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 230.943151][ T9359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.861'. [ 234.527084][ T9431] Cannot find add_set index 4 as target [ 234.559330][ T9424] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 235.101519][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 235.501650][ T9441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.006739][ T9441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.260135][ T9461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.880'. [ 239.680276][ T9494] netlink: 56 bytes leftover after parsing attributes in process `syz.3.889'. [ 239.863223][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 240.437555][ T9507] netlink: 224 bytes leftover after parsing attributes in process `syz.1.893'. [ 240.580926][ T9507] netlink: 224 bytes leftover after parsing attributes in process `syz.1.893'. [ 243.111798][ T9547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.902'. [ 243.114811][ T9551] xt_REDIRECT: bad rangesize 26624. [ 244.191560][ T9566] netlink: 104 bytes leftover after parsing attributes in process `syz.4.905'. [ 244.231051][ T9569] netlink: 104 bytes leftover after parsing attributes in process `syz.4.905'. [ 245.553248][ T9590] ip6t_srh: unknown srh invflags 4000 [ 245.768250][ T9590] netdevsim netdevsim2: Direct firmware load for .. failed with error -2 [ 245.768279][ T9590] netdevsim netdevsim2: Falling back to sysfs fallback for: .. [ 267.981583][ T9635] sctp: [Deprecated]: syz.1.919 (pid 9635) Use of int in maxseg socket option. [ 267.981583][ T9635] Use struct sctp_assoc_value instead [ 269.221014][ T9661] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 269.262171][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 269.277608][ T9662] openvswitch: netlink: Unexpected mask (mask=1010, allowed=10058) [ 269.300379][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 269.465519][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 269.475179][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 269.487810][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 269.509299][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 269.534378][ T60] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.538737][ T7209] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.538775][ T7209] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.538807][ T7209] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.543177][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 269.554105][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 269.617150][ T9663] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 269.619443][ T9665] netlink: 4 bytes leftover after parsing attributes in process `syz.3.929'. [ 271.073720][ T9674] ip6gre3: entered allmulticast mode [ 272.975926][ T9697] x_tables: duplicate underflow at hook 2 [ 274.043355][ T9716] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.220533][ T9714] geneve2: entered promiscuous mode [ 274.794104][ T9719] netlink: 'syz.4.943': attribute type 6 has an invalid length. [ 275.786718][ T9731] __nla_validate_parse: 26 callbacks suppressed [ 275.786740][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.946'. [ 275.786819][ T9731] bridge_slave_1: left allmulticast mode [ 275.787251][ T9731] bridge_slave_1: left promiscuous mode [ 275.788309][ T9731] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.971222][ T9731] bridge_slave_0: left allmulticast mode [ 275.971662][ T9731] bridge_slave_0: left promiscuous mode [ 275.999916][ T9731] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.507311][ T9736] netlink: 28 bytes leftover after parsing attributes in process `syz.4.950'. [ 276.507351][ T9736] netlink: 'syz.4.950': attribute type 7 has an invalid length. [ 276.507365][ T9736] netlink: 'syz.4.950': attribute type 8 has an invalid length. [ 276.507378][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz.4.950'. [ 277.423276][ T9730] tap0: tun_chr_ioctl cmd 2148553947 [ 278.130835][ T9736] ip6gretap0: entered promiscuous mode [ 278.153836][ T9736] syz_tun: entered promiscuous mode [ 278.219567][ T9752] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 278.334608][ T9754] netlink: 8 bytes leftover after parsing attributes in process `syz.3.951'. [ 278.367313][ T9736] ip6gretap0: left promiscuous mode [ 278.393661][ T9736] syz_tun: left promiscuous mode [ 279.281211][ T9761] xt_TCPMSS: Only works on TCP SYN packets [ 281.628826][ T9797] x_tables: ip_tables: osf match: only valid for protocol 6 [ 282.834541][ T9820] IPv6: sit1: Disabled Multicast RS [ 283.466971][ T9828] netlink: 112 bytes leftover after parsing attributes in process `syz.2.969'. [ 284.213803][ T9830] bond2: entered promiscuous mode [ 284.281323][ T9835] macvlan0: entered promiscuous mode [ 284.281555][ T9835] macvlan0: entered allmulticast mode [ 284.286230][ T9835] bond2: (slave macvlan0): Opening slave failed [ 284.531799][ T9852] syzkaller0: entered promiscuous mode [ 284.532025][ T9852] syzkaller0: entered allmulticast mode [ 284.642469][ T9855] bridge0: port 1(veth1_to_bridge) entered blocking state [ 284.643124][ T9855] bridge0: port 1(veth1_to_bridge) entered disabled state [ 284.643601][ T9855] veth1_to_bridge: entered allmulticast mode [ 284.737472][ T9855] veth1_to_bridge: entered promiscuous mode [ 284.739539][ T9855] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 284.746694][ T9855] bridge0: port 1(veth1_to_bridge) entered blocking state [ 284.746847][ T9855] bridge0: port 1(veth1_to_bridge) entered forwarding state [ 284.756441][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.759513][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.759972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.760352][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.760728][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.761144][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.761539][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.762487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.762935][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 284.763335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 285.747042][ T9865] netlink: 'syz.1.974': attribute type 3 has an invalid length. [ 285.747070][ T9865] netlink: 11575 bytes leftover after parsing attributes in process `syz.1.974'. [ 286.432243][ T9867] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 286.891798][ T9874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.975'. [ 287.037653][ T9869] netlink: 'syz.1.974': attribute type 8 has an invalid length. [ 287.844116][ T9880] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 289.077282][ T9867] 8021q: adding VLAN 0 to HW filter on device bond3 [ 289.763076][ C0] net_ratelimit: 14638 callbacks suppressed [ 289.763102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.763316][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.763550][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.763984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.764242][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.764490][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.764948][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.765153][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.765357][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.765730][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 289.827562][ C1] sched: DL replenish lagged too much [ 292.964240][ T9895] netlink: 40 bytes leftover after parsing attributes in process `syz.3.980'. [ 294.772956][ C0] net_ratelimit: 16477 callbacks suppressed [ 294.772984][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.773380][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.773605][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.773844][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.774261][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.774560][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.774793][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.775001][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.775270][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 294.775643][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 297.060384][ T9904] IPVS: length: 4096 != 8 [ 299.184526][ T9912] netlink: 'syz.0.986': attribute type 3 has an invalid length. [ 299.783700][ C0] net_ratelimit: 22007 callbacks suppressed [ 299.783727][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.784009][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.784384][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.784489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.784601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.784986][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.785092][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.785195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.785449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 299.785554][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.793040][ C0] net_ratelimit: 25285 callbacks suppressed [ 304.793067][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.793178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.793283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.793535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.793642][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.793773][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.794028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.794397][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.794501][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 304.794605][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 306.224411][ T9944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.992'. [ 308.938356][ T9954] bond0: (slave syz_tun): Releasing backup interface [ 309.802791][ C0] net_ratelimit: 26356 callbacks suppressed [ 309.802818][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.803117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.803277][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.803408][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.803699][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.804132][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.804244][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.804354][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.804772][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 309.804890][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 312.185794][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 314.812812][ C1] net_ratelimit: 71326 callbacks suppressed [ 314.812837][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.812968][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.813020][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.813094][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.813155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.813220][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.813286][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.813347][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.813417][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 314.813472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.822721][ C1] net_ratelimit: 73370 callbacks suppressed [ 319.822747][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.822815][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.822877][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.822931][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.823011][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 319.823132][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.823224][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.823257][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.823355][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.823407][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 324.832796][ C1] net_ratelimit: 74670 callbacks suppressed [ 324.832823][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.832834][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.832945][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.832982][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.833110][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.833229][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.833346][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.833384][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 324.833479][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.833509][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.842729][ C1] net_ratelimit: 76623 callbacks suppressed [ 329.842753][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.842816][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.842876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 329.842940][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.842989][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.843108][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.843224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 329.843357][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.843401][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.843473][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.852718][ C1] net_ratelimit: 79354 callbacks suppressed [ 334.852742][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.852770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.852863][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.852890][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.852991][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 334.853104][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.853220][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.853336][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 334.853343][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.853446][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.862781][ C0] net_ratelimit: 78131 callbacks suppressed [ 339.862787][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.862805][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.862920][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.862941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.863047][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 339.863068][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.863169][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.863195][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.863345][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.863326][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.872722][ C1] net_ratelimit: 77161 callbacks suppressed [ 344.872746][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.872774][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.872863][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.872904][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.872985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 344.873024][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.873101][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.873222][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.873345][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.873452][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.882790][ C0] net_ratelimit: 77805 callbacks suppressed [ 349.882852][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 349.882870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.883002][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.883022][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.883121][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.883151][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.883240][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.883294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.883383][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.883429][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 354.892788][ C0] net_ratelimit: 79292 callbacks suppressed [ 354.892795][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.892815][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.892928][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 354.892967][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.893044][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.893114][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.893165][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.893279][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.893396][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 354.893511][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.902712][ C0] net_ratelimit: 79246 callbacks suppressed [ 359.902723][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.902758][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.902838][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.902898][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.902956][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 359.903019][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.903070][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.903138][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.903251][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 359.903283][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.912721][ C1] net_ratelimit: 79919 callbacks suppressed [ 364.912747][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.912772][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.912877][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.912905][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.912996][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.913121][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 364.913219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.913239][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.913359][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.913489][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.922749][ C1] net_ratelimit: 83146 callbacks suppressed [ 369.922759][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.922774][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.922886][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.922888][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.923012][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 369.923121][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.923258][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.923262][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 369.923373][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.923380][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.932694][ C0] net_ratelimit: 82622 callbacks suppressed [ 374.932749][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.932784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.932904][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.933023][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.933080][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.933147][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 374.933197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.933273][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.933311][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.933425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.949379][ C0] net_ratelimit: 85884 callbacks suppressed [ 379.949402][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.949453][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.949517][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.949580][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.949690][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.949808][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 379.949853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.949917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.950028][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.950140][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.952699][ C0] net_ratelimit: 85752 callbacks suppressed [ 384.952745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.952767][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.952860][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.952880][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.952971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.952992][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.953110][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 384.953218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.953268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.953334][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 389.962777][ C0] net_ratelimit: 84739 callbacks suppressed [ 389.962785][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.962802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.962908][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 389.962923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.963020][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.963042][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.963164][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 389.963192][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.963275][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.963314][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.972731][ C1] net_ratelimit: 86611 callbacks suppressed [ 394.972756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.972877][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.972997][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 394.973110][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.973149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.973228][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 394.973282][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.973341][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.973402][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.973453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.982718][ C1] net_ratelimit: 87280 callbacks suppressed [ 399.982754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 399.982870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.982937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.983056][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.983189][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.983352][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 399.983465][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.983576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.983634][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.983687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.992696][ C1] net_ratelimit: 87823 callbacks suppressed [ 404.992721][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.992799][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.992836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.992924][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.992950][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.993045][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.993070][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.993165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.993182][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.993283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.002698][ C1] net_ratelimit: 87206 callbacks suppressed [ 410.002723][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 410.002784][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.002848][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.002902][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.002969][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.003017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.003113][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.003154][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 410.003249][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 410.003269][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.012722][ C1] net_ratelimit: 86408 callbacks suppressed [ 415.012748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.012752][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.012871][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 415.012871][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.012985][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.012987][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.013098][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.013213][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 415.013333][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 415.013391][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.312654][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 419.367403][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P9954/2:b..l [ 419.375402][ C0] rcu: (detected by 0, t=10508 jiffies, g=38793, q=59531 ncpus=2) [ 419.383322][ C0] task:syz.2.995 state:R running task stack:21648 pid:9954 tgid:9951 ppid:5612 task_flags:0x400140 flags:0x00080002 [ 419.396910][ C0] Call Trace: [ 419.400273][ C0] [ 419.403283][ C0] __schedule+0x17db/0x58f0 [ 419.408072][ C0] ? pick_task_fair+0x1a2/0x15a0 [ 419.413122][ C0] ? __lock_acquire+0x747/0x2de0 [ 419.418118][ C0] ? __lock_acquire+0x747/0x2de0 [ 419.423091][ C0] ? __pfx___schedule+0x10/0x10 [ 419.427980][ C0] ? __lock_acquire+0x747/0x2de0 [ 419.432952][ C0] preempt_schedule_irq+0x4b/0x90 [ 419.438007][ C0] irqentry_exit+0x14f/0x910 [ 419.442630][ C0] ? trace_irq_disable+0x3b/0x140 [ 419.447728][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 419.453772][ C0] RIP: 0010:lock_acquire+0x232/0x350 [ 419.459129][ C0] Code: ff ff ff e8 40 2c 43 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 62 27 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 7f 30 46 0a cc 48 8d 3d 87 60 da [ 419.478918][ C0] RSP: 0018:ffffc90004dee1c0 EFLAGS: 00000296 [ 419.485091][ C0] RAX: 5cd06b79f5e5f300 RBX: 0000000000000000 RCX: 0000000000000046 [ 419.493095][ C0] RDX: 00000000c71dfa4d RSI: ffffffff8e69f015 RDI: ffffffff8c6dac80 [ 419.501101][ C0] RBP: ffff888033458000 R08: ffffffff8177f1df R09: 0000000000000000 [ 419.509147][ C0] R10: ffffc90004dee2f8 R11: ffffffff81b293f0 R12: ffffffff8ed5c920 [ 419.517149][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 419.525156][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.531369][ C0] ? unwind_next_frame+0x8f/0x2550 [ 419.536557][ C0] ? icmp6_dst_alloc+0x72/0x430 [ 419.541576][ C0] ? unwind_next_frame+0x8f/0x2550 [ 419.546731][ C0] unwind_next_frame+0xac/0x2550 [ 419.551710][ C0] ? unwind_next_frame+0x8f/0x2550 [ 419.556869][ C0] ? dst_alloc+0x105/0x170 [ 419.561398][ C0] ? unwind_next_frame+0x8f/0x2550 [ 419.566628][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 419.572350][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 419.578532][ C0] arch_stack_walk+0x11b/0x150 [ 419.583338][ C0] ? icmp6_dst_alloc+0x72/0x430 [ 419.588223][ C0] ? dst_alloc+0x105/0x170 [ 419.592669][ C0] stack_trace_save+0xa9/0x100 [ 419.597478][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 419.602897][ C0] kasan_save_track+0x3e/0x80 [ 419.607612][ C0] ? kasan_save_track+0x3e/0x80 [ 419.612495][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 419.617550][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 419.623229][ C0] ? dst_alloc+0x105/0x170 [ 419.627673][ C0] ? icmp6_dst_alloc+0x72/0x430 [ 419.632612][ C0] __kasan_slab_alloc+0x6c/0x80 [ 419.637495][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 419.642995][ C0] ? dst_alloc+0x105/0x170 [ 419.647464][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 419.653135][ C0] ? dst_alloc+0x105/0x170 [ 419.657613][ C0] ? __pfx_ip6_dst_gc+0x10/0x10 [ 419.662557][ C0] dst_alloc+0x105/0x170 [ 419.666835][ C0] icmp6_dst_alloc+0x72/0x430 [ 419.671549][ C0] igmp6_send+0x967/0x1140 [ 419.676036][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 419.681192][ C0] ? igmp6_send+0x1b1/0x1140 [ 419.685823][ C0] ? __pfx_igmp6_send+0x10/0x10 [ 419.690703][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 419.696540][ C0] ? __mod_timer+0xb53/0xed0 [ 419.701172][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 419.706412][ C0] ? mod_delayed_work_on+0x161/0x190 [ 419.711762][ C0] igmp6_join_group+0x10e/0x670 [ 419.716666][ C0] igmp6_group_added+0x545/0x7c0 [ 419.721660][ C0] ? __pfx_igmp6_group_added+0x10/0x10 [ 419.727172][ C0] ? mld_del_delrec+0x32f/0xe20 [ 419.732073][ C0] ipv6_mc_up+0x314/0x580 [ 419.736444][ C0] addrconf_notify+0xac9/0x1050 [ 419.741401][ C0] notifier_call_chain+0x1a5/0x3d0 [ 419.746565][ C0] netif_state_change+0x27d/0x3a0 [ 419.751664][ C0] ? __pfx_netif_state_change+0x10/0x10 [ 419.757246][ C0] ? do_set_master+0x214/0x720 [ 419.762155][ C0] ? validate_linkmsg+0x765/0x950 [ 419.767216][ C0] do_setlink+0x3c57/0x4670 [ 419.771755][ C0] ? unwind_get_return_address+0x4d/0x90 [ 419.777442][ C0] ? __pfx_do_setlink+0x10/0x10 [ 419.782332][ C0] ? __lock_acquire+0x747/0x2de0 [ 419.787318][ C0] ? kasan_save_track+0x4f/0x80 [ 419.792197][ C0] ? kasan_save_track+0x3e/0x80 [ 419.797069][ C0] ? __kasan_kmalloc+0x93/0xb0 [ 419.801858][ C0] ? __kmalloc_cache_noprof+0x321/0x600 [ 419.807443][ C0] ? __mutex_trylock_common+0x15f/0x270 [ 419.813023][ C0] ? __pfx___mutex_trylock_common+0x10/0x10 [ 419.818953][ C0] ? rcu_is_watching+0x16/0xb0 [ 419.823754][ C0] ? trace_contention_end+0x3d/0x140 [ 419.829077][ C0] ? __mutex_lock+0x30b/0x1550 [ 419.833895][ C0] ? rtnl_newlink+0xc10/0x1c30 [ 419.838698][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 419.843776][ C0] ? ns_capable+0x89/0xe0 [ 419.848160][ C0] ? rtnl_nets_add+0x16c/0x300 [ 419.852971][ C0] ? refcount_inc+0x46/0x70 [ 419.857514][ C0] rtnl_newlink+0x146f/0x1c30 [ 419.862252][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.867315][ C0] ? finish_task_switch+0x40e/0xc60 [ 419.872556][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 419.877796][ C0] ? rcu_is_watching+0x16/0xb0 [ 419.882593][ C0] ? trace_sched_exit_tp+0x3a/0x130 [ 419.887826][ C0] ? __schedule+0x17f1/0x58f0 [ 419.892564][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 419.897886][ C0] ? __pfx___schedule+0x10/0x10 [ 419.902770][ C0] ? nlmon_xmit+0xb0/0x100 [ 419.907335][ C0] ? __lock_acquire+0x747/0x2de0 [ 419.912313][ C0] ? preempt_schedule_common+0x7f/0xd0 [ 419.917801][ C0] ? preempt_schedule_thunk+0x16/0x40 [ 419.923238][ C0] ? __local_bh_enable_ip+0xe9/0x140 [ 419.928566][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 419.933771][ C0] ? lock_acquire+0x115/0x350 [ 419.938482][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.943568][ C0] ? __pfx_rtnl_newlink+0x10/0x10 [ 419.948625][ C0] rtnetlink_rcv_msg+0x802/0xc00 [ 419.953603][ C0] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 419.958743][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.964329][ C0] ? ref_tracker_free+0x689/0x830 [ 419.969488][ C0] ? __pfx_ref_tracker_free+0x10/0x10 [ 419.974934][ C0] netlink_rcv_skb+0x226/0x4a0 [ 419.979877][ C0] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 419.985392][ C0] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 419.990757][ C0] netlink_unicast+0x7bd/0x940 [ 419.995592][ C0] netlink_sendmsg+0x813/0xb40 [ 420.000405][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.005725][ C0] ? apparmor_socket_sendmsg+0x98/0x360 [ 420.011374][ C0] ? __pfx_netlink_sendmsg+0x10/0x10 [ 420.016688][ C0] sock_sendmsg_nosec+0x13a/0x180 [ 420.021786][ C0] ____sys_sendmsg+0x54e/0x850 [ 420.022744][ C1] net_ratelimit: 82732 callbacks suppressed [ 420.022762][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 420.022868][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.022970][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.023094][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.023204][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 420.023306][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.023452][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f6:4d:9e:4a:e8:d7, vlan:0) [ 420.023555][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.023656][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.023768][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 420.152011][ C0] ? __pfx_____sys_sendmsg+0x10/0x10 [ 420.157372][ C0] ? import_iovec+0x73/0xa0 [ 420.162011][ C0] ___sys_sendmsg+0x2a5/0x360 [ 420.166750][ C0] ? __lock_acquire+0x747/0x2de0 [ 420.171736][ C0] ? __pfx____sys_sendmsg+0x10/0x10 [ 420.176980][ C0] ? futex_wait+0x2a2/0x390 [ 420.181591][ C0] ? __fget_files+0x2a/0x420 [ 420.186242][ C0] ? __fget_files+0x3a2/0x420 [ 420.190980][ C0] __x64_sys_sendmsg+0x1b1/0x290 [ 420.195960][ C0] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 420.201481][ C0] do_syscall_64+0x166/0x520 [ 420.206165][ C0] ? trace_irq_disable+0x3b/0x140 [ 420.211219][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.217340][ C0] ? clear_bhb_loop+0x70/0xc0 [ 420.222070][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.228011][ C0] RIP: 0033:0x7efe95d9e159 [ 420.232457][ C0] RSP: 002b:00007efe96ca4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 420.240910][ C0] RAX: ffffffffffffffda RBX: 00007efe96025fa0 RCX: 00007efe95d9e159 [ 420.248918][ C0] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000003 [ 420.256932][ C0] RBP: 00007efe95e3506b R08: 0000000000000000 R09: 0000000000000000 [ 420.264938][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 420.272940][ C0] R13: 00007efe96026038 R14: 00007efe96025fa0 R15: 00007ffc86518558 [ 420.280959][ C0] [ 420.284001][ C0] rcu: rcu_preempt kthread starved for 529 jiffies! g38793 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 420.294868][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 420.304859][ C0] rcu: RCU grace-period kthread stack dump: [ 420.310773][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 420.324313][ C0] Call Trace: [ 420.327623][ C0] [ 420.330587][ C0] __schedule+0x17db/0x58f0 [ 420.335127][ C0] ? __lock_acquire+0x747/0x2de0 [ 420.340115][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 420.345274][ C0] ? __pfx___schedule+0x10/0x10 [ 420.350153][ C0] ? lock_acquire+0x115/0x350 [ 420.354866][ C0] ? schedule+0x90/0x2b0 [ 420.359147][ C0] schedule+0x164/0x2b0 [ 420.363336][ C0] schedule_timeout+0x152/0x2c0 [ 420.368219][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 420.373624][ C0] ? __pfx_process_timeout+0x10/0x10 [ 420.378956][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 420.384798][ C0] ? prepare_to_swait_event+0x322/0x350 [ 420.390390][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 420.395290][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 420.401474][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 420.406793][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 420.412092][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 420.417939][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 420.422564][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.427798][ C0] ? __kthread_parkme+0x71/0x1f0 [ 420.432779][ C0] ? __kthread_parkme+0x199/0x1f0 [ 420.437843][ C0] kthread+0x38b/0x480 [ 420.441941][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 420.447169][ C0] ? __pfx_kthread+0x10/0x10 [ 420.451794][ C0] ret_from_fork+0x514/0xb70 [ 420.456437][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 420.461574][ C0] ? __switch_to+0xc89/0x1420 [ 420.466333][ C0] ? __pfx_kthread+0x10/0x10 [ 420.470967][ C0] ret_from_fork_asm+0x1a/0x30 [ 420.475808][ C0] [ 420.478854][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 420.485210][ C0] Sending NMI from CPU 0 to CPUs 1: [ 420.490448][ C1] NMI backtrace for cpu 1 [ 420.490524][ C1] CPU: 1 UID: 0 PID: 7181 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 420.490546][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 420.490558][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 420.490663][ C1] RIP: 0010:check_preemption_disabled+0x19/0xd0 [ 420.490692][ C1] Code: 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 41 57 41 56 53 65 8b 05 ab dd ae 07 65 48 8b 0d 7b dd ae 07 85 c9 74 0c <5b> 41 5e 41 5f 5d e9 bc e6 02 00 cc 9c 59 f7 c1 00 02 00 00 74 ea [ 420.490707][ C1] RSP: 0018:ffffc90000a180b8 EFLAGS: 00000206 [ 420.490722][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: 8000000000000103 [ 420.490734][ C1] RDX: 8000000000000100 RSI: ffffffff8c6dac60 RDI: ffffffff8c6dac20 [ 420.490748][ C1] RBP: ffffc90000a18218 R08: 0000000000000100 R09: 0000000000000004 [ 420.490760][ C1] R10: 0000000000000003 R11: 8000000000000100 R12: 1ffff92000143028 [ 420.490772][ C1] R13: ffffffff8abf85d2 R14: dffffc0000000001 R15: ffff88807efa8000 [ 420.490786][ C1] FS: 0000000000000000(0000) GS:ffff888124dca000(0000) knlGS:0000000000000000 [ 420.490802][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 420.490814][ C1] CR2: 000055557d4caa38 CR3: 000000007f740000 CR4: 00000000003526f0 [ 420.490832][ C1] Call Trace: [ 420.490840][ C1] [ 420.490849][ C1] rcu_is_watching+0x16/0xb0 [ 420.490873][ C1] NF_HOOK+0x5ae/0x6e0 [ 420.490966][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 420.490988][ C1] ? net_generic+0x1e/0x240 [ 420.491013][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 420.491031][ C1] ? net_generic+0x1e/0x240 [ 420.491054][ C1] ? net_generic+0x1e/0x240 [ 420.491080][ C1] br_nf_forward_ip+0x7e7/0xa30 [ 420.491096][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 420.491113][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 420.491139][ C1] nf_hook_slow+0xc5/0x220 [ 420.491181][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 420.491251][ C1] NF_HOOK+0x23e/0x3f0 [ 420.491275][ C1] ? NF_HOOK+0xa2/0x3f0 [ 420.491297][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 420.491320][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 420.491342][ C1] ? br_multicast_flood+0x11f6/0x1610 [ 420.491369][ C1] ? br_handle_vlan+0x5e/0x530 [ 420.491408][ C1] __br_forward+0x397/0x540 [ 420.491430][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 420.491455][ C1] br_handle_frame_finish+0x128e/0x1950 [ 420.491486][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 420.491512][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 420.491554][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 420.491574][ C1] ? nf_hook_slow+0x176/0x220 [ 420.491594][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 420.491619][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 420.491644][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 420.491699][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 420.491725][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 420.491750][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 420.491768][ C1] ? lock_acquire+0x115/0x350 [ 420.491788][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 420.491806][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 420.491835][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 420.491854][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 420.491872][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 420.491891][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 420.491909][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 420.491938][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 420.491963][ C1] br_handle_frame+0x1329/0x1600 [ 420.491994][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 420.492017][ C1] ? __lock_acquire+0x747/0x2de0 [ 420.492036][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 420.492065][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 420.492090][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 420.492119][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 420.492137][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 420.492172][ C1] ? process_backlog+0x3de/0x18b0 [ 420.492192][ C1] ? process_backlog+0x3de/0x18b0 [ 420.492213][ C1] process_backlog+0x727/0x18b0 [ 420.492235][ C1] ? process_backlog+0x3de/0x18b0 [ 420.492268][ C1] __napi_poll+0xaa/0x330 [ 420.492288][ C1] net_rx_action+0x61d/0xf50 [ 420.492314][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 420.492348][ C1] handle_softirqs+0x226/0x860 [ 420.492372][ C1] ? do_softirq+0x77/0xd0 [ 420.492395][ C1] ? nsim_dev_trap_report_work+0x7a4/0xb40 [ 420.492420][ C1] do_softirq+0x77/0xd0 [ 420.492441][ C1] [ 420.492447][ C1] [ 420.492453][ C1] __local_bh_enable_ip+0x100/0x140 [ 420.492476][ C1] nsim_dev_trap_report_work+0x7a4/0xb40 [ 420.492507][ C1] ? process_scheduled_works+0x97a/0x1630 [ 420.492530][ C1] process_scheduled_works+0xc3d/0x1630 [ 420.492567][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 420.492592][ C1] ? assign_work+0x3cf/0x5d0 [ 420.492616][ C1] worker_thread+0xa47/0xfb0 [ 420.492654][ C1] kthread+0x38b/0x480 [ 420.492671][ C1] ? __pfx_worker_thread+0x10/0x10 [ 420.492692][ C1] ? __pfx_kthread+0x10/0x10 [ 420.492709][ C1] ret_from_fork+0x514/0xb70 [ 420.492727][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 420.492744][ C1] ? __switch_to+0xc89/0x1420 [ 420.492770][ C1] ? __pfx_kthread+0x10/0x10 [ 420.492788][ C1] ret_from_fork_asm+0x1a/0x30 [ 420.492821][ C1]