last executing test programs: 12.108323286s ago: executing program 1 (id=2651): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)={0x20, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x80e1}, 0x20048014) sendmsg$IEEE802154_LLSEC_DEL_KEY(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r2, 0x300, 0x70bd28, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x1) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = socket$netlink(0x10, 0x3, 0x5) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000180)=0x402, 0x4) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x3, 0x0, 0x3, 0x2, 0x0, 0x70bd2c, 0x25dfdbfb}, 0x10}, 0x17, 0x7}, 0x0) ppoll(&(0x7f0000000140)=[{r3, 0x2400}], 0x1, 0x0, 0x0, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r7, 0x65, 0x2, &(0x7f0000000000)=0x1, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x10, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="050000000000000071192800000000008510000002000000850000003600000095000000000000009500a504000000006c0ec1084c0d7eb3105f3248024beab8ff4642b3ef414c3725c43e7da9"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x6}, 0x70) 11.396094991s ago: executing program 1 (id=2656): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x180800) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) socket$kcm(0x29, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) close(0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 6.488293907s ago: executing program 0 (id=2705): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x40000a7, 0x2000819c) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020200000d000000000000000000000003000600000000000a"], 0x68}, 0x1, 0x7}, 0x814) ioctl$sock_ifreq(r1, 0x89a3, &(0x7f00000000c0)={'ip6gretap0\x00', @ifru_names='gretap0\x00'}) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="1709000000000000000001000000050007000000000008000900fc00000008000a0000000000060002000100000014001f000000000000000000000000000000000014002000fec8"], 0x5c}}, 0x0) 5.369369146s ago: executing program 0 (id=2710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="34000000000703000000000000000000010000010c00064000000000000000080900010073797a300000000008000540000000019a63179f1baf97f6fe545d0ea3fea7ecd4d3a646ef593d0a077002b06f90c80038964ec3e54acef8810818db30a7008db298c8237de46224842fd69e67d7ad7d43a6c5481932d179563363a70ae367b79723ddb4f6bc7469f3c0997dc6814a30a39774cc7c5be5"], 0x34}, 0x1, 0x0, 0x0, 0x2000000}, 0x40000) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x20, 0x2, 0x7, 0x5, 0x0, 0x0, {0x5}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x20000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3e8, 0xffffffff, 0x218, 0x0, 0x218, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}, {[0x8, 0x2], 0x6, 0x15, 0x2}}, @common=@dst={{0x48}, {0x2, 0x0, 0x1, [0x2, 0x376, 0x8, 0x7ff, 0x5, 0x4, 0x8, 0x7, 0x8, 0xfff8, 0x81, 0x7240, 0x7fff, 0x101, 0x0, 0x5], 0x6}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0xe9c, 0x7}}}, {{@ipv6={@empty, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xff000000], [0x0, 0xffffff00, 0xff], 'team0\x00', 'batadv_slave_0\x00', {}, {}, 0x2e, 0x79, 0x4, 0x44}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5, 0x4d6], 0xe, 0xab, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={r4}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000c"], 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001c00)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000f91f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r7, r6}, 0x41) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r8, 0x6, 0xd, &(0x7f0000000080)='>', 0x1) setsockopt$inet6_int(r8, 0x29, 0x4b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in={{0x2, 0x4e21, @local}}, 0x60a7, 0x0, 0xffffffff, 0x4, 0x993}, &(0x7f0000000440)=0x98) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000480)=ANY=[@ANYRES32=r9, @ANYBLOB="010003000200"], 0xa) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r13}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4.770900704s ago: executing program 0 (id=2716): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001480)}, 0x0) recvmsg$unix(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000012c0)={&(0x7f0000001000)={0x24, @short={0x2, 0x3, 0xa94345a9702892c1}}, 0x14, &(0x7f0000001280)={&(0x7f0000001180)="22fdd724201bba16b68211953a2159edb87305725de9838d82444de8b30174b173c6c671be29834db8748ed25831c5f3fde3bf21df3cb0f136a8730f2ce4d8c1c431a8be08feb4ed6ebd3730a11ad082dfa5fc2cccd496e2dc9d3cecf10ba000cea1d796a1389a74249b284602f4985206f3ceca806ee46dab1b0d9fea6ce18b36c3a43ed359c232aaf1f2e29147024981e82b99a2a33ad87b4af2d2eba336b09429edbce4172e7795d5f3c144e614", 0xaf}, 0x1, 0x0, 0x0, 0x48014}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000040000000200"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5}, 0x94) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r4, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) sendmmsg$inet(r2, &(0x7f0000000400)=[{{&(0x7f0000000580)={0x2, 0x4e5c, @multicast2}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x40, 0x26, 0x109, 0x870bd22, 0xfffffff8, {0x2}, [@nested={0x24, 0x3d, 0x0, 0x1, [@nested={0x20, 0x99, 0x0, 0x1, [@typed={0x8, 0x84, 0x0, 0x0, @u32=0x3}, @typed={0x11, 0xcd, 0x0, 0x0, @binary="7d60bd41c2f9db48334f78b705"}]}]}, @typed={0x8, 0x3, 0x0, 0x0, @binary='G\x00\x00\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) 4.770637812s ago: executing program 3 (id=2717): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x67a021c03d2005e9, 0xa, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x1, 0x600, 0x1}}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2b}, 0x94) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x5}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000017c0)=@newtfilter={0x84, 0x2c, 0xd2b, 0x70bd2b, 0x35dfdbfb, {0x0, 0x0, 0x0, r5, {0xc}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x58, 0x2, [@TCA_U32_SEL={0x54, 0x5, {0x10, 0x9, 0x4, 0x10da, 0xa760, 0x0, 0x10, 0x102, [{0x1000, 0xe, 0x4, 0x9f6}, {0xdeb2, 0x3, 0x6, 0x3}, {0x1, 0xfffffffb, 0x100, 0x3ff}, {0x200, 0x3ff, 0x3, 0x4}]}}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0xfff2}, 0x24040084) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)={'tunl0\x00', r5, 0x7, 0x40, 0x4, 0x1, {{0xd, 0x4, 0x1, 0x3, 0x34, 0x67, 0x0, 0x9, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0xdd, 0x0, 0x0, [0x0, 0x4, 0x8, 0x3acb, 0x40, 0x477cff35]}]}}}}}) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @private=0xa010102, @multicast1}, {0x11, 0x81, 0x0, @multicast1}}}}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4.522840273s ago: executing program 2 (id=2719): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0xf, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x301}, 0x94) 4.341625538s ago: executing program 2 (id=2720): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0xc08, 0x80}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c8c0}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xa, 0x5, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x10000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0)=r7, 0x4) sendmsg$unix(r6, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x88, 0x10, 0x403, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x429a4}, [@IFLA_LINKINFO={0x54, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x3c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5, 0x4, 0x1}, @IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8, 0x25, 0x9dc}, @IFLA_BRPORT_MODE={0x5}, @IFLA_BRPORT_STATE={0x5, 0x1, 0x3}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x1}, @IFLA_BRPORT_UNICAST_FLOOD={0x5}, @IFLA_BRPORT_VLAN_TUNNEL={0xfffffffffffffeab}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}]}, 0x88}}, 0x8000) 3.760749494s ago: executing program 0 (id=2724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1f}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002380)={{r4, &(0x7f0000000100)='.)\x00', 0x88000, &(0x7f0000000140)={@align=0xb9, {0x5, 0x6, 0xff, 0x7}}, 0x10001, &(0x7f0000000180), &(0x7f00000001c0)=0x10}, 0x1, &(0x7f0000002340)=[{0x2, 0x8bc, &(0x7f0000000200)='\x00', &(0x7f0000001340)="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", 0xfc0, 0x1a}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x8, 0x4, 0x6, 0x306, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) r5 = socket(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f8ff070000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1}, 0x840) 3.632685267s ago: executing program 1 (id=2725): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x18, 0x1418, 0x1, 0x70bd2b, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x0) 3.50920503s ago: executing program 3 (id=2726): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703004200000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 3.50150606s ago: executing program 1 (id=2727): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000000)=@generic={&(0x7f00000017c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8}, 0x18) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="5c000000020601080000000000000000000000000d0003006c6973743a736574000000000500050000000000050001000700000005000400000000000900020073797a320000000014000780080006400000021c080017"], 0x5c}}, 0x0) 3.372814913s ago: executing program 2 (id=2729): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2d, 0x2, 0x0) connect$unix(r1, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f00000094c0)={r4, 0x11, "dca600e55332db388377fe958035fd9c31"}, &(0x7f00000095c0)=0x19) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000680)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014020d000a00000000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d00d00000000000000bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 3.293362495s ago: executing program 0 (id=2730): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}]}], {0x14}}, 0xa4}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797afc3c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000010b615cd89f1b3621c000340000000022c00b3120e0a1f0200000000000000000a0000000900010073797a31000000000900020073797a310000000014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fbd3df2502000000050004000100000005000400010000001400020076657468315f746f5f7465616d0000000900030073797a32000000000900010073", @ANYRES64=r1], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB="28f80100", @ANYRES16, @ANYBLOB="04002abd7000fedbdf251200000014010180170001006574683a6261746164765f736c6176655f3100004c0002800800030009000000080002000c000000080002008a7b0000080002000500000008000400ff0000000800030000000000080002000104000008000300090000000800030000000100380004001400010002004e21ac1e01010000000000000000200002000a004e2100000009000000000000000000000000000000010c000000080003000400000034"], 0x128}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x43, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000004c0)='GPL\x00', 0x4, 0x5, &(0x7f0000000500)=""/5, 0x40f00, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7429}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000050000000200000004"], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000001bc6500850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f00000000c0)=r9, 0x4) sendmsg$unix(r8, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x3, 0x1, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x6c, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x8, 0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x4, 0x2, 0x5, 0x2, 0x6f1, 0x9, 0x5, 0xfffffff3, 0x200, 0x8, 0xb, 0xc, 0x1c, 0x9, 0x4, 0x3}}]}}]}, 0x6c}}, 0x24040004) getsockopt$inet6_mreq(r4, 0x29, 0x14, &(0x7f0000000100)={@empty, 0x0}, &(0x7f0000000280)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000940)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000700)={0x13c, 0x0, 0x901, 0x70bd29, 0x25dfdbfe, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x4}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x24}, 0x4000010) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 3.203757923s ago: executing program 1 (id=2731): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x38, 0x1403, 0x1, 0x1070bd27, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$tipc(0x1e, 0x4, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) close(r4) setsockopt$sock_int(r2, 0x1, 0x1, &(0x7f00000000c0)=0x3a7b, 0x4) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010025077000f9dbdf2500000000", @ANYRES32=0x0, @ANYBLOB="158804000301050008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) 3.180358878s ago: executing program 3 (id=2732): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x80}, 0x50) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x9, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0x1}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x6, 0xd, &(0x7f0000000700)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x44, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x359}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r5, 0x0, 0xe, 0x0, &(0x7f0000000140)="410c49bc3c388e38d0da5a20564e", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x80800) setsockopt$sock_int(r8, 0x1, 0x7, &(0x7f0000001040)=0x10000b, 0x4) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x3}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f00000000c0)=""/63, 0xffd5}, {&(0x7f0000000200)=""/83, 0xffffffe0}, {&(0x7f0000000280)=""/221, 0xd0}, {&(0x7f0000000580)=""/18, 0x13}], 0x4}, 0x10001) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r6, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r6, 0xff7f}}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x4, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 3.009427671s ago: executing program 4 (id=2733): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0x0, 0x8001, 0x0, 0x2, 0x7ff, 0x80, 0x4, 0xfffffff8, r3}, &(0x7f0000000300)=0x20) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000010010000000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB="0000000000000000240012800b0001006d616373656300001400028005000f0002000000080005"], 0x44}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) sendmmsg$unix(r11, &(0x7f0000007600)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="b8869dd9fb606c38b5f1e38268a10856", 0x10}], 0x1, 0x0, 0x0, 0x4004001}}], 0x1, 0x4000801) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f00000006c0)='S', 0x1}], 0x1}, 0x40004) sendmsg$inet(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000cc0)="aa", 0x1}], 0x1}, 0x800) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.swap.events\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x2a, &(0x7f0000000100)=r14, 0x4) recvmsg(r12, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) close(r13) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000980)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000640)={0x2cc, r9, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x100}, @NL80211_ATTR_VENDOR_DATA={0x95, 0xc5, "592b55e3a63e3b2ad179f4b32443c9def637cb25041ba9587b0c7ba6eb39bfe47e685ccdf429ac88397c3b9b6f4361d8ee7f0598367e4025fed15d57364cd3d2c8ae0147f3f1a5e87fa4b4f6f7381e82f56840962c4c2fb86108619214f0a51589830c360309f2cabb3d0ac323ef75b5ca7dce6bfcbfa5d60b681df17d69f2f118820ca75caae5ab1d140f902b0497d6b5"}, @NL80211_ATTR_VENDOR_ID={0x8}, @NL80211_ATTR_VENDOR_DATA={0x97, 0xc5, "608619f7b008d29c08151ea0e09ef4e4c1d15e53145832c6927994350b04d70886c45a7b28c3d93587d2ec9e05be99d1dbd2f338c8b72f23edb51b8293abe8e5902eca3b92afb5304c04a0f0e5baab77a3e56490a4262d0d602625f0a5aafbfc7d3fb2b71ca5947e376200d311a874541704fd983545e84fefc3e6ab4199161e2d3fa596468caf7b3ae82a9d7b72732f785991"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}, @NL80211_ATTR_VENDOR_DATA={0x26, 0xc5, "60f3788430355541685c41211557bad4c5edec6e720da79f7d54e7c79f343f364b03"}, @NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x1}, @NL80211_ATTR_VENDOR_DATA={0x5c, 0xc5, "033d23e87914a726a786bbecf761eb1cf946b1a6645252743716e42b1986431698c448c25cef73bb80ebbd49bf0a55505ed80de4798a1dcbbf2d157f27190cd16220f84ac15ddbf10a71a70ae14274e297a29abc31f0e683"}, @NL80211_ATTR_VENDOR_DATA={0xe2, 0xc5, "723470a89e1d9f164805fc00694c72fc4b3cc0eb0939d5a587cd411f43e93cc69eeafab1daca0c8e4a90c95bef876a2bf8dcaf6a199d518a1764ae78ef6d2889bce72741caa5100409cdb601055fe20764c3bec9725adca7b17bed56b169b1f01848ea7ead41eba9c4915f4704a33bb15bd16a709f8886c757e6883a8d200b855d2b411e7f3f2e6603d785340f920428e914001bd092adad37781971070b0a6812366d162932881d84a11cf5685307810498c05f0b1712269ce1a3e2222b305839da9bfedfe725a4785046956e1b78ed590bc59a0c3bb301d7f26034e2b4"}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40800}, 0x4001) bpf$MAP_CREATE(0x0, &(0x7f0000000f80)=@base={0xa, 0x0, 0x4, 0x4002, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7800000013000500010000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000058001a0006000000020000004c0004801c000180080001000100000008000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="2c000680"], 0x78}}, 0x0) 2.906701762s ago: executing program 2 (id=2734): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x1f0}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) 2.898947422s ago: executing program 0 (id=2735): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000080)={'virt_wifi0\x00', @ifru_names='ip6_vti0\x00'}) ioctl$sock_proto_private(r0, 0x8b2c, &(0x7f0000000080)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x26, 0x301, 0x270bd1d, 0x25dfdbf4, {0x20}, [@typed={0x8, 0x167, 0x0, 0x0, @u32=0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x40000) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111b6000000000085100000000000009500a50500"/48], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) ioctl$TUNGETDEVNETNS(r4, 0x5460, 0x20000000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000015c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xa, '\x00', 0x0, 0xffffffffffffffff, 0x1}, 0x50) r5 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f3027c0004060000000000bf852c8986626691b01b2d44e4ce28715f5f28"], 0xe0}], 0x1}, 0x40000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0x1, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x1d, &(0x7f0000000500)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x9}, [@tail_call, @alu={0x4, 0x1, 0x2, 0x4, 0x2, 0xfffffffffffffff4, 0x4}, @map_idx={0x18, 0x8, 0x5, 0x0, 0xc}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x41}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ldst={0x3, 0x3, 0x0, 0x8, 0x4, 0x50, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0xd, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) r7 = socket(0x1d, 0x2, 0x6) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r7, 0xc400941d, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r9 = epoll_create1(0x0) r10 = socket$unix(0x1, 0x2, 0x0) close(r10) r11 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r11, 0x1, 0x10, &(0x7f0000000240)=0x8000, 0x4) ioctl$int_in(r11, 0x5421, &(0x7f0000000340)=0xfff) connect$unix(r11, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e24}, 0x6e) connect$unix(r11, &(0x7f0000000040)=@file={0x0, './file0\x00'}, 0x6e) socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000002c0)={0xa002a014}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r8, 0xc0385868, &(0x7f0000000180)={r2, &(0x7f0000000040)='GPL\x00', 0x40000, &(0x7f00000000c0)={@_ha_fsid={[0xf, 0x4]}, {0x59c0, 0x3db, 0x30b, 0xfffffffffffffff8}}, 0x1000, &(0x7f0000000100), &(0x7f0000000140)=0x6}) 2.64685508s ago: executing program 2 (id=2736): socket$inet_mptcp(0x2, 0x1, 0x106) (async) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000180), 0x8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8931, &(0x7f0000000000)={'dummy0\x00', @ifru_data=0x0}) 2.140429142s ago: executing program 4 (id=2737): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000140)=r3, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) 2.131938325s ago: executing program 1 (id=2738): syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), 0xffffffffffffffff) r0 = syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x8090) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async, rerun: 32) r2 = socket$tipc(0x1e, 0x5, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) (async) socket$tipc(0x1e, 0x5, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x64}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) (async) r3 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETLINK(r6, 0x400454cc, 0x338) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x7}, @CGW_DST_IF={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00'}) (async, rerun: 32) r8 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) recvmsg(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000540)=0x189d, 0x1a) (async) socket$kcm(0x10, 0x2, 0x10) (async, rerun: 32) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000040)=0x4, 0x4) (async, rerun: 32) recvmmsg(r8, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}, 0xb393}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x6}, [@typed={0x8, 0xa, 0x0, 0x0, @binary="11000000"}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000080) 1.73183464s ago: executing program 4 (id=2739): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='{!%\x00', 0x1, &(0x7f0000000040)={@align=0x8, {0x9, 0x401, 0x7, 0xfffffffffffffff8}}, 0x7, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xb}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, {0x2, 0x4e24, @loopback}, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x4e23, @broadcast}, 0x218, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xc, 0x8, 0x2}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000400)={0x0, 0x3c, &(0x7f00000003c0)=[@in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e21, 0x4770, @dev={0xfe, 0x80, '\x00', 0x29}, 0x6}, @in={0x2, 0x4e22, @multicast2}]}, &(0x7f0000000440)=0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000580)={'vlan0\x00', 0x1000}) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000600), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f0000000640)={0x194, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x5c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffff800}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x100}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffff8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x18, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}]}, @TIPC_NLA_MEDIA={0x10c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa1}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffff28}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000008c0)=@req={0x28, &(0x7f0000000880)={'veth0_to_bond\x00', @ifru_flags=0x1000}}) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000900), &(0x7f0000000980)=0x68) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a00)={0x19c, r3, 0x300, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x71b0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10000}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NODE={0x58, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "d671d2ba83b11766da5e8f619828da9bcadb129f2d8c75983178c38bcd0731879c"}}]}, @TIPC_NLA_NODE={0x104, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "15342cb0aba25d923d037d4721db84d3b1bff0d32cdef46168"}}, @TIPC_NLA_NODE_ID={0xb8, 0x3, "74b53a2aafea7553d9d73ecc94faff4e3d29ca4b4cdab2bb00b0467e893bfa76822602157ad43116d5fbb65df39e335201ad08ca3c46164cede12183bfffca4f03ebd8d9afff47121375ea7e67d6a73a5882d236a43933036067a813bd1287a85e5336bb77f32e7d969777029f2aa683fe69d67107f649150fef856831455962445d29ebd876d418e8fd292bd0764cc11d859272e830c1f010b46f0fab888f3b84550208ddf4a8c8799e1f30b296b41de50bd649"}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x19c}, 0x1, 0x0, 0x0, 0x20000841}, 0x2b2c8a84498fb847) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x1c, r1, 0x8, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}}, 0x20040040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x10, 0x3f5, 0x2, 0x70bd2a, 0x25dfdbfe, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20048041}, 0x20008000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000e80), r0) sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000f40)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x1c, r5, 0x2, 0x70bd27, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r6, &(0x7f0000001080)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000fc0)={0x44, r1, 0x120, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xcf}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x10001}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x4048000) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000001100)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@gettclass={0x24, 0x2a, 0x4, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xd, 0xffff}, {0xffe0, 0x10}, {0x1, 0xffe0}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x400c890) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001240), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r8, &(0x7f0000001340)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x48, r9, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0x7, 0x1, '2.\x00'}, @NLBL_MGMT_A_DOMAIN={0x8, 0x1, '{!%\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) r10 = accept4$bt_l2cap(r0, &(0x7f0000001380)={0x1f, 0x0, @none}, &(0x7f00000013c0)=0xe, 0x80000) accept4$bt_l2cap(r10, &(0x7f0000001400)={0x1f, 0x0, @fixed}, &(0x7f0000001440)=0xe, 0x80000) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000001480)={0x3ff, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000001640)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x3854ae69dbd07876}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x1c, 0x0, 0x900, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 1.276565755s ago: executing program 4 (id=2740): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a002000000000070000000008000600010000001400030076657468315f766c616e000000000000140002"], 0x4c}, 0x1, 0x0, 0x0, 0x24000804}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x4}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x34, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9, 0x1f}, {0x4}}]}, 0x34}}, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) recvfrom$phonet(r3, 0x0, 0x0, 0x40000002, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0300000004000000040000000100000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="18"], 0x50) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r4, 0x4048587b, &(0x7f0000002380)={{r4, &(0x7f0000000100)='.)\x00', 0x88000, &(0x7f0000000140)={@align=0xb9, {0x5, 0x6, 0xff, 0x7}}, 0x10001, &(0x7f0000000180), &(0x7f00000001c0)=0x10}, 0x1, &(0x7f0000002340)=[{0x2, 0x8bc, &(0x7f0000000200)='\x00', &(0x7f0000001340)="9e49501d3797080a00c4e0866b1a3e231eedd421c9b8a2a4400c9983fb6049fca466030e012dac602c26ec769a0e7ece3b058e2e47b953e4f423c44ead1f0f8a136aa3bebe2d4a3b0a99128f2a8e7e2c32f41c0a0f41064e7344b2f7d857d16c108d8b10b12a9acfc6234c30f587318aff86ea2df2c75be25c285ad143403d9d42bca955488fe163df2b14cbb9ad8be63ea0c1398cdfb9602059f99c548b74a97b9958f304bd309f96a2f87491d63bf085beff56d2a6c530312e6a5ad985a40f43bad6af66144e9f011fb25405279dc752a3aa23db1f479f2c65a95fa406c45579960cca0857d99e7a778235d0148fb91f93a744a0008e7002e0e9e3a783a88b5d39d7e8dfd0c722418224dd03feebc55cd8490128c3f1ec2d1a93e3e7eea3b41dd89a9c8228535f3c5d6c28b5a31d3dc9482ba3e45a400af54185e76ad61d94a9f0d1c6592ac949fc613c9525c65802811c37f6282e753f424c8026aa100cda475f7d06b57f3d746c2cdb16afe8c1d1c1b0f18324b9d641f0a039042514a1e8507c33b4f47b0df4767fd3ce8e91d86cbe1f7850b5104bb1e8f97a17032183bce5e66b51eb665f49c3e512b560c2d4e94c1665dfe11d1bda6fc9445251e7cdeb52bdaf720bf13e69486d8a7f89614e2301213fd798788811a4cdca3871a91ffd7b9199eddbcc0d1a596c94338a91e358fbf407fafd915ad78bbad2f08f5086b5b73048fd20085bb3834ea8674f054eb3405e8e57a77e1415af194734bb752767f34aaa1435627f67243e1deb12a9e03253244a2e3fb76a6576b39088f309d84825212ad230eaec8c8b008fc86654311290346b52660552d4c8f7e58967143ef74bd1396f8d3039750422d3ec40e9332ac71b8046be58247e8105b0d777f9e46637c4bff2b0d01a0268dc16d413a3e3ddeedeaa7b6d476002173bce81ed9d1becd661dd367d004b554afb89a5a5814db6b002f17a92f2b5d28e76dceb0d322fe477d82717097bede1febcfa3ad98272cc723ceaa13a67d49a91a23fcdc0c6fe91dfab76876779dc683cb99883e5fd8f5d9e3ccb26cd942c2d735208e8beff3b5ff153e80cb82d30f179832f64c7ca400c74b6861aa4e6388ce1eea982edf414916e160ef56bf51d1635626d4d5c583d7a0b9e6d86337d02accdcd9dc2f2d6ff59c960ee53851855e4ddf8e8619d83c2f8dbcc66cad3bf5aef6d75e3374b0fdf8e4b681c4a232e289356edd5e88753da9bcf94d262337e1c66909706badae49d510361b7026f12b860dcee2d667b9437aeaf6367a34df0da1043edc481ab30388dcebfa503a536915c6353d1f34746a09c090e570565f33f8da2cb2133b5b15b94152e08a7fad06621ff6a8d8cd3ce03f095685b4bd1dfbcdd8238c11f4e7b6bc348a5f0df1c485b4b196570ce5e9932bcb157fb2c97b22ac562b7d09ba469b97544098eb78d2cdef012860768ab92e988755632c929d308a0babdd5814c94b693ca2329920ce24f80fa6b6e32e33c1716b2adeea66ef406c2e3ff9adff67b56b80ca58b495241985c1861012854d52efa4ed15bece4e0efe09fb0e977b124397a2824ca86d22e72de3d15dd323c99c31feddabfc3c83843d8ad9d22905eafbbcde579a808c5b2e640a4ad821863ba17f1754e90f7b9d9772e146c77217054dd5dcfd936988d397d6610d2b52ad5dc42c8c139120c09f80a5a5449dd3808863deb6e437ee5369e6843b075b7621ce9dc23b09574c7ff1e4ee727b0410586b8353bb4545b0c1bebe225ba980cd4c2315859a1f3215d277d4a7386e8e65e6b7a86091e8f8e792ce30775c0eb5c751df21f6a78358320a943fe6c67ef71159ada7660609c6e3c4516b4075db5f7af03be6128d0b5c563f9e07ce0233a392ff9e1cdf7c12935551f4a5d437b7c8280dc86d9f4f5d8cb58de7f6e0bae204abf278f35204e36dd131a15d26963ce14b042f230ad31ae3f6e6c0bbb53cce697ca27512b3136fbd02bb9e64e793a1beb7fe99b29c66b53ffdc86c85eb30e427075ef6314e05264a116100ebd5527fdcd14a5324cb92935a30957e828ebdbf3090139b56a8e31de84363a318b61482931658ce3210d7f41a6b1635204f8dab62f9147ba3bdf856798e3dab77f2bd65416bd9abd66e49e1bf7a8fcf6fb25137e19b705fbbf261947f7c794b8d9aec757db2ea40c178f177695f46c6c71aa41e11e12277987359880dd7ef01065fed7f57c45e39ecb0bc9bce7401b01f4373f1ed4462a6e81aacec094e2ac552b9646940898c82b9e7f4fbc55cd084a10bffa4b1727ea96fb1efd838f5984bd708192b689f6521017aa77810006e723b68d26394f6045f885fbd15a414b51bb8cb5bf3b197b073e67ddde25a23e20bfa83178d5fae1fb3f54356bf79d521d1e2476150f6ac44a1e5d62b1ad5186f6ffef5c0511757f38dead74ddf4bc7638c9c76500b826469bfdd55869f0a24d6e7e0939ff6bba901447b10786284a6b634993a9a65dcf934c5eabb12d155e52bd52e694974d768611771a36bdd5b385e27a5c0cf8c9a9ef9448c381602c5300bf9f122df7a490e4b4e2f785d2955bcb92d5af211ff8443bfb039c37cb0d48dc9c3ff88cae19fa02fe19d97f5f25c8032bfe27afcf4cf3977882c8239df01ebc5ff6c8b27f2df274124e35bc0ede3682b010c0d0ab56c1341a0901735381a4399d832ad87004cb24d1c9717846e5bd451d9c2a13421ee8531fa72155b096bd3a2cce9caff0f86a125dd5362806147bc2897d0323adfb55d767d534490d37507bd28c2ad3975fcf9253803eab998ec16c9bc969532b19c1b772698cde231c632981f31d934c98834d97c62e0c543a1b5b34bcf74354eaeaa42c3d0d1d5a8605d034c1fda2eb16d2bff6603efe16ce2b6f617ba70d9165611bb95d30446c61de0b6d0a6538ff02cae3a4fed7f55fe5628e314b005b5729091cc7d6ef77c77847bf1e97cd8ad74e8a8bf637e2229f64f123941c6acee1c5d694c065fd789b57cdc5f927233a2de904f89237a9e16b94b7b37438a5900a5a5b97802ade4d33a3d2a3ee21ba01b1ca68e8ada13f99f430ff954a028101cded49afc29cd43a342e25d94712d36a32166412c2a151f016457869905865e243f890323efb5485e45ce1830d993dfe6fc5223f6e63f332cd9d90d439420dbd89215521a36b2ab52c9995a8905256908c7b7a07b0f8655e386468b5e50da9ddcf65138a8cfea40d31f6793c1bdcee70194fcbe5e480737814f8d922ef583812b256db1ddd54c2f0ac6755226f50d7ac1f07e59af967d10e3929d817d5347065f0264866e07a5740e50133d00d3b8400c611ba1e6378dd769f11e4aa09b14173e8a7e2d6e9a1e80f37fdb6ae757ab0021b574be70cda9bbb4d4fdcb03f56341c03d7d9984156b80a0ebf95765387659c349a3f0f7a77b0b0e38e6f65789e43d9f9f60564eb4ad90ba73d0d9cd4428e2f1ac7ef48c89c1b345ffd3151d76ec1a2b626aedd958ac5eee03501d760580ae410366ca38173b863631bdf9193cd69e95430fa3c496fd647b471d62d58631b7ec1554526ea14e3719beadfb344bb6698ae75ce9aaed14d15f4f69e948381bd99d639787160c226ab21acb903ba1e009c6b6e2733ba18ca80b06474abaf1a2bd07281e82f9d1c005c7f6dd4f1ebd8a303c6e0be57038645f52a9c52590bf3c8bcfe7374e02c0f86ab7b015d678c047fd9eab0b6e65b719538fda5e2186c07542c8abb66d83728a0fede636d17291d8841687d7205453c1f081c2c5a4abaa48e331ecebb7d97184b18f0704dc7c154e2bdc63eb606e56aee77292a4e8dfd46291b288481fb9cce6c786f9960a2b83f1170f4f05cafadc614b68c2dc22b79fba8ef8cba1e40143f6c308397e8761005e8143e6bceecce5fc0eb0736bfceb34ecf1bb3bd19a8de8909cb78b3062130da64e86b0b0408c3bf4e17a0c1c326c5172598af1388913bffc2645b6d602eece8640192666cb66db4480b080230c69df71d70618eae9596ad4a971d4139adeebcd7b5f1c8a38b9ac8d22df5151664434268307e40e86f4f68e47d5992513767b4d0972212fe00dfd11cb7a2f43e79447b759829b6969a66ceeaaa30d6c8d171a519068265d9442df9184c663486dc6701caa7484d176c6c174a5831f4432f7f2b0a7e5a67349cf8ee59311a24405a024654a8ce805c1a7fc2e08e880ed4573f3eba11c20a5a6b9d84dea4762547d61c68422dc740d8688a4881620568dd0181ad17acc765536096cd4a7aef180e3bfd76a21daf7d7a48647e10a47a769b376cf628c911b92205f2b794b0088550db64bf0a7eb05b53cda4def4ae14d1139b9486badbbe5ef11e1b00eea2995c45c087f7cc7437fe0aed2a2518ab27e794c49407e072a15ccbf8046df4ff09f46e9210093b980a37ef8e9f7e3a6e17d4c85a1fa9da17a54dda97419d7ed974f827d5b9254ea6d19a835fc3057c3e645cf7f8974517e00750e950b3314f9a0ea48277ec9c758c886b9576612d5698b93b2571b40b05908807a51af2b20c75f5834e4e2247e808f2ce4861ab7e9ad433778bcd5f811f3e598566b88b14fadd336b26415f936a44cc28e391933d83bd07e33d71f3a5aaaaaa3a461da5a9509d8e60b298a50fe1367a82e3ea78e2e53bea3ddfd08fe033695c658460b253f53acec903987d9511504d93b5bed35e2f04496927081b752fff6f0c0b0093b99580dbd7fc8c963d764696dd9e055d8830723a82d355c6700c0bdf05ebd84dea111fe1e6b647126322942fba04a9810d386cb210159f6c74f2a7a30f3fb24dee95da2fdbfb8e7245428a2b2ede16970302d946d42714bd1d26e00d3d50f0130b118441942294f0b5b5796eb6e580fefec96ddb48517134c35267552bf72f3f345a4badd0a068b31c3b84d17177f483d630650847bab603f3df0a1bf1cf2732c8363dc871f0d048d41a49f4ef1fcd8775bf2bb4fb3d98e6799aedaaa56d108bac89e9f18ebfa473be4df3f7c1a6b334f0028292d28f31c4b08e3b9eae1edbd9d213ff5f2b97e216e48902e9b880032393e17e48a32142d638a7d35ba8fe5243b203a529913f44715da3f74048749549141b9be9b9d87e3aaee93dabea3d35d2a803208a48bed1cc698ebb895a4e50565d8f8c957d1e223e3a2c344d52c0f66116be40f203ec795e76f3a202f6dde391429caaab427690142c2101e81c4cfa1685a69c368c95ae0b8a925edf172b7b162cb7396cd558b69bd12756d53aaeeaedf3fdd2614ada617a6f5b5c9e44ba96ad79a27220762ac0128e34e0d2ac08b89201afa45d2f1c73db5199b1a59e50922daf069a99bf69881560b52199de40d2fed610cdcf367229345c0522583f1cce3de1454325160073af794ed6fa9cdc98654065f705e020b279acb8810ae70fca5973a64677ebf8f7633622e38750700c181d7115e96fe480d6417c74fc3e3a9290c66f0b88660333ea1b074d318665193f99b2a9fb9b527e8d1ce564bf8fd4b617b8e3ee5d6a184eb1ffd2ea210dba01a34c985d5699159cb84f8b79c802119355901a08aa190c07ef8d7562ae0df6719c26c37881a8cf0dcd8b73b7de8721aa8347f7e01e09e25c1f18957263cbf07966284b991f221d6a19bd655710dae330f8255fb0e377e946d66c16ff6cddf608854353d24d1c049d0554195f0fb1c29fbc94dbf6", 0xfc0, 0x1a}]}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x7, 0x8, 0x4, 0x6, 0x306, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) r5 = socket(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080006000000e8fe55a1180000000600142603600e120a000d0000000401a80016000a003a40f8ff070000004dcf5c31932c984a3116a9c50461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025cc049e00360db70100000040fad95667e006dcdf63951f215ce29b09d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43", 0xd8}], 0x1}, 0x840) 995.01427ms ago: executing program 2 (id=2741): ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg2\x00'}) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x7c}}, 0x0) (async) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'ip_vti0\x00', &(0x7f00000001c0)=@ethtool_sset_info={0x1f, 0x6, 0x9}}) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000), 0x0) (async) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80800) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0xa8, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x7c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '#\xee[[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '.%\\/-}@{\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x894}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'wg2\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x41}, 0x0) recvmsg(r1, 0x0, 0x2120) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x8}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) 891.676683ms ago: executing program 3 (id=2742): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703006400000000b7040000000000008500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 644.071475ms ago: executing program 3 (id=2743): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000040)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r4, @ANYBLOB="06001500070000000c001680080001"], 0x38}, 0x1, 0x0, 0x0, 0x4080}, 0x10) bind$packet(r1, &(0x7f0000000080)={0x11, 0x4, r4, 0x1, 0x1}, 0x14) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008001000b704000000000400850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xffff0000, 0xe, 0x0, &(0x7f0000000400)="aa000000000001000061127e9740", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 433.458068ms ago: executing program 3 (id=2744): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100), 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r1) openat$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140), 0x2, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$BTRFS_IOC_LOGICAL_INO(r2, 0xc0389424, 0x0) write$cgroup_subtree(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX=r2, @ANYRESDEC=r0, @ANYRESOCT, @ANYBLOB="d366f7d50c54718c74ac1ad4840832b59d9b352b1c86b04480280662e3cd9e5481902e114823f854b2318ea1805dd6bf24b545e53115a38c93c325b722a30a70032131ef2eac34757227389a454c6f664fd193a8102f667570e67b07386598a62dac2f83d6e638743c4b38118f7dea94dcef2cb99641f839ca21e9c1adac042938770580c349ca0638caf6fdf0e40a7751a8271c2a1c9f865186460b1c097456349715cdba18aeb7c03f225d8db582e237387cab3578ff534dd6223df8e14b0c3cb270bb4e483bbcc0f533c39ca01ea2252d85368de3e882ffa74d1e85279efef7", @ANYRESOCT=r0, @ANYRESDEC=r1], 0xfe04) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, 0x0, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffff}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000500)=ANY=[@ANYRES16=r5, @ANYRES16=0x0, @ANYBLOB="200025bd700004000000010000000c01040000000000000000001c0007800c0009800800010090f9c3862022a54f3ae27dde6d9b35d2f008676481163fa54ffbda3f298d9c2e3f9e1f5d1a13b68bd3917eab7a4742b30295da63708ebee3d1939383ee01178c9d53d1e7eed059ca6e792506b55a3e1b68db8a2deb2020cdf853a12c169a", @ANYRES32=r0, @ANYBLOB="0c00018008000100", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x8810}, 0x44811) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_delneigh={0x1c, 0x1e, 0x1, 0xffffffbd, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x1c}, 0x1, 0x0, 0x0, 0x4004091}, 0x8000) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r7, 0x8b2a, &(0x7f0000000040)) socket$nl_generic(0x10, 0x3, 0x10) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller0\x00', @link_local}) r8 = socket(0x2000000015, 0x80005, 0x0) setsockopt$SO_TIMESTAMP(r8, 0x1, 0x40, &(0x7f0000000000)=0x5, 0x4) bind$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvfrom$packet(r8, 0x0, 0x0, 0x40000022, 0x0, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[], 0xffbf) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="802a000000250400050010000500000008001b00bf000000296eb2aaf583910a039590b6fcd2392232e43ee038c13fa043eed66d4ac3e2f3"], 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 146.741349ms ago: executing program 4 (id=2745): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0xa, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0xf, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x700}, 0x94) 0s ago: executing program 4 (id=2746): r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b405000000000000611051000000000073019b00000000009500000000000000fd661937ce76b8"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000600000002000013040000000200000001000000c375e49d05000000070000000000000000615f8e5ce354"], 0x0, 0x44, 0x0, 0x8, 0x1}, 0x28) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1020041, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r2, 0x1, 0xffffffff}, 0x10) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), 0x4) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x6, 0x0, 0x0, 0x2, 0x1}}) socket(0x10, 0x803, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@call={0x85, 0x0, 0x0, 0xc2}]}, &(0x7f0000000000)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0\x00'}) (async) socket$xdp(0x2c, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b405000000000000611051000000000073019b00000000009500000000000000fd661937ce76b8"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85}, 0x52) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) (async) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000080000000600000002000013040000000200000001000000c375e49d05000000070000000000000000615f8e5ce354"], 0x0, 0x44, 0x0, 0x8, 0x1}, 0x28) (async) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000002d40)=0x1020041, 0x4) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) (async) bind$xdp(r3, &(0x7f00000003c0)={0x2c, 0x0, r2, 0x1, 0xffffffff}, 0x10) (async) setsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000080), 0x4) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x6, 0x0, 0x0, 0x2, 0x1}}) (async) kernel console output (not intermixed with test programs): cp:0kB local_pcp:0kB free_cma:0kB [ 292.083078][T11635] lowmem_reserve[]: 0 0 0 0 0 [ 292.083113][T11635] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 292.083225][T11635] Node 0 DMA32: 406*4kB (UME) 491*8kB (UE) 349*16kB (UME) 219*32kB (UME) 34*64kB (UME) 12*128kB (UME) 34*256kB (UME) 13*512kB (UME) 1*1024kB (M) 2*2048kB (UM) 295*4096kB (UM) = 1250656kB [ 292.086230][T11635] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 292.086324][T11635] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 7*16kB (UM) 9*32kB (UM) 3*64kB (UM) 4*128kB (UM) 6*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3944564kB [ 292.086469][T11635] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.086492][T11635] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.086506][T11635] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 292.086521][T11635] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 292.086535][T11635] 46392 total pagecache pages [ 292.086542][T11635] 0 pages in swap cache [ 292.086549][T11635] Free swap = 124996kB [ 292.086556][T11635] Total swap = 124996kB [ 292.086564][T11635] 2097051 pages RAM [ 292.086570][T11635] 0 pages HighMem/MovableOnly [ 292.086577][T11635] 428758 pages reserved [ 292.086583][T11635] 0 pages cma reserved [ 292.113784][T11621] bridge_slave_0: left allmulticast mode [ 292.113807][T11621] bridge_slave_0: left promiscuous mode [ 292.114071][T11621] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.160294][T11621] bridge_slave_1: left allmulticast mode [ 292.160318][T11621] bridge_slave_1: left promiscuous mode [ 292.161845][T11621] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.176790][T11621] vlan2: left promiscuous mode [ 292.176810][T11621] geneve0: left promiscuous mode [ 292.241722][T11621] bond0: (slave bond_slave_0): Releasing backup interface [ 292.302961][T11621] bond0: (slave bond_slave_1): Releasing backup interface [ 292.430198][T11621] team0: Port device team_slave_0 removed [ 292.532407][T11621] team0: Port device team_slave_1 removed [ 292.533187][T11621] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.533207][T11621] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.569316][T11621] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.569339][T11621] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.583939][T11621] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 293.400533][T11652] tc_dump_action: action bad kind [ 293.552364][T11642] macsec2: entered allmulticast mode [ 293.558699][T11642] veth1_macvtap: entered allmulticast mode [ 293.576739][T11642] veth1_macvtap: left allmulticast mode [ 293.787532][T11668] netlink: 'syz.1.1756': attribute type 1 has an invalid length. [ 293.895799][ T5635] Bluetooth: hci3: command 0x0406 tx timeout [ 294.017626][T11668] 8021q: adding VLAN 0 to HW filter on device bond12 [ 294.158560][T11686] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1761'. [ 294.942430][T11709] bond13: entered allmulticast mode [ 294.975647][T11706] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1768'. [ 295.099226][T11731] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1773'. [ 295.209193][T11727] netlink: 'syz.3.1770': attribute type 2 has an invalid length. [ 295.646319][T11727] ´: entered promiscuous mode [ 295.813847][T11743] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1777'. [ 296.203171][T11753] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 296.476707][T11759] ieee802154 phy0 wpan0: encryption failed: -22 [ 296.994680][T11775] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1789'. [ 297.011180][T11776] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1788'. [ 297.202416][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 297.216382][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1788'. [ 297.227519][T11776] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 297.753296][T11789] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1794'. [ 299.720351][T11779] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.1788'. [ 299.739072][T11784] veth0_virt_wifi: entered promiscuous mode [ 299.747706][T11784] veth0_virt_wifi: left promiscuous mode [ 299.963387][T11824] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 300.089848][T11825] block nbd1: server does not support multiple connections per device. [ 300.090421][T11825] block nbd1: shutting down sockets [ 300.710490][T11843] netlink: 2 bytes leftover after parsing attributes in process `syz.4.1810'. [ 300.726397][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1808'. [ 300.961554][T11852] FAULT_INJECTION: forcing a failure. [ 300.961554][T11852] name failslab, interval 1, probability 0, space 0, times 0 [ 300.961713][T11852] CPU: 1 UID: 0 PID: 11852 Comm: syz.0.1813 Not tainted syzkaller #0 PREEMPT(full) [ 300.961740][T11852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 300.961751][T11852] Call Trace: [ 300.961758][T11852] [ 300.961768][T11852] dump_stack_lvl+0xe8/0x150 [ 300.961799][T11852] should_fail_ex+0x410/0x560 [ 300.961831][T11852] should_failslab+0xa8/0x100 [ 300.961852][T11852] ? skb_clone+0x212/0x3a0 [ 300.961873][T11852] kmem_cache_alloc_noprof+0xa1/0x600 [ 300.961902][T11852] ? skb_clone+0x212/0x3a0 [ 300.961928][T11852] skb_clone+0x212/0x3a0 [ 300.961952][T11852] __netlink_deliver_tap+0x413/0x860 [ 300.961986][T11852] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.962009][T11852] netlink_deliver_tap+0x19c/0x1b0 [ 300.962032][T11852] netlink_sendskb+0x68/0x140 [ 300.962055][T11852] netlink_rcv_skb+0x2a4/0x4a0 [ 300.962078][T11852] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 300.962107][T11852] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.962142][T11852] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.962164][T11852] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.962190][T11852] netlink_unicast+0x7bd/0x940 [ 300.962221][T11852] netlink_sendmsg+0x813/0xb40 [ 300.962253][T11852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.962283][T11852] ? apparmor_socket_sendmsg+0x98/0x360 [ 300.962312][T11852] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.962333][T11852] sock_sendmsg_nosec+0x13a/0x180 [ 300.962368][T11852] ____sys_sendmsg+0x54e/0x850 [ 300.962394][T11852] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.962423][T11852] ? import_iovec+0x73/0xa0 [ 300.962447][T11852] ___sys_sendmsg+0x2a5/0x360 [ 300.962465][T11852] ? __lock_acquire+0x6df/0x2e50 [ 300.962489][T11852] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.962531][T11852] ? lockdep_hardirqs_on+0x7b/0x110 [ 300.962573][T11852] ? __x64_sys_sendmsg+0x196/0x290 [ 300.962600][T11852] __x64_sys_sendmsg+0x1b1/0x290 [ 300.962623][T11852] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.962665][T11852] do_syscall_64+0x166/0x520 [ 300.962690][T11852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.962709][T11852] ? clear_bhb_loop+0x70/0xc0 [ 300.962732][T11852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.962751][T11852] RIP: 0033:0x7f38ca19e159 [ 300.962769][T11852] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.962785][T11852] RSP: 002b:00007f38cb005028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.962806][T11852] RAX: ffffffffffffffda RBX: 00007f38ca425fa0 RCX: 00007f38ca19e159 [ 300.962820][T11852] RDX: 0000000000008050 RSI: 0000200000000080 RDI: 0000000000000003 [ 300.962833][T11852] RBP: 00007f38cb005090 R08: 0000000000000000 R09: 0000000000000000 [ 300.962844][T11852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.962856][T11852] R13: 00007f38ca426038 R14: 00007f38ca425fa0 R15: 00007ffcf86b7b98 [ 300.962886][T11852] [ 301.825731][T11871] vti0: entered promiscuous mode [ 301.825857][T11871] vti0: entered allmulticast mode [ 302.147685][T11882] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1822'. [ 302.376888][T11895] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1826'. [ 302.505805][T11898] syzkaller0: entered promiscuous mode [ 302.511801][T11898] syzkaller0: entered allmulticast mode [ 302.531053][T11898] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1827'. [ 302.634730][T11902] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1828'. [ 302.889057][T11907] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1830'. [ 303.237582][T11920] bridge_slave_0: left allmulticast mode [ 303.244380][T11920] bridge_slave_0: left promiscuous mode [ 303.249778][T11921] netlink: 'syz.4.1836': attribute type 1 has an invalid length. [ 303.262905][T11920] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.283197][T11920] bridge_slave_1: left allmulticast mode [ 303.291959][T11920] bridge_slave_1: left promiscuous mode [ 303.298215][T11920] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.320060][T11920] team0: Port device team_slave_0 removed [ 303.332524][T11920] team0: Port device team_slave_1 removed [ 303.344954][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.352621][T11920] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.366217][T11920] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.375282][T11920] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.386094][T11920] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 303.547751][T11921] 8021q: adding VLAN 0 to HW filter on device bond15 [ 303.575074][T11924] dummy0: left promiscuous mode [ 303.593068][T11929] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 303.680221][T11924] bond15: (slave dummy0): making interface the new active one [ 303.688678][T11924] bond15: (slave dummy0): Enslaving as an active interface with an up link [ 303.699628][T11929] bridge_slave_1: Caught tx_queue_len zero misconfig [ 303.759458][ T3329] bond15: (slave dummy0): link status definitely down, disabling slave [ 303.793090][ T3329] bond15: now running without any active interface! [ 304.049240][T11934] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1839'. [ 304.291082][T11935] bond10 (unregistering): Released all slaves [ 304.527644][T11954] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1847'. [ 304.588359][T11956] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1847'. [ 304.650959][T11960] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 304.689229][T11958] macsec2: entered promiscuous mode [ 304.689269][T11958] hsr0: entered promiscuous mode [ 304.714491][T11958] hsr0: left promiscuous mode [ 304.755009][T11964] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1850'. [ 304.992055][T11968] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1851'. [ 305.042340][T11968] netlink: 'syz.3.1851': attribute type 13 has an invalid length. [ 305.042469][T11968] netlink: 'syz.3.1851': attribute type 58 has an invalid length. [ 305.151907][T11971] netlink: 'syz.4.1854': attribute type 2 has an invalid length. [ 305.163334][T11971] netlink: 'syz.4.1854': attribute type 2 has an invalid length. [ 305.318805][T11976] veth0_virt_wifi: entered promiscuous mode [ 305.330808][T11976] veth0_virt_wifi: left promiscuous mode [ 305.457957][T11977] €Â speed is unknown, defaulting to 1000 [ 305.797575][T11987] FAULT_INJECTION: forcing a failure. [ 305.797575][T11987] name failslab, interval 1, probability 0, space 0, times 0 [ 305.810870][T11987] CPU: 0 UID: 0 PID: 11987 Comm: syz.4.1858 Not tainted syzkaller #0 PREEMPT(full) [ 305.810901][T11987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 305.810912][T11987] Call Trace: [ 305.810921][T11987] [ 305.810930][T11987] dump_stack_lvl+0xe8/0x150 [ 305.810965][T11987] should_fail_ex+0x410/0x560 [ 305.811000][T11987] should_failslab+0xa8/0x100 [ 305.811025][T11987] __kvmalloc_node_noprof+0x176/0x820 [ 305.811048][T11987] ? bpf_compute_postorder+0x87c/0x970 [ 305.811079][T11987] ? bpf_stack_liveness_init+0x29/0x90 [ 305.811099][T11987] ? bpf_stack_liveness_init+0x29/0x90 [ 305.811126][T11987] bpf_stack_liveness_init+0x29/0x90 [ 305.811150][T11987] bpf_check+0x24f6/0x2e10 [ 305.811183][T11987] ? ktime_get_with_offset+0x93/0x2d0 [ 305.811208][T11987] ? __pfx_bpf_check+0x10/0x10 [ 305.811234][T11987] ? bpf_obj_name_cpy+0x194/0x1e0 [ 305.811266][T11987] bpf_prog_load+0x14d6/0x1c20 [ 305.811301][T11987] ? __pfx_bpf_prog_load+0x10/0x10 [ 305.811359][T11987] __sys_bpf+0xd0d/0xd90 [ 305.811390][T11987] ? __pfx___sys_bpf+0x10/0x10 [ 305.811423][T11987] ? __fget_files+0x2a/0x420 [ 305.811466][T11987] ? ksys_write+0x242/0x270 [ 305.811498][T11987] ? __pfx_ksys_write+0x10/0x10 [ 305.811531][T11987] __x64_sys_bpf+0xba/0xd0 [ 305.811555][T11987] do_syscall_64+0x166/0x520 [ 305.811584][T11987] ? trace_irq_disable+0x3b/0x140 [ 305.811603][T11987] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.811624][T11987] ? clear_bhb_loop+0x70/0xc0 [ 305.811649][T11987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.811669][T11987] RIP: 0033:0x7f32c1b9e159 [ 305.811689][T11987] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.811706][T11987] RSP: 002b:00007f32c2a81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 305.811729][T11987] RAX: ffffffffffffffda RBX: 00007f32c1e25fa0 RCX: 00007f32c1b9e159 [ 305.811744][T11987] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 305.811761][T11987] RBP: 00007f32c2a81090 R08: 0000000000000000 R09: 0000000000000000 [ 305.811786][T11987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 305.811798][T11987] R13: 00007f32c1e26038 R14: 00007f32c1e25fa0 R15: 00007ffd301f7c58 [ 305.811830][T11987] [ 306.508700][T12000] netlink: 'syz.0.1863': attribute type 23 has an invalid length. [ 306.819724][T12004] netlink: 'syz.4.1865': attribute type 13 has an invalid length. [ 306.819766][T12004] netlink: 'syz.4.1865': attribute type 58 has an invalid length. [ 306.894791][T12006] bridge0: port 6(veth0_virt_wifi) entered blocking state [ 306.902852][T12006] bridge0: port 6(veth0_virt_wifi) entered disabled state [ 306.903067][T12006] veth0_virt_wifi: entered allmulticast mode [ 306.929503][T12006] veth0_virt_wifi: entered promiscuous mode [ 307.450920][T11977] __nla_validate_parse: 7 callbacks suppressed [ 307.450977][T11977] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1853'. [ 307.470688][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'. [ 307.854610][T12013] bond0: Caught tx_queue_len zero misconfig [ 308.298613][T12027] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1874'. [ 308.298758][T12027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1874'. [ 308.374412][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 308.492318][T12020] bond10: Unable to set peer notification delay as MII monitoring is disabled [ 308.507774][T12020] bond10 (unregistering): Released all slaves [ 309.137329][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1880'. [ 309.167070][T12047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1880'. [ 309.171050][T12047] netlink: 'syz.4.1880': attribute type 10 has an invalid length. [ 309.194889][T12047] bond15: (slave dummy0): Releasing active interface [ 309.372951][T12047] team0: Port device dummy0 added [ 309.737410][T12063] xt_hashlimit: size too large, truncated to 1048576 [ 310.083018][T12071] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1884'. [ 310.104492][T12072] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1884'. [ 310.285344][T12080] netlink: 216 bytes leftover after parsing attributes in process `syz.1.1885'. [ 310.296154][T12080] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1885'. [ 310.895704][ T5632] block nbd1: Receive control failed (result -1) [ 310.944417][T12101] syzkaller0: entered promiscuous mode [ 310.944463][T12101] syzkaller0: entered allmulticast mode [ 312.066508][T12117] geneve0: Caught tx_queue_len zero misconfig [ 312.419466][T12126] FAULT_INJECTION: forcing a failure. [ 312.419466][T12126] name failslab, interval 1, probability 0, space 0, times 0 [ 312.419514][T12126] CPU: 0 UID: 0 PID: 12126 Comm: syz.0.1901 Not tainted syzkaller #0 PREEMPT(full) [ 312.419539][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 312.419551][T12126] Call Trace: [ 312.419560][T12126] [ 312.419568][T12126] dump_stack_lvl+0xe8/0x150 [ 312.419602][T12126] should_fail_ex+0x410/0x560 [ 312.419638][T12126] should_failslab+0xa8/0x100 [ 312.419665][T12126] __kvmalloc_node_noprof+0x176/0x820 [ 312.419691][T12126] ? bpf_compute_scc+0xb8/0xb10 [ 312.419719][T12126] ? bpf_compute_scc+0xb8/0xb10 [ 312.419763][T12126] bpf_compute_scc+0xb8/0xb10 [ 312.419812][T12126] bpf_check+0x25c9/0x2e10 [ 312.419846][T12126] ? ktime_get_with_offset+0x93/0x2d0 [ 312.419872][T12126] ? __pfx_bpf_check+0x10/0x10 [ 312.419898][T12126] ? bpf_obj_name_cpy+0x194/0x1e0 [ 312.419929][T12126] bpf_prog_load+0x14d6/0x1c20 [ 312.419964][T12126] ? __pfx_bpf_prog_load+0x10/0x10 [ 312.420017][T12126] __sys_bpf+0xd0d/0xd90 [ 312.420048][T12126] ? __pfx___sys_bpf+0x10/0x10 [ 312.420082][T12126] ? __fget_files+0x2a/0x420 [ 312.420125][T12126] ? ksys_write+0x242/0x270 [ 312.420155][T12126] ? __pfx_ksys_write+0x10/0x10 [ 312.420188][T12126] __x64_sys_bpf+0xba/0xd0 [ 312.420212][T12126] do_syscall_64+0x166/0x520 [ 312.420239][T12126] ? trace_irq_disable+0x3b/0x140 [ 312.420257][T12126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.420277][T12126] ? clear_bhb_loop+0x70/0xc0 [ 312.420303][T12126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.420323][T12126] RIP: 0033:0x7f38ca19e159 [ 312.420343][T12126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.420360][T12126] RSP: 002b:00007f38cb005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 312.420383][T12126] RAX: ffffffffffffffda RBX: 00007f38ca425fa0 RCX: 00007f38ca19e159 [ 312.420398][T12126] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 312.420412][T12126] RBP: 00007f38cb005090 R08: 0000000000000000 R09: 0000000000000000 [ 312.420425][T12126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 312.420437][T12126] R13: 00007f38ca426038 R14: 00007f38ca425fa0 R15: 00007ffcf86b7b98 [ 312.420469][T12126] [ 312.774725][T12133] __nla_validate_parse: 4 callbacks suppressed [ 312.774781][T12133] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1906'. [ 312.809256][T12133] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1906'. [ 313.120775][T12141] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1910'. [ 313.895838][T12160] atomic_op ffff88802b46e1e0 conn xmit_atomic 0000000000000000 [ 313.918564][T12166] netlink: Unknown conntrack attr (type=12550, max=9) [ 313.918623][T12166] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 314.124608][T12168] netlink: 'syz.0.1919': attribute type 2 has an invalid length. [ 314.124651][T12168] netlink: 'syz.0.1919': attribute type 2 has an invalid length. [ 314.158530][T12172] netlink: 'syz.0.1919': attribute type 2 has an invalid length. [ 314.158577][T12172] netlink: 'syz.0.1919': attribute type 2 has an invalid length. [ 314.464108][T12182] netlink: 216 bytes leftover after parsing attributes in process `syz.2.1924'. [ 315.288301][T12200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1932'. [ 315.798949][T12217] netlink: 'syz.3.1936': attribute type 7 has an invalid length. [ 315.859804][T12042] udevd[12042]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 315.940124][T12220] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1937'. [ 315.940413][T12220] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1937'. [ 316.121003][T12225] netlink: 'syz.0.1938': attribute type 16 has an invalid length. [ 316.121054][T12225] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1938'. [ 316.121894][T12222] netlink: 'syz.0.1938': attribute type 16 has an invalid length. [ 316.121910][T12222] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1938'. [ 316.789375][T12238] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1945'. [ 317.340147][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.475544][T12263] vxcan1: tx drop: invalid da for name 0x0000000004000000 [ 318.115759][T12283] __nla_validate_parse: 2 callbacks suppressed [ 318.123295][T12283] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1957'. [ 318.138295][T12260] ip_tables: iptables: counters copy to user failed while replacing table [ 318.463841][T12290] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1960'. [ 318.565545][T12293] netlink: 'syz.0.1960': attribute type 13 has an invalid length. [ 318.565593][T12293] netlink: 'syz.0.1960': attribute type 58 has an invalid length. [ 318.565624][T12293] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1960'. [ 318.870001][T12301] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1965'. [ 319.025559][T12298] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1964'. [ 319.025610][T12298] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1964'. [ 319.068575][T12310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 319.269878][T12314] Bluetooth: hci0: unsupported parameter 5135 [ 319.269926][T12314] Bluetooth: hci0: unsupported parameter 8192 [ 319.269956][T12314] Bluetooth: hci0: unsupported parameter 5135 [ 319.269973][T12314] Bluetooth: hci0: unsupported parameter 8192 [ 320.000100][T12331] syzkaller0: entered promiscuous mode [ 320.000155][T12331] syzkaller0: entered allmulticast mode [ 320.157684][T12336] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1976'. [ 320.219374][T12339] netlink: 'syz.1.1976': attribute type 13 has an invalid length. [ 320.219427][T12339] netlink: 'syz.1.1976': attribute type 58 has an invalid length. [ 320.219458][T12339] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1976'. [ 320.890369][T12346] geneve3: entered promiscuous mode [ 320.945799][ T82] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.945967][ T82] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.946023][ T82] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.946064][ T82] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.546241][T12355] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.226469][ T30] audit: type=1800 audit(1788596230.248:2): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1982" name="memory.events" dev="tmpfs" ino=2192 res=0 errno=0 [ 322.917085][T12389] syzkaller0: entered promiscuous mode [ 322.917135][T12389] syzkaller0: entered allmulticast mode [ 323.049816][T12391] tipc: Can't bind to reserved service type 0 [ 323.441467][T12397] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1993'. [ 323.549881][T12397] netlink: 'syz.4.1993': attribute type 13 has an invalid length. [ 323.549932][T12397] netlink: 'syz.4.1993': attribute type 58 has an invalid length. [ 323.549965][T12397] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1993'. [ 324.055922][T12419] openvswitch: netlink: Flow actions attr not present in new flow. [ 325.111248][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2012'. [ 325.182027][T12456] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2010'. [ 325.363126][T12458] bond8 (unregistering): Released all slaves [ 325.664241][T12473] syzkaller0: entered promiscuous mode [ 325.664313][T12473] syzkaller0: entered allmulticast mode [ 326.084515][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2020'. [ 326.095050][T12485] block nbd2: Unsupported socket: should be TCP or UNIX. [ 326.309873][T12489] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.188703][T12512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2029'. [ 327.202009][T12512] openvswitch: netlink: Flow actions attr not present in new flow. [ 327.262885][T12510] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2029'. [ 327.263596][T12516] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2030'. [ 327.563905][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2031'. [ 327.568890][T12520] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2031'. [ 327.715294][T12520] gretap0: entered promiscuous mode [ 327.716045][T12520] debugfs: 'hsr1' already exists in 'hsr' [ 327.716066][T12520] Cannot create hsr debugfs directory [ 327.716121][T12520] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 328.749978][T12551] __nla_validate_parse: 1 callbacks suppressed [ 328.750076][T12551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2041'. [ 328.907626][T12560] sch_fq: defrate 4294967293 ignored. [ 328.983935][T12551] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2041'. [ 329.220675][T12567] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 329.260651][T12567] blkio.reset_stats is deprecated [ 329.279815][T12570] netlink: 'syz.1.2046': attribute type 1 has an invalid length. [ 329.690646][T12585] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 329.736618][T12586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2051'. [ 329.736666][T12586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2051'. [ 329.743227][T12586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.765371][T12582] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 329.798731][T12582] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2048'. [ 333.202038][T12604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2056'. [ 334.410923][T12604] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 335.096861][T12623] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2063'. [ 335.227697][T12636] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 335.452878][T12638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2068'. [ 335.695554][T12652] netlink: 'syz.1.2070': attribute type 1 has an invalid length. [ 336.029807][T12662] netlink: 232 bytes leftover after parsing attributes in process `syz.4.2071'. [ 336.134192][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 336.148381][T12658] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2071'. [ 336.206451][T12667] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2073'. [ 336.630408][T12675] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2074'. [ 336.737298][T12680] netlink: 'syz.1.2078': attribute type 2 has an invalid length. [ 336.746608][T12680] SET target dimension over the limit! [ 336.752948][T12680] netlink: 140 bytes leftover after parsing attributes in process `syz.1.2078'. [ 336.763352][T12680] netlink: 72 bytes leftover after parsing attributes in process `syz.1.2078'. [ 336.841464][T12683] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2079'. [ 338.027018][T12706] bond12: option lacp_active: invalid value (33) [ 338.052341][T12706] bond12 (unregistering): Released all slaves [ 338.411422][T12714] netlink: 'syz.3.2088': attribute type 13 has an invalid length. [ 338.411551][T12714] netlink: 'syz.3.2088': attribute type 58 has an invalid length. [ 338.811304][T12727] macsec1: entered allmulticast mode [ 338.811346][T12727] veth1_macvtap: entered allmulticast mode [ 338.834731][T12727] veth1_macvtap: left allmulticast mode [ 340.378344][T12754] __nla_validate_parse: 4 callbacks suppressed [ 340.378441][T12754] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2101'. [ 340.378801][T12754] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2101'. [ 340.529742][T12759] tipc: Enabled bearer , priority 5 [ 340.784866][T12761] netlink: 'syz.2.2104': attribute type 10 has an invalid length. [ 340.793934][T12761] netlink: 156 bytes leftover after parsing attributes in process `syz.2.2104'. [ 341.171818][T12766] x_tables: duplicate underflow at hook 4 [ 341.583924][T12777] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 341.670520][T12774] veth0_macvtap: left promiscuous mode [ 341.988056][ T9241] tipc: Node number set to 1313508542 [ 342.180706][T12780] €Â speed is unknown, defaulting to 1000 [ 343.731733][T12810] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 343.988350][T12818] syzkaller0: entered promiscuous mode [ 343.988392][T12818] syzkaller0: entered allmulticast mode [ 344.931471][ T5635] block nbd2: Receive control failed (result -32) [ 345.340880][T12841] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2126'. [ 345.522753][T12843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 345.718030][T12843] bond8: option lacp_active: invalid value (65) [ 345.751703][T12843] bond8 (unregistering): Released all slaves [ 345.957202][ T5278] veth0_macvtap: entered promiscuous mode [ 346.648750][T12866] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2136'. [ 346.801840][T12875] SET target dimension over the limit! [ 348.638629][ T30] audit: type=1804 audit(1788596256.658:3): pid=12930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2153" name="/newroot/421/cgroup.controllers" dev="tmpfs" ino=2183 res=1 errno=0 [ 348.665976][ T30] audit: type=1800 audit(1788596256.698:4): pid=12930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2153" name="cgroup.controllers" dev="tmpfs" ino=2183 res=0 errno=0 [ 348.700101][ T30] audit: type=1800 audit(1788596256.728:5): pid=12930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2153" name="cgroup.controllers" dev="tmpfs" ino=2183 res=0 errno=0 [ 348.878723][T12932] netlink: 140 bytes leftover after parsing attributes in process `syz.4.2154'. [ 348.895098][T12932] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2154'. [ 349.081486][T12943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2156'. [ 349.177920][T12949] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2156'. [ 349.188457][T12941] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2156'. [ 349.719201][T12968] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2165'. [ 350.144732][T12982] macvlan2: entered promiscuous mode [ 350.150386][T12982] bond0: entered promiscuous mode [ 350.156922][T12982] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 350.165163][T12982] macvlan2: entered allmulticast mode [ 350.165182][T12982] bond0: entered allmulticast mode [ 350.165199][T12982] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 350.187252][T12982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 350.202637][T12982] bond0: left allmulticast mode [ 350.202696][T12982] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 350.202822][T12982] bond0: left promiscuous mode [ 350.286056][T12979] €Â speed is unknown, defaulting to 1000 [ 350.292524][ T9241] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 350.485970][T12989] macvlan2: entered promiscuous mode [ 350.492082][T12989] bond0: entered promiscuous mode [ 350.497373][T12989] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 350.497852][T12989] macvlan2: entered allmulticast mode [ 350.497869][T12989] bond0: entered allmulticast mode [ 350.497885][T12989] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 350.528575][T12989] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 350.538836][T12989] bond0: left allmulticast mode [ 350.543871][T12989] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 350.551453][T12989] bond0: left promiscuous mode [ 350.596258][ T9241] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 350.606716][T12994] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2173'. [ 350.696946][T12992] Bluetooth: hci0: unsupported parameter 5135 [ 350.696991][T12992] Bluetooth: hci0: unsupported parameter 8192 [ 350.697027][T12992] Bluetooth: hci0: unsupported parameter 5135 [ 350.697045][T12992] Bluetooth: hci0: unsupported parameter 8192 [ 350.991989][T13002] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2174'. [ 351.009554][T12999] nbd: must specify a size in bytes for the device [ 351.149428][T13002] ipvlan2: entered allmulticast mode [ 351.149470][T13002] syz_tun: entered allmulticast mode [ 351.427176][T13000] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2174'. [ 352.359309][T13037] pim6reg1: entered promiscuous mode [ 352.359350][T13037] pim6reg1: entered allmulticast mode [ 352.417955][T13044] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2190'. [ 352.752691][T13044] bond8: entered promiscuous mode [ 352.760183][T13044] 8021q: adding VLAN 0 to HW filter on device bond8 [ 352.831635][T13061] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 353.055436][T13067] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2195'. [ 353.078209][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'. [ 353.078458][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'. [ 353.078737][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'. [ 353.078971][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'. [ 353.120016][T13070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2195'. [ 353.134569][T13075] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 353.407970][T13082] netlink: 'syz.3.2199': attribute type 1 has an invalid length. [ 354.593584][T13102] syzkaller0: entered promiscuous mode [ 354.599792][T13102] syzkaller0: entered allmulticast mode [ 355.576607][T13124] syzkaller0: entered promiscuous mode [ 355.582427][T13124] syzkaller0: entered allmulticast mode [ 355.899571][T13150] __nla_validate_parse: 61 callbacks suppressed [ 355.899734][T13150] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2211'. [ 356.091537][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2212'. [ 356.520187][T13153] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.527569][T13155] tipc: Enabling of bearer rejected, failed to enable media [ 356.538306][T13157] tipc: Enabling of bearer rejected, failed to enable media [ 356.611433][T13160] 8021q: adding VLAN 0 to HW filter on device bond10 [ 356.626134][T13160] bond10: (slave wireguard0): The slave device specified does not support setting the MAC address [ 356.627109][T13160] bond10: (slave wireguard0): Error -95 calling set_mac_address [ 356.982081][T13178] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2217'. [ 357.147477][T13178] bridge0: entered promiscuous mode [ 357.147545][T13178] bridge0: entered allmulticast mode [ 357.441311][T13193] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2222'. [ 357.591483][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2223'. [ 357.646700][T13197] bond9: option lacp_active: invalid value (4) [ 357.666470][T13197] bond9 (unregistering): Released all slaves [ 357.677048][T13200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2225'. [ 357.853093][T13203] netlink: 'syz.4.2225': attribute type 4 has an invalid length. [ 357.853196][T13203] netlink: 17 bytes leftover after parsing attributes in process `syz.4.2225'. [ 358.119061][T13202] sch_tbf: burst 7 is lower than device bridge0 mtu (1514) ! [ 358.611223][T13224] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2234'. [ 358.929838][T13230] openvswitch: netlink: Key type 12061 is out of range max 32 [ 359.297920][T13241] netlink: 'syz.0.2240': attribute type 1 has an invalid length. [ 359.298046][T13241] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2240'. [ 359.325278][T13215] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2230'. [ 359.542846][T13246] sock: sock_timestamping_bind_phc: sock not bind to device [ 359.998771][T13257] geneve2: entered promiscuous mode [ 360.005500][T13257] geneve2: entered allmulticast mode [ 360.015854][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.016060][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.016119][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.046055][T10358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.927045][T13289] netlink: 'syz.3.2254': attribute type 10 has an invalid length. [ 361.030421][T13289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.050836][T13289] team0: Port device bond0 added [ 361.202915][T13292] syzkaller0: entered promiscuous mode [ 361.210578][T13292] syzkaller0: entered allmulticast mode [ 361.223214][T13292] tipc: Enabled bearer , priority 0 [ 361.287919][T13292] tipc: Resetting bearer [ 361.318585][T13290] tipc: Resetting bearer [ 361.395308][T13290] tipc: Disabling bearer [ 362.195995][T13335] netlink: 'syz.0.2267': attribute type 3 has an invalid length. [ 362.305059][T13323] netlink: 'syz.3.2263': attribute type 11 has an invalid length. [ 362.490450][T13348] __nla_validate_parse: 5 callbacks suppressed [ 362.498298][T13348] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2272'. [ 362.660364][T13349] sctp: [Deprecated]: syz.3.2263 (pid 13349) Use of int in maxseg socket option. [ 362.660364][T13349] Use struct sctp_assoc_value instead [ 363.741968][T13384] €Â speed is unknown, defaulting to 1000 [ 364.219567][T13397] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2286'. [ 364.647674][T13399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2285'. [ 364.671614][T13399] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2285'. [ 364.923181][T13416] x_tables: duplicate underflow at hook 1 [ 364.987701][T13416] syzkaller0: entered promiscuous mode [ 364.987747][T13416] syzkaller0: entered allmulticast mode [ 365.378820][T13430] syzkaller1: entered promiscuous mode [ 365.386858][T13430] syzkaller1: entered allmulticast mode [ 365.411558][T13425] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2292'. [ 365.449111][T13425] bridge0: port 4(veth1_to_bridge) entered blocking state [ 365.449440][T13425] bridge0: port 4(veth1_to_bridge) entered disabled state [ 365.450122][T13425] veth1_to_bridge: entered allmulticast mode [ 365.485663][T13384] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2280'. [ 365.495310][T13384] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2280'. [ 365.520746][T13425] veth1_to_bridge: entered promiscuous mode [ 365.545971][T13425] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 365.559896][T13425] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:1) [ 365.575353][T13425] bridge0: port 4(veth1_to_bridge) entered blocking state [ 365.575495][T13425] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 366.138177][T13423] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 366.220528][T13452] batman_adv: batadv0: Adding interface: macvtap1 [ 366.227807][T13452] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.253631][T13452] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 366.263695][T13443] syzkaller0: entered promiscuous mode [ 366.263715][T13443] syzkaller0: entered allmulticast mode [ 366.384699][T13460] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2305'. [ 366.732772][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2309'. [ 366.812419][T13482] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2310'. [ 366.945127][T13491] FAULT_INJECTION: forcing a failure. [ 366.945127][T13491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.959230][T13491] CPU: 0 UID: 0 PID: 13491 Comm: syz.3.2312 Not tainted syzkaller #0 PREEMPT(full) [ 366.959259][T13491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 366.959273][T13491] Call Trace: [ 366.959354][T13491] [ 366.959410][T13491] dump_stack_lvl+0xe8/0x150 [ 366.959595][T13491] should_fail_ex+0x410/0x560 [ 366.959728][T13491] _copy_from_iter+0x1d3/0x1660 [ 366.959792][T13491] ? __alloc_skb+0x27a/0x7a0 [ 366.959935][T13491] ? __alloc_skb+0x27a/0x7a0 [ 366.959966][T13491] ? __alloc_skb+0x27a/0x7a0 [ 366.959993][T13491] ? __pfx__copy_from_iter+0x10/0x10 [ 366.960020][T13491] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 366.960079][T13491] ? __alloc_skb+0x27a/0x7a0 [ 366.960106][T13491] ? __alloc_skb+0x27a/0x7a0 [ 366.960140][T13491] ? netlink_sendmsg+0x650/0xb40 [ 366.960210][T13491] ? skb_put+0x112/0x210 [ 366.960233][T13491] netlink_sendmsg+0x6c0/0xb40 [ 366.960268][T13491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.960301][T13491] ? apparmor_socket_sendmsg+0x18b/0x360 [ 366.960381][T13491] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.960405][T13491] sock_sendmsg_nosec+0x13a/0x180 [ 366.960460][T13491] ____sys_sendmsg+0x54e/0x850 [ 366.960487][T13491] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.960517][T13491] ? import_iovec+0x73/0xa0 [ 366.960564][T13491] ___sys_sendmsg+0x2a5/0x360 [ 366.960603][T13491] ? __lock_acquire+0x6df/0x2e50 [ 366.960654][T13491] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.960717][T13491] ? __fget_files+0x2a/0x420 [ 366.960763][T13491] ? __fget_files+0x3a2/0x420 [ 366.960800][T13491] __x64_sys_sendmsg+0x1b1/0x290 [ 366.960827][T13491] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 366.960873][T13491] do_syscall_64+0x166/0x520 [ 366.960985][T13491] ? trace_irq_disable+0x3b/0x140 [ 366.961024][T13491] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.961064][T13491] ? clear_bhb_loop+0x70/0xc0 [ 366.961090][T13491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.961111][T13491] RIP: 0033:0x7f02ac59e159 [ 366.961152][T13491] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 366.961171][T13491] RSP: 002b:00007f02aa7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.961216][T13491] RAX: ffffffffffffffda RBX: 00007f02ac825fa0 RCX: 00007f02ac59e159 [ 366.961232][T13491] RDX: 987a3a9f32358a4c RSI: 00002000000002c0 RDI: 0000000000000003 [ 366.961247][T13491] RBP: 00007f02aa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 366.961260][T13491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.961273][T13491] R13: 00007f02ac826038 R14: 00007f02ac825fa0 R15: 00007ffeec5291d8 [ 366.961307][T13491] [ 367.698328][T13525] __nla_validate_parse: 3 callbacks suppressed [ 367.698387][T13525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2321'. [ 368.020338][T13543] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2325'. [ 368.052485][T13543] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 368.052532][T13543] netlink: 756 bytes leftover after parsing attributes in process `syz.0.2325'. [ 368.481074][T13553] macsec0: entered promiscuous mode [ 368.492306][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2327'. [ 368.507431][T13553] macsec0 (unregistering): left promiscuous mode [ 368.800760][T13573] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2334'. [ 368.922166][T13577] bridge0: left allmulticast mode [ 368.972349][T13584] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2337'. [ 369.082820][T13585] netlink: 'syz.4.2337': attribute type 1 has an invalid length. [ 369.082870][T13585] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2337'. [ 369.232350][T13596] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2337'. [ 369.249259][T13587] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2338'. [ 369.624919][T13577] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 369.804275][T10361] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.925894][T10362] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.926026][T10362] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.949285][T13596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2337'. [ 370.025000][T10362] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.304822][T13616] team_slave_1: Caught tx_queue_len zero misconfig [ 370.737024][T13627] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 371.004665][T13647] --map-set only usable from mangle table [ 372.388525][T13689] netlink: 'syz.3.2357': attribute type 46 has an invalid length. [ 373.049200][T13711] syzkaller1: entered promiscuous mode [ 373.049256][T13711] syzkaller1: entered allmulticast mode [ 373.061927][T13711] xt_cluster: you have exceeded the maximum number of cluster nodes (524288 > 32) [ 373.643262][T13719] netlink: 'syz.0.2366': attribute type 4 has an invalid length. [ 373.699543][T13724] netlink: 'syz.0.2366': attribute type 4 has an invalid length. [ 373.700046][T13723] netlink: 'syz.1.2367': attribute type 1 has an invalid length. [ 373.880168][T13736] netlink: 'syz.3.2370': attribute type 1 has an invalid length. [ 373.884979][T13723] 8021q: adding VLAN 0 to HW filter on device bond14 [ 373.930793][T13722] veth13: entered allmulticast mode [ 373.941441][T13722] bond14: (slave veth13): Enslaving as an active interface with an up link [ 373.988967][T13723] bond14 (unregistering): (slave veth13): Releasing backup interface [ 374.006831][T13723] bond14 (unregistering): Released all slaves [ 374.051329][T13737] bond11: (slave bridge8): Enslaving as a backup interface with an up link [ 374.718032][T13769] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 374.853274][T13756] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 375.383447][T13791] __nla_validate_parse: 7 callbacks suppressed [ 375.383788][T13791] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2385'. [ 375.383872][T13791] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2385'. [ 375.395159][T13791] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2385'. [ 375.395235][T13791] netlink: 820 bytes leftover after parsing attributes in process `syz.1.2385'. [ 376.750403][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2403'. [ 376.769292][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2405'. [ 376.964396][T13857] bridge0: port 5(bond0) entered blocking state [ 376.974387][T13857] bridge0: port 5(bond0) entered disabled state [ 376.981668][T13857] bond0: entered allmulticast mode [ 376.995414][T13857] bond_slave_0: entered allmulticast mode [ 376.995471][T13857] bond_slave_1: entered allmulticast mode [ 377.032162][T13857] bond0: entered promiscuous mode [ 377.032205][T13857] bond_slave_0: entered promiscuous mode [ 377.032415][T13857] bond_slave_1: entered promiscuous mode [ 377.054194][T13857] bridge0: port 5(bond0) entered blocking state [ 377.054363][T13857] bridge0: port 5(bond0) entered forwarding state [ 377.221127][T13866] netlink: 'syz.4.2410': attribute type 1 has an invalid length. [ 377.498848][T13866] bond18: entered promiscuous mode [ 377.504793][T13866] 8021q: adding VLAN 0 to HW filter on device bond18 [ 377.541428][T13886] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2415'. [ 377.666058][T13883] vlan3: entered allmulticast mode [ 377.666102][T13883] bond18: entered allmulticast mode [ 377.732628][T13866] bond18: (slave bridge3): making interface the new active one [ 377.732684][T13866] bridge3: entered promiscuous mode [ 377.732893][T13866] bridge3: entered allmulticast mode [ 377.750822][T13895] netlink: 'syz.3.2415': attribute type 13 has an invalid length. [ 377.750843][T13895] netlink: 'syz.3.2415': attribute type 58 has an invalid length. [ 377.750855][T13895] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2415'. [ 377.752471][T13866] bond18: (slave bridge3): Enslaving as an active interface with an up link [ 378.171125][T10361] IPVS: starting estimator thread 0... [ 378.172462][T13908] netlink: 'syz.4.2422': attribute type 7 has an invalid length. [ 378.265493][T13910] IPVS: using max 32 ests per chain, 76800 per kthread [ 378.352966][T13913] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2422'. [ 378.705529][T13924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2426'. [ 378.840132][T13928] ICMPv6: NA: 00:00:00:00:00:00 advertised our address fe80::aa on syz_tun! [ 379.091677][T13941] netlink: 'syz.3.2432': attribute type 1 has an invalid length. [ 379.279267][T13945] netlink: 'syz.3.2433': attribute type 13 has an invalid length. [ 379.288962][T13945] netlink: 'syz.3.2433': attribute type 58 has an invalid length. [ 380.293578][T13987] netlink: 'syz.1.2448': attribute type 13 has an invalid length. [ 380.293628][T13987] netlink: 'syz.1.2448': attribute type 58 has an invalid length. [ 380.318180][T13990] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 380.429303][T13989] batadv_slave_1: entered promiscuous mode [ 380.473622][T13998] IPVS: persistence engine module ip_vs_pe_ not found [ 380.691900][T13998] syzkaller0: entered promiscuous mode [ 380.699216][T13998] syzkaller0: entered allmulticast mode [ 381.044633][T14017] FAULT_INJECTION: forcing a failure. [ 381.044633][T14017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 381.044689][T14017] CPU: 1 UID: 0 PID: 14017 Comm: syz.4.2458 Not tainted syzkaller #0 PREEMPT(full) [ 381.044721][T14017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 381.044731][T14017] Call Trace: [ 381.044738][T14017] [ 381.044750][T14017] dump_stack_lvl+0xe8/0x150 [ 381.044790][T14017] should_fail_ex+0x410/0x560 [ 381.044827][T14017] _copy_from_user+0x2d/0xb0 [ 381.044919][T14017] __sys_bpf+0x2e7/0xd90 [ 381.044960][T14017] ? __pfx___sys_bpf+0x10/0x10 [ 381.044990][T14017] ? __fget_files+0x2a/0x420 [ 381.045034][T14017] ? ksys_write+0x242/0x270 [ 381.045083][T14017] ? __pfx_ksys_write+0x10/0x10 [ 381.045114][T14017] __x64_sys_bpf+0xba/0xd0 [ 381.045136][T14017] do_syscall_64+0x166/0x520 [ 381.045165][T14017] ? trace_irq_disable+0x3b/0x140 [ 381.045184][T14017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.045205][T14017] ? clear_bhb_loop+0x70/0xc0 [ 381.045228][T14017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.045248][T14017] RIP: 0033:0x7f32c1b9e159 [ 381.045266][T14017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 381.045283][T14017] RSP: 002b:00007f32c2a81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 381.045305][T14017] RAX: ffffffffffffffda RBX: 00007f32c1e25fa0 RCX: 00007f32c1b9e159 [ 381.045320][T14017] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 381.045333][T14017] RBP: 00007f32c2a81090 R08: 0000000000000000 R09: 0000000000000000 [ 381.045345][T14017] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 381.045357][T14017] R13: 00007f32c1e26038 R14: 00007f32c1e25fa0 R15: 00007ffd301f7c58 [ 381.045387][T14017] [ 381.488700][T14029] __nla_validate_parse: 11 callbacks suppressed [ 381.488765][T14029] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2459'. [ 382.112505][T14046] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2467'. [ 382.520355][T14062] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2472'. [ 382.635671][T14053] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 383.062933][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2479'. [ 383.198869][T14094] bridge0: left allmulticast mode [ 383.701165][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 383.716726][T14122] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2492'. [ 383.723801][T14123] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2493'. [ 383.759317][T14122] gtp0: entered promiscuous mode [ 383.759360][T14122] gtp0: entered allmulticast mode [ 383.763590][T14122] team0: Device gtp0 is of different type [ 383.844378][T14126] netlink: 'syz.0.2494': attribute type 1 has an invalid length. [ 383.882581][T14130] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2496'. [ 383.895110][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 383.976041][T14126] 8021q: adding VLAN 0 to HW filter on device bond12 [ 384.062187][T14137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2497'. [ 384.062242][T14137] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2497'. [ 384.145324][T14131] bond12: (slave veth3): Enslaving as an active interface with a down link [ 384.297810][T14134] bridge0: left promiscuous mode [ 384.305575][T14134] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.317232][T14134] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.328944][T14157] netlink: 'syz.2.2502': attribute type 1 has an invalid length. [ 384.362408][T14134] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 384.362439][T14134] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 384.372078][T14134] veth1_vlan: left promiscuous mode [ 384.373311][T14134] veth0_vlan: left promiscuous mode [ 384.377793][T14134] veth0_vlan: entered promiscuous mode [ 384.383665][T14134] veth1_vlan: entered promiscuous mode [ 384.397823][T14134] veth1_macvtap: left promiscuous mode [ 384.400117][T14134] veth1_macvtap: entered promiscuous mode [ 384.443119][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 384.445193][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 384.446434][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 384.448376][T14134] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 384.461868][T14134] 8021q: adding VLAN 0 to HW filter on device bond1 [ 384.467339][T14134] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.468676][T14134] 8021q: adding VLAN 0 to HW filter on device bond3 [ 384.472660][T14134] 8021q: adding VLAN 0 to HW filter on device bond4 [ 384.483024][T14134] 8021q: adding VLAN 0 to HW filter on device bond5 [ 384.489781][T14134] 8021q: adding VLAN 0 to HW filter on device bond6 [ 384.493254][T14134] 8021q: adding VLAN 0 to HW filter on device bond7 [ 384.499764][T14134] 8021q: adding VLAN 0 to HW filter on device bond8 [ 384.502230][T14134] 8021q: adding VLAN 0 to HW filter on device bond9 [ 384.512252][T14134] 8021q: adding VLAN 0 to HW filter on device bond10 [ 384.517161][T14134] 8021q: adding VLAN 0 to HW filter on device bond11 [ 384.527645][T14134] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check. [ 384.570785][T14126] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 384.579939][T14126] bond12: (slave batadv1): making interface the new active one [ 384.582901][T14126] batadv1: entered promiscuous mode [ 384.593266][T14126] bond12: (slave batadv1): Enslaving as an active interface with an up link [ 384.594317][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.594383][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.594424][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.594457][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.614427][T10362] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.614660][T10362] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.638603][ T5728] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.854786][ T7286] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 384.933920][T14157] bond11: entered promiscuous mode [ 384.939910][T14157] 8021q: adding VLAN 0 to HW filter on device bond11 [ 385.036790][T14162] 8021q: adding VLAN 0 to HW filter on device bond11 [ 385.037186][T14162] bond11: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 385.037206][T14162] bond11: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 385.080852][T14162] bond11: (slave ip6gre1): making interface the new active one [ 385.080915][T14162] ip6gre1: entered promiscuous mode [ 385.096753][T14162] bond11: (slave ip6gre1): Enslaving as an active interface with an up link [ 385.262106][T14161] €Â speed is unknown, defaulting to 1000 [ 385.335899][ T4944] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 385.610217][T14177] netlink: 'syz.3.2507': attribute type 10 has an invalid length. [ 385.824996][T14196] netlink: 'syz.2.2511': attribute type 4 has an invalid length. [ 386.182238][T14210] lo: entered allmulticast mode [ 386.660191][T14230] tap0: tun_chr_ioctl cmd 2148553947 [ 386.662452][T14230] netlink: 'syz.0.2523': attribute type 1 has an invalid length. [ 386.662471][T14230] __nla_validate_parse: 5 callbacks suppressed [ 386.662482][T14230] netlink: 16150 bytes leftover after parsing attributes in process `syz.0.2523'. [ 387.117573][T14209] lo: left allmulticast mode [ 387.343680][T14241] netlink: 'syz.4.2528': attribute type 10 has an invalid length. [ 387.346263][T14241] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 387.348784][T14241] bond0: (slave netdevsim1): Enslaving as an active interface with a down link [ 387.351339][T14241] 8021q: VLANs not supported on lo [ 387.435660][T14242] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2527'. [ 387.496714][T14257] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2527'. [ 387.523181][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2533'. [ 387.901370][T14277] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2539'. [ 387.984092][T14278] netlink: 'syz.2.2538': attribute type 2 has an invalid length. [ 387.984141][T14278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2538'. [ 388.061810][T14277] netlink: 'syz.0.2539': attribute type 13 has an invalid length. [ 388.061858][T14277] netlink: 'syz.0.2539': attribute type 58 has an invalid length. [ 388.062207][T14277] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2539'. [ 388.294236][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 388.872097][T14308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2546'. [ 388.905396][T14308] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2546'. [ 388.995547][T14313] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2551'. [ 389.294389][T14320] netlink: 'syz.1.2552': attribute type 13 has an invalid length. [ 389.294429][T14320] netlink: 'syz.1.2552': attribute type 58 has an invalid length. [ 389.627522][T14332] netlink: 'syz.1.2557': attribute type 12 has an invalid length. [ 390.419052][T14363] sctp: [Deprecated]: syz.4.2559 (pid 14363) Use of int in maxseg socket option. [ 390.419052][T14363] Use struct sctp_assoc_value instead [ 390.444301][T14360] netlink: 'syz.1.2567': attribute type 13 has an invalid length. [ 390.444340][T14360] netlink: 'syz.1.2567': attribute type 58 has an invalid length. [ 390.487537][T14362] netlink: 'syz.0.2569': attribute type 21 has an invalid length. [ 390.487662][T14362] netlink: 'syz.0.2569': attribute type 1 has an invalid length. [ 391.318088][ T30] audit: type=1804 audit(1788596299.348:6): pid=14406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2578" name="/newroot/496/cgroup.controllers" dev="tmpfs" ino=2560 res=1 errno=0 [ 391.318175][ T30] audit: type=1800 audit(1788596299.348:7): pid=14406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2578" name="cgroup.controllers" dev="tmpfs" ino=2560 res=0 errno=0 [ 391.523555][T14416] netlink: 'syz.3.2582': attribute type 13 has an invalid length. [ 391.523604][T14416] netlink: 'syz.3.2582': attribute type 58 has an invalid length. [ 392.109475][T14444] __nla_validate_parse: 14 callbacks suppressed [ 392.116893][T14444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'. [ 392.219770][T14449] xt_TCPMSS: Only works on TCP SYN packets [ 392.400199][T14456] FAULT_INJECTION: forcing a failure. [ 392.400199][T14456] name failslab, interval 1, probability 0, space 0, times 0 [ 392.413359][T14456] CPU: 1 UID: 0 PID: 14456 Comm: syz.4.2593 Not tainted syzkaller #0 PREEMPT(full) [ 392.413388][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.413401][T14456] Call Trace: [ 392.413410][T14456] [ 392.413419][T14456] dump_stack_lvl+0xe8/0x150 [ 392.413454][T14456] should_fail_ex+0x410/0x560 [ 392.413490][T14456] should_failslab+0xa8/0x100 [ 392.413552][T14456] __kmalloc_cache_node_noprof+0xaa/0x620 [ 392.413588][T14456] ? __get_vm_area_node+0x155/0x2f0 [ 392.413622][T14456] ? __get_vm_area_node+0x155/0x2f0 [ 392.413656][T14456] __get_vm_area_node+0x155/0x2f0 [ 392.413689][T14456] __vmalloc_node_range_noprof+0x343/0x1540 [ 392.413719][T14456] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 392.413743][T14456] ? __lock_acquire+0x6df/0x2e50 [ 392.413792][T14456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 392.413831][T14456] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 392.413852][T14456] __vmalloc_noprof+0xd2/0x120 [ 392.413880][T14456] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 392.413907][T14456] bpf_prog_alloc_no_stats+0x47/0x560 [ 392.413928][T14456] ? bpf_prog_alloc+0x2a/0x1a0 [ 392.413965][T14456] bpf_prog_alloc+0x3c/0x1a0 [ 392.413991][T14456] bpf_prog_load+0x7f8/0x1c20 [ 392.414028][T14456] ? __pfx_bpf_prog_load+0x10/0x10 [ 392.414079][T14456] __sys_bpf+0xd0d/0xd90 [ 392.414112][T14456] ? __pfx___sys_bpf+0x10/0x10 [ 392.414146][T14456] ? __fget_files+0x2a/0x420 [ 392.414191][T14456] ? ksys_write+0x242/0x270 [ 392.414222][T14456] ? __pfx_ksys_write+0x10/0x10 [ 392.414256][T14456] __x64_sys_bpf+0xba/0xd0 [ 392.414281][T14456] do_syscall_64+0x166/0x520 [ 392.414310][T14456] ? trace_irq_disable+0x3b/0x140 [ 392.414329][T14456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.414351][T14456] ? clear_bhb_loop+0x70/0xc0 [ 392.414377][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.414397][T14456] RIP: 0033:0x7f32c1b9e159 [ 392.414418][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.414435][T14456] RSP: 002b:00007f32c2a81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.414459][T14456] RAX: ffffffffffffffda RBX: 00007f32c1e25fa0 RCX: 00007f32c1b9e159 [ 392.414474][T14456] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 392.414488][T14456] RBP: 00007f32c2a81090 R08: 0000000000000000 R09: 0000000000000000 [ 392.414501][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.414514][T14456] R13: 00007f32c1e26038 R14: 00007f32c1e25fa0 R15: 00007ffd301f7c58 [ 392.414546][T14456] [ 392.503286][T14456] syz.4.2593: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 392.503363][T14456] CPU: 1 UID: 0 PID: 14456 Comm: syz.4.2593 Not tainted syzkaller #0 PREEMPT(full) [ 392.503387][T14456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 392.503400][T14456] Call Trace: [ 392.503408][T14456] [ 392.503418][T14456] dump_stack_lvl+0xe8/0x150 [ 392.503453][T14456] warn_alloc+0x24d/0x270 [ 392.503485][T14456] ? __kasan_kmalloc+0x22/0xb0 [ 392.503519][T14456] ? __pfx_warn_alloc+0x10/0x10 [ 392.503547][T14456] ? __get_vm_area_node+0x155/0x2f0 [ 392.503580][T14456] ? __get_vm_area_node+0x2a9/0x2f0 [ 392.503614][T14456] __vmalloc_node_range_noprof+0x36b/0x1540 [ 392.503642][T14456] ? __lock_acquire+0x6df/0x2e50 [ 392.503680][T14456] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 392.503709][T14456] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 392.503726][T14456] __vmalloc_noprof+0xd2/0x120 [ 392.503748][T14456] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 392.503767][T14456] bpf_prog_alloc_no_stats+0x47/0x560 [ 392.503783][T14456] ? bpf_prog_alloc+0x2a/0x1a0 [ 392.503802][T14456] bpf_prog_alloc+0x3c/0x1a0 [ 392.503821][T14456] bpf_prog_load+0x7f8/0x1c20 [ 392.503848][T14456] ? __pfx_bpf_prog_load+0x10/0x10 [ 392.503886][T14456] __sys_bpf+0xd0d/0xd90 [ 392.503909][T14456] ? __pfx___sys_bpf+0x10/0x10 [ 392.503935][T14456] ? __fget_files+0x2a/0x420 [ 392.503992][T14456] ? ksys_write+0x242/0x270 [ 392.504024][T14456] ? __pfx_ksys_write+0x10/0x10 [ 392.504058][T14456] __x64_sys_bpf+0xba/0xd0 [ 392.504081][T14456] do_syscall_64+0x166/0x520 [ 392.504110][T14456] ? trace_irq_disable+0x3b/0x140 [ 392.504129][T14456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.504150][T14456] ? clear_bhb_loop+0x70/0xc0 [ 392.504174][T14456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.504195][T14456] RIP: 0033:0x7f32c1b9e159 [ 392.504216][T14456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 392.504234][T14456] RSP: 002b:00007f32c2a81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 392.504256][T14456] RAX: ffffffffffffffda RBX: 00007f32c1e25fa0 RCX: 00007f32c1b9e159 [ 392.504271][T14456] RDX: 0000000000000094 RSI: 00002000000002c0 RDI: 0000000000000005 [ 392.504285][T14456] RBP: 00007f32c2a81090 R08: 0000000000000000 R09: 0000000000000000 [ 392.504298][T14456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.504311][T14456] R13: 00007f32c1e26038 R14: 00007f32c1e25fa0 R15: 00007ffd301f7c58 [ 392.504345][T14456] [ 392.504415][T14456] Mem-Info: [ 392.504425][T14456] active_anon:5943 inactive_anon:0 isolated_anon:0 [ 392.504425][T14456] active_file:0 inactive_file:43552 isolated_file:0 [ 392.504425][T14456] unevictable:0 dirty:150 writeback:0 [ 392.504425][T14456] slab_reclaimable:11015 slab_unreclaimable:118581 [ 392.504425][T14456] mapped:29713 shmem:522 pagetables:1339 [ 392.504425][T14456] sec_pagetables:0 bounce:0 [ 392.504425][T14456] kernel_misc_reclaimable:0 [ 392.504425][T14456] free:1303979 free_pcp:9528 free_cma:0 [ 392.504482][T14456] Node 0 active_anon:23772kB inactive_anon:0kB active_file:0kB inactive_file:174004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118852kB dirty:596kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15452kB pagetables:5224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 392.504538][T14456] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 392.504590][T14456] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.504649][T14456] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 392.543559][T14456] Node 0 DMA32 free:1255984kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23872kB inactive_anon:0kB active_file:0kB inactive_file:174004kB unevictable:0kB writepending:596kB zspages:0kB present:3129332kB managed:2546708kB mlocked:0kB bounce:0kB free_pcp:38136kB local_pcp:18948kB free_cma:0kB [ 392.543619][T14456] lowmem_reserve[]: 0 0 0 0 0 [ 392.543652][T14456] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.543703][T14456] lowmem_reserve[]: 0 0 0 0 0 [ 392.543736][T14456] Node 1 Normal free:3944572kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 392.543788][T14456] lowmem_reserve[]: 0 0 0 0 0 [ 392.543821][T14456] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 392.543930][T14456] Node 0 DMA32: 1228*4kB (UM) 918*8kB (UME) 455*16kB (UME) 227*32kB (UM) 137*64kB (ME) 69*128kB (M) 29*256kB (M) 8*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 291*4096kB (UM) = 1256048kB [ 392.549545][T14456] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 392.550192][T14456] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 8*16kB (UM) 9*32kB (UM) 3*64kB (UM) 4*128kB (UM) 6*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3944572kB [ 392.550343][T14456] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.550358][T14456] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.550373][T14456] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 392.550387][T14456] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 392.550402][T14456] 44070 total pagecache pages [ 392.550409][T14456] 0 pages in swap cache [ 392.550416][T14456] Free swap = 124996kB [ 392.550423][T14456] Total swap = 124996kB [ 392.550430][T14456] 2097051 pages RAM [ 392.550437][T14456] 0 pages HighMem/MovableOnly [ 392.550452][T14456] 428758 pages reserved [ 392.550459][T14456] 0 pages cma reserved [ 392.597081][T14458] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2595'. [ 392.658339][T14458] netlink: 'syz.3.2595': attribute type 13 has an invalid length. [ 392.658361][T14458] netlink: 'syz.3.2595': attribute type 58 has an invalid length. [ 392.658373][T14458] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2595'. [ 392.872275][T14468] netlink: 'syz.4.2597': attribute type 12 has an invalid length. [ 392.894650][T14468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2597'. [ 393.577776][T14485] A link change request failed with some changes committed already. Interface €Â may have been left with an inconsistent configuration, please check. [ 393.608588][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2606'. [ 393.650852][T14495] ip6gre1: entered promiscuous mode [ 393.656648][T14495] ip6gre1: entered allmulticast mode [ 393.665127][T10360] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.665372][T10360] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.694942][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.707120][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 393.829739][T14504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2611'. [ 393.860968][T14504] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2611'. [ 393.890100][T14508] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2608'. [ 394.004488][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.030512][T14515] tun0: tun_chr_ioctl cmd 1074025677 [ 394.030649][T14515] tun0: linktype set to 776 [ 394.183294][T14525] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2618'. [ 394.394413][T14532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2620'. [ 395.613154][T14574] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 395.704680][T10361] batadv1: left promiscuous mode [ 395.917540][T14585] validate_nla: 2 callbacks suppressed [ 395.917591][T14585] netlink: 'syz.1.2641': attribute type 1 has an invalid length. [ 396.054663][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 396.647562][T14621] netlink: 'syz.2.2653': attribute type 13 has an invalid length. [ 396.658347][T14621] netlink: 'syz.2.2653': attribute type 58 has an invalid length. [ 396.690732][T14623] netlink: 'syz.0.2654': attribute type 13 has an invalid length. [ 396.690782][T14623] netlink: 'syz.0.2654': attribute type 58 has an invalid length. [ 397.617835][T14650] netlink: 'syz.2.2663': attribute type 1 has an invalid length. [ 397.695170][T14651] bond13: entered promiscuous mode [ 397.698565][T14651] bond13: entered allmulticast mode [ 397.698932][T14651] 8021q: adding VLAN 0 to HW filter on device bond13 [ 397.734334][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 397.893194][T14650] bridge2: entered promiscuous mode [ 397.900363][T14650] bridge2: entered allmulticast mode [ 397.908063][T14650] bond13: (slave bridge2): Enslaving as a backup interface with an up link [ 397.940015][T14649] __nla_validate_parse: 14 callbacks suppressed [ 397.940071][T14649] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2662'. [ 397.956070][T10362] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 398.068104][T10362] bond13: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 398.105266][T14650] bridge3: entered promiscuous mode [ 398.107108][T14650] bridge3: entered allmulticast mode [ 398.108808][T14650] bond13: (slave bridge3): Enslaving as a backup interface with a down link [ 398.153027][T14664] netlink: 296 bytes leftover after parsing attributes in process `syz.3.2667'. [ 398.192364][T14650] bridge4: entered promiscuous mode [ 398.192561][T14650] bridge4: entered allmulticast mode [ 398.193289][T14650] bond13: (slave bridge4): Enslaving as a backup interface with a down link [ 398.270686][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2667'. [ 398.270771][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2667'. [ 398.271189][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2667'. [ 398.271212][T14665] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2667'. [ 398.278671][T14668] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2668'. [ 398.328623][T14668] netlink: 'syz.4.2668': attribute type 13 has an invalid length. [ 398.328647][T14668] netlink: 'syz.4.2668': attribute type 58 has an invalid length. [ 398.328661][T14668] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2668'. [ 398.573378][T14674] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2669'. [ 398.939282][T14688] FAULT_INJECTION: forcing a failure. [ 398.939282][T14688] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 398.939435][T14688] CPU: 0 UID: 0 PID: 14688 Comm: syz.4.2673 Not tainted syzkaller #0 PREEMPT(full) [ 398.939459][T14688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 398.939472][T14688] Call Trace: [ 398.939480][T14688] [ 398.939489][T14688] dump_stack_lvl+0xe8/0x150 [ 398.939523][T14688] should_fail_ex+0x410/0x560 [ 398.939558][T14688] _copy_to_user+0x31/0xb0 [ 398.939582][T14688] bpf_verifier_vlog+0x3a2/0x900 [ 398.939624][T14688] __btf_verifier_log+0xe2/0x140 [ 398.939688][T14688] ? __pfx___btf_verifier_log+0x10/0x10 [ 398.939722][T14688] ? btf_parse_hdr+0x1da/0x810 [ 398.939745][T14688] btf_parse_hdr+0x4a2/0x810 [ 398.939770][T14688] btf_new_fd+0x32f/0xbb0 [ 398.939796][T14688] __sys_bpf+0xd2e/0xd90 [ 398.939826][T14688] ? __pfx___sys_bpf+0x10/0x10 [ 398.939859][T14688] ? __fget_files+0x2a/0x420 [ 398.939911][T14688] ? ksys_write+0x242/0x270 [ 398.939941][T14688] ? __pfx_ksys_write+0x10/0x10 [ 398.939973][T14688] __x64_sys_bpf+0xba/0xd0 [ 398.939996][T14688] do_syscall_64+0x166/0x520 [ 398.940024][T14688] ? trace_irq_disable+0x3b/0x140 [ 398.940042][T14688] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.940062][T14688] ? clear_bhb_loop+0x70/0xc0 [ 398.940087][T14688] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 398.940107][T14688] RIP: 0033:0x7f32c1b9e159 [ 398.940125][T14688] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 398.940143][T14688] RSP: 002b:00007f32c2a81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 398.940167][T14688] RAX: ffffffffffffffda RBX: 00007f32c1e25fa0 RCX: 00007f32c1b9e159 [ 398.940182][T14688] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 398.940195][T14688] RBP: 00007f32c2a81090 R08: 0000000000000000 R09: 0000000000000000 [ 398.940208][T14688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 398.940220][T14688] R13: 00007f32c1e26038 R14: 00007f32c1e25fa0 R15: 00007ffd301f7c58 [ 398.940256][T14688] [ 399.359720][T14696] syzkaller0: entered promiscuous mode [ 399.359761][T14696] syzkaller0: entered allmulticast mode [ 399.485510][T14709] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2681'. [ 399.503147][T14709] netlink: 'syz.2.2681': attribute type 13 has an invalid length. [ 399.511912][T14709] netlink: 'syz.2.2681': attribute type 58 has an invalid length. [ 401.233074][T14772] batman_adv: batadv0: Adding interface: veth0 [ 401.233114][T14772] batman_adv: batadv0: The MTU of interface veth0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1312 would solve the problem. [ 401.233307][T14772] batman_adv: batadv0: Interface activated: veth0 [ 401.299607][T14772] batman_adv: batadv0: Removing interface: ipvlan2 [ 401.464319][T14772] batman_adv: batadv0: Interface deactivated: veth0 [ 401.464370][T14772] batman_adv: batadv0: Removing interface: veth0 [ 401.557665][T14778] validate_nla: 2 callbacks suppressed [ 401.557724][T14778] netlink: 'syz.4.2701': attribute type 13 has an invalid length. [ 401.748817][T14784] FAULT_INJECTION: forcing a failure. [ 401.748817][T14784] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 401.763766][T14784] CPU: 1 UID: 0 PID: 14784 Comm: syz.0.2703 Not tainted syzkaller #0 PREEMPT(full) [ 401.763794][T14784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 401.763807][T14784] Call Trace: [ 401.763816][T14784] [ 401.763825][T14784] dump_stack_lvl+0xe8/0x150 [ 401.763869][T14784] should_fail_ex+0x410/0x560 [ 401.763906][T14784] _copy_to_user+0x31/0xb0 [ 401.763931][T14784] bpf_verifier_vlog+0x3a2/0x900 [ 401.763980][T14784] btf_verifier_log+0x11d/0x1a0 [ 401.764015][T14784] ? __pfx_btf_verifier_log+0x10/0x10 [ 401.764056][T14784] __btf_verifier_log_type+0x45d/0x6a0 [ 401.764098][T14784] ? __pfx___btf_verifier_log_type+0x10/0x10 [ 401.764132][T14784] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 401.764160][T14784] btf_struct_check_meta+0x421/0xd20 [ 401.764191][T14784] ? __pfx_btf_sec_info_cmp+0x10/0x10 [ 401.764212][T14784] ? __btf_verifier_log+0xe2/0x140 [ 401.764246][T14784] btf_parse_type_sec+0x3cf/0x2360 [ 401.764275][T14784] ? btf_parse_hdr+0x1da/0x810 [ 401.764302][T14784] ? btf_parse_hdr+0x5f2/0x810 [ 401.764319][T14784] ? btf_parse_str_sec+0x244/0x2f0 [ 401.764344][T14784] btf_new_fd+0x487/0xbb0 [ 401.764374][T14784] __sys_bpf+0xd2e/0xd90 [ 401.764405][T14784] ? __pfx___sys_bpf+0x10/0x10 [ 401.764439][T14784] ? __fget_files+0x2a/0x420 [ 401.764484][T14784] ? ksys_write+0x242/0x270 [ 401.764516][T14784] ? __pfx_ksys_write+0x10/0x10 [ 401.764549][T14784] __x64_sys_bpf+0xba/0xd0 [ 401.764573][T14784] do_syscall_64+0x166/0x520 [ 401.764600][T14784] ? trace_irq_disable+0x3b/0x140 [ 401.764619][T14784] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.764640][T14784] ? clear_bhb_loop+0x70/0xc0 [ 401.764666][T14784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.764686][T14784] RIP: 0033:0x7f38ca19e159 [ 401.764704][T14784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.764722][T14784] RSP: 002b:00007f38cb005028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.764745][T14784] RAX: ffffffffffffffda RBX: 00007f38ca425fa0 RCX: 00007f38ca19e159 [ 401.764760][T14784] RDX: 0000000000000028 RSI: 0000200000000080 RDI: 0000000000000012 [ 401.764773][T14784] RBP: 00007f38cb005090 R08: 0000000000000000 R09: 0000000000000000 [ 401.764786][T14784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.764797][T14784] R13: 00007f38ca426038 R14: 00007f38ca425fa0 R15: 00007ffcf86b7b98 [ 401.764829][T14784] [ 402.188127][T14792] netlink: 'syz.2.2706': attribute type 4 has an invalid length. [ 402.276534][T14793] netlink: 'syz.2.2706': attribute type 4 has an invalid length. [ 402.964396][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.007118][ T5756] €Â speed is unknown, defaulting to 1000 [ 403.007169][ T5756] syz0: Port: 1 Link ACTIVE [ 403.100425][T14806] __nla_validate_parse: 5 callbacks suppressed [ 403.100468][T14806] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2708'. [ 403.160402][T14809] netlink: 'syz.0.2710': attribute type 1 has an invalid length. [ 403.196700][T14809] 8021q: adding VLAN 0 to HW filter on device bond13 [ 403.216993][T14809] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 403.385691][ T5756] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 403.488373][T14822] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2715'. [ 403.881748][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2716'. [ 403.941118][T14828] netlink: 'syz.0.2716': attribute type 61 has an invalid length. [ 404.250248][T14835] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2720'. [ 404.325354][T14835] 8021q: adding VLAN 0 to HW filter on device bond15 [ 404.613208][T14845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2723'. [ 404.613271][T14845] openvswitch: netlink: Missing key (keys=c0, expected=40300) [ 404.684451][T14635] Set syz1 is full, maxelem 65536 reached [ 404.740267][T14837] 8021q: adding VLAN 0 to HW filter on device bond15 [ 404.747796][T14837] bond15: (slave wireguard0): The slave device specified does not support setting the MAC address [ 404.797202][T14837] bond15: (slave wireguard0): Error -95 calling set_mac_address [ 404.886931][T14849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2724'. [ 404.983833][T14848] netlink: 'syz.0.2724': attribute type 13 has an invalid length. [ 404.983895][T14848] netlink: 'syz.0.2724': attribute type 58 has an invalid length. [ 404.983926][T14848] netlink: 152 bytes leftover after parsing attributes in process `syz.0.2724'. [ 405.136223][T14860] netlink: 'syz.2.2729': attribute type 1 has an invalid length. [ 405.213308][T14864] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2730'. [ 405.302698][T14866] netlink: 'syz.2.2729': attribute type 10 has an invalid length. [ 405.311110][T14866] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2729'. [ 405.387369][T14868] siw: device registration error -23 [ 405.425983][T14864] netlink: 260 bytes leftover after parsing attributes in process `syz.0.2730'. [ 405.435658][T14866] dummy0: entered promiscuous mode [ 405.491771][T14868] bridge2: port 1(erspan0) entered blocking state [ 405.491971][T14868] bridge2: port 1(erspan0) entered forwarding state [ 405.522629][T14868] ip6gretap0: entered promiscuous mode [ 405.530410][T14868] bridge0: left promiscuous mode [ 405.541042][T14868] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.566740][T14868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 405.618410][T14868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.632110][T14868] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 405.643242][T14868] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 405.660754][T14868] veth1_vlan: left promiscuous mode [ 405.667585][T14868] veth0_vlan: left promiscuous mode [ 405.677210][T14868] veth0_vlan: entered promiscuous mode [ 405.687361][T14868] veth1_vlan: entered promiscuous mode [ 405.696026][T14870] netlink: 'syz.3.2732': attribute type 1 has an invalid length. [ 405.708448][T14868] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 405.709388][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 405.722653][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 405.726779][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 405.729283][T14868] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 405.767115][T14868] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.779667][T14868] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.799039][T14868] bridge0: port 3(vlan2) entered blocking state [ 405.799176][T14868] bridge0: port 3(vlan2) entered forwarding state [ 405.829972][T14868] 8021q: adding VLAN 0 to HW filter on device bond3 [ 405.842862][T14868] 8021q: adding VLAN 0 to HW filter on device bond4 [ 405.853218][T14868] 8021q: adding VLAN 0 to HW filter on device bond5 [ 405.897176][T14868] 8021q: adding VLAN 0 to HW filter on device bond6 [ 405.905742][T14868] 8021q: adding VLAN 0 to HW filter on device bond7 [ 405.921910][T14868] 8021q: adding VLAN 0 to HW filter on device bond10 [ 405.943115][T14868] 8021q: adding VLAN 0 to HW filter on device bond11 [ 405.956191][T14868] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 405.967018][T14868] 8021q: adding VLAN 0 to HW filter on device bond13 [ 405.986026][T14868] geneve2: left promiscuous mode [ 406.002900][T14868] 8021q: adding VLAN 0 to HW filter on device bond14 [ 406.015582][T14868] 8021q: adding VLAN 0 to HW filter on device bond15 [ 406.030578][T14868] 8021q: adding VLAN 0 to HW filter on device bond16 [ 406.040920][T10362] bridge0: port 4(veth1) entered blocking state [ 406.041040][T10362] bridge0: port 4(veth1) entered forwarding state [ 406.046630][T10362] bridge0: port 5(veth0) entered blocking state [ 406.046751][T10362] bridge0: port 5(veth0) entered forwarding state [ 406.049206][T10362] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.049350][T10362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 406.052504][T10362] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.052637][T10362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 406.093119][T10362] bridge0: port 6(veth0_virt_wifi) entered blocking state [ 406.093296][T10362] bridge0: port 6(veth0_virt_wifi) entered forwarding state [ 406.165511][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.166556][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.167740][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.168612][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.169478][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.170341][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.171197][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.172063][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 406.294277][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 406.454345][ T78] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.478921][ T78] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20002 - 0 [ 406.479011][ T78] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.479044][ T78] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20002 - 0 [ 406.479116][ T78] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.479147][ T78] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20002 - 0 [ 406.479190][ T78] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 406.479220][ T78] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20002 - 0 [ 406.570126][ T78] bond9: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 406.597627][ T78] bond9: (slave veth7): making interface the new active one [ 406.631879][ T78] bond9: active interface up! [ 406.688195][T14881] bond13: entered promiscuous mode [ 406.715117][T14881] bond13: entered allmulticast mode [ 407.244467][T14881] 8021q: adding VLAN 0 to HW filter on device bond13 [ 407.380542][ T82] bond3: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 407.399389][ T82] bond3: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 407.399737][ T82] bond3: (slave veth3): making interface the new active one [ 407.478554][ T82] bond3: active interface up! [ 407.639016][T14914] netlink: 'syz.4.2740': attribute type 13 has an invalid length. [ 407.639060][T14914] netlink: 'syz.4.2740': attribute type 58 has an invalid length. [ 408.802834][T10360] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 409.615336][ C1] net_ratelimit: 2288 callbacks suppressed [ 409.615465][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.615533][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.617246][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.619003][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.620890][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.621762][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.622834][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.624832][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.626778][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.627795][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 412.064247][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 412.790079][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 413.353974][ C1] sched: DL replenish lagged too much [ 414.624709][ C1] net_ratelimit: 3396 callbacks suppressed [ 414.624792][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.626518][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.627426][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.628403][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.630265][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.632076][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.634455][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.635319][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.637612][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.639529][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.634583][ C0] net_ratelimit: 3521 callbacks suppressed [ 419.634608][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.635144][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.637115][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.639083][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.640463][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.641044][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.642990][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.644978][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.646515][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.647080][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 421.026090][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 422.935366][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.645737][ C1] net_ratelimit: 3257 callbacks suppressed [ 424.645797][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.647063][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.647716][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.649656][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.651555][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.653108][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.653487][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.655601][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.657527][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.659154][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.654097][ C1] net_ratelimit: 3267 callbacks suppressed [ 429.654147][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.656127][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.658099][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.658987][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.660154][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.662121][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.664189][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.665925][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.666205][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.668081][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.663999][ C0] net_ratelimit: 3351 callbacks suppressed [ 434.664061][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.665478][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.667461][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.669467][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.670363][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.671424][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.672397][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.673387][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.675457][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.677421][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 437.038106][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 439.674197][ C0] net_ratelimit: 3814 callbacks suppressed [ 439.674223][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.675663][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.676183][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.677666][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.679664][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.681621][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.682399][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.683653][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.684482][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.685641][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 442.798735][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 444.684711][ C1] net_ratelimit: 3840 callbacks suppressed [ 444.684737][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.686607][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.688538][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.689716][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.690566][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.691673][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.692412][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.694393][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.696190][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.698064][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.694925][ C1] net_ratelimit: 3640 callbacks suppressed [ 449.694949][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.696837][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.698647][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.700024][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.700506][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.702145][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.702380][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.704265][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.706247][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 449.708186][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.705036][ C1] net_ratelimit: 3531 callbacks suppressed [ 454.705062][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.705930][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.706875][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.707815][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.708748][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.710651][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.712461][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.714304][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.716172][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 454.717285][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 456.229917][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.714295][ C1] net_ratelimit: 3590 callbacks suppressed [ 459.714330][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.716135][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.718023][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.718973][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.719829][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.720791][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.721681][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.723661][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.725567][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 459.727434][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.725077][ C1] net_ratelimit: 3567 callbacks suppressed [ 464.725103][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.727279][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.729207][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.731044][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.733021][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.733307][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.734871][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.735374][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.736797][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 464.738610][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.734902][ C1] net_ratelimit: 3533 callbacks suppressed [ 469.734929][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.735496][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.737043][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.737308][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.738917][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.740753][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.742616][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.744521][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.746331][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 469.747450][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 470.308212][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 474.744471][ C1] net_ratelimit: 3498 callbacks suppressed [ 474.744498][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.746321][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.748283][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.750121][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.751949][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.753197][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.753843][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.755059][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.755709][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 474.757576][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.754898][ C1] net_ratelimit: 3474 callbacks suppressed [ 479.754922][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.756837][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.759022][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.760906][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.762406][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.762740][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.764587][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.766449][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.766636][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 479.768266][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.764532][ C1] net_ratelimit: 3485 callbacks suppressed [ 484.764557][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.765057][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.766428][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.766922][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.768240][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.770159][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.771969][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.773779][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.775693][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 484.776704][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.774119][ C1] net_ratelimit: 3480 callbacks suppressed [ 489.774145][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.775961][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.777659][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.777828][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.779555][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.779655][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.781397][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.783274][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.785297][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 489.787124][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.783936][ C1] net_ratelimit: 3542 callbacks suppressed [ 494.783961][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.785798][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.787702][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.788544][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.789557][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.790411][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.791472][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.793355][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.795255][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 494.797135][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.795088][ C1] net_ratelimit: 3409 callbacks suppressed [ 499.795114][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.797078][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.797373][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.799130][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.799258][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.801216][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.803297][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.805422][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.807393][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.808683][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.805226][ C1] net_ratelimit: 3479 callbacks suppressed [ 504.805253][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.806803][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.807196][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.808717][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.809163][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.811057][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.812854][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.814915][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.816722][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.818682][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 506.803436][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 509.814724][ C1] net_ratelimit: 3494 callbacks suppressed [ 509.814750][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.816683][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.818846][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.820721][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.822025][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.822542][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.823867][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.824321][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.825915][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 509.827721][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.824305][ C1] net_ratelimit: 3511 callbacks suppressed [ 514.824330][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.826245][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.828272][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.830193][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.831239][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.832102][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.833072][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.834084][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.835994][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 514.837982][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.835650][ C1] net_ratelimit: 3481 callbacks suppressed [ 519.835678][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.837648][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.839648][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.840880][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.841671][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.842890][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.843642][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.845781][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.847747][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 519.849746][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.845098][ C0] net_ratelimit: 3377 callbacks suppressed [ 524.845125][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.845689][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.847545][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.849416][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.851224][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.852915][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.854856][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.855096][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.856563][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 524.856943][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.267873][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 529.853949][ C1] net_ratelimit: 3525 callbacks suppressed [ 529.853974][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.855857][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.857686][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.859256][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.859496][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.861073][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.861424][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.863308][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.865315][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 529.867166][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.387337][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 534.863970][ C1] net_ratelimit: 3495 callbacks suppressed [ 534.863997][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.865810][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.867692][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.869501][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.871340][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.872211][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.873145][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.874113][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.874989][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 534.876888][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.497054][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 538.503889][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 539.876326][ C0] net_ratelimit: 2805 callbacks suppressed [ 539.876346][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.877916][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.885989][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.887513][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.895528][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.897146][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.905223][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.906747][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.914756][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 539.916326][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 540.175703][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P14948/1:b..l [ 540.183732][ C1] rcu: (detected by 1, t=10669 jiffies, g=77769, q=1242 ncpus=2) [ 540.191558][ C1] task:modprobe state:R running task stack:22376 pid:14948 tgid:14948 ppid:13 task_flags:0x40000c flags:0x00080000 [ 540.205088][ C1] Call Trace: [ 540.208394][ C1] [ 540.211355][ C1] __schedule+0x17db/0x58f0 [ 540.215964][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 540.221205][ C1] ? __lock_acquire+0x6df/0x2e50 [ 540.226176][ C1] ? __lock_acquire+0x6df/0x2e50 [ 540.231140][ C1] ? __lock_acquire+0x6df/0x2e50 [ 540.236104][ C1] ? __pfx___schedule+0x10/0x10 [ 540.240992][ C1] ? __lock_acquire+0x6df/0x2e50 [ 540.245964][ C1] preempt_schedule_irq+0x4b/0x90 [ 540.251019][ C1] irqentry_exit+0x14f/0x910 [ 540.255644][ C1] ? trace_irq_disable+0x3b/0x140 [ 540.260701][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 540.266709][ C1] RIP: 0010:lock_release+0x2e1/0x3c0 [ 540.272021][ C1] Code: 66 f1 11 00 00 00 00 eb b5 e8 1b f6 40 0a f7 c3 00 02 00 00 74 b9 65 48 8b 05 73 21 f1 11 48 3b 44 24 28 75 48 fb 48 83 c4 30 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 d0 f9 43 0a cc 48 8d 3d 68 01 da [ 540.291680][ C1] RSP: 0018:ffffc90004f2f548 EFLAGS: 00000286 [ 540.297775][ C1] RAX: 3fef0334fac90c00 RBX: 0000000000000206 RCX: 0000000000000046 [ 540.305766][ C1] RDX: ffffffff9108ba00 RSI: ffffffff8e6fcd12 RDI: ffffffff8c6d9480 [ 540.313760][ C1] RBP: ffff888054a1e998 R08: ffffc90004f2ff48 R09: 0000000000000000 [ 540.321752][ C1] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: 0000000000000001 [ 540.329743][ C1] R13: 0000000000000001 R14: ffffffff8ed5c6e0 R15: ffff888054a1ddc0 [ 540.337783][ C1] ? unwind_next_frame+0x8f/0x2550 [ 540.342970][ C1] unwind_next_frame+0x1baa/0x2550 [ 540.348118][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.354212][ C1] ? unwind_next_frame+0x8f/0x2550 [ 540.359355][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 540.365569][ C1] arch_stack_walk+0x11b/0x150 [ 540.370413][ C1] stack_trace_save+0xa9/0x100 [ 540.375211][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 540.380614][ C1] ? __kasan_kmalloc+0x93/0xb0 [ 540.385414][ C1] ? exit_mmap+0x4ca/0x9f0 [ 540.389859][ C1] ? __mmput+0x118/0x420 [ 540.394124][ C1] ? exit_mm+0x221/0x2d0 [ 540.398409][ C1] ? do_exit+0x6cd/0x2360 [ 540.402760][ C1] ? do_group_exit+0x22d/0x2f0 [ 540.407547][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 540.412766][ C1] ? x64_sys_call+0x18c6/0x18d0 [ 540.417638][ C1] ? do_syscall_64+0x166/0x520 [ 540.422444][ C1] kasan_save_stack+0x3e/0x60 [ 540.427144][ C1] ? kasan_save_stack+0x3e/0x60 [ 540.432019][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 540.437441][ C1] ? kmem_cache_free+0x45e/0x650 [ 540.442406][ C1] ? tear_down_vmas+0x31f/0x530 [ 540.447286][ C1] ? exit_mmap+0x4ca/0x9f0 [ 540.451735][ C1] ? __mmput+0x118/0x420 [ 540.456002][ C1] ? exit_mm+0x221/0x2d0 [ 540.460268][ C1] ? do_exit+0x6cd/0x2360 [ 540.464619][ C1] ? do_group_exit+0x22d/0x2f0 [ 540.469412][ C1] ? __x64_sys_exit_group+0x3f/0x40 [ 540.474632][ C1] ? x64_sys_call+0x18c6/0x18d0 [ 540.479502][ C1] ? do_syscall_64+0x166/0x520 [ 540.484302][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.490442][ C1] ? tear_down_vmas+0x31f/0x530 [ 540.495331][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 540.500577][ C1] kmem_cache_free+0x45e/0x650 [ 540.505375][ C1] tear_down_vmas+0x31f/0x530 [ 540.510095][ C1] exit_mmap+0x4ca/0x9f0 [ 540.514377][ C1] ? __pfx_exit_mmap+0x10/0x10 [ 540.519198][ C1] ? __pfx_exit_aio+0x10/0x10 [ 540.523955][ C1] ? uprobe_clear_state+0x2a4/0x3d0 [ 540.529210][ C1] __mmput+0x118/0x420 [ 540.533311][ C1] exit_mm+0x221/0x2d0 [ 540.537408][ C1] do_exit+0x6cd/0x2360 [ 540.541599][ C1] ? __pfx_do_exit+0x10/0x10 [ 540.546220][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 540.551291][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 540.556585][ C1] do_group_exit+0x22d/0x2f0 [ 540.561206][ C1] __x64_sys_exit_group+0x3f/0x40 [ 540.566255][ C1] x64_sys_call+0x18c6/0x18d0 [ 540.570954][ C1] do_syscall_64+0x166/0x520 [ 540.575578][ C1] ? trace_irq_disable+0x3b/0x140 [ 540.580631][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.586729][ C1] ? clear_bhb_loop+0x70/0xc0 [ 540.591434][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.597355][ C1] RIP: 0033:0x7f0737f956c5 [ 540.601798][ C1] RSP: 002b:00007ffcef201948 EFLAGS: 00000206 ORIG_RAX: 00000000000000e7 [ 540.610243][ C1] RAX: ffffffffffffffda RBX: 00007f0738096fe8 RCX: 00007f0737f956c5 [ 540.618241][ C1] RDX: 00000000000000e7 RSI: ffffffffffffff88 RDI: 0000000000000001 [ 540.626243][ C1] RBP: 0000000000000001 R08: 00007ffcef2018d8 R09: 0000000000000000 [ 540.634246][ C1] R10: 00007ffcef201770 R11: 0000000000000206 R12: 0000000000000000 [ 540.642240][ C1] R13: 0000000000000001 R14: 00007f0738095680 R15: 00007f0738097000 [ 540.650261][ C1] [ 540.653302][ C1] rcu: rcu_preempt kthread starved for 8533 jiffies! g77769 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 540.664701][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 540.674779][ C1] rcu: RCU grace-period kthread stack dump: [ 540.680684][ C1] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 540.694217][ C1] Call Trace: [ 540.697514][ C1] [ 540.700472][ C1] __schedule+0x17db/0x58f0 [ 540.705017][ C1] ? __lock_acquire+0x6df/0x2e50 [ 540.709999][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 540.715153][ C1] ? __pfx___schedule+0x10/0x10 [ 540.720036][ C1] ? lock_acquire+0x115/0x350 [ 540.724749][ C1] ? schedule+0x90/0x2b0 [ 540.729030][ C1] schedule+0x164/0x2b0 [ 540.733220][ C1] schedule_timeout+0x152/0x2c0 [ 540.738098][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 540.743500][ C1] ? __pfx_process_timeout+0x10/0x10 [ 540.748830][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 540.754675][ C1] ? prepare_to_swait_event+0x322/0x350 [ 540.760287][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 540.765192][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 540.771373][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 540.776678][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 540.781921][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 540.787767][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 540.792383][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 540.797610][ C1] ? __kthread_parkme+0x71/0x1f0 [ 540.802583][ C1] ? __kthread_parkme+0x199/0x1f0 [ 540.807646][ C1] kthread+0x38b/0x480 [ 540.811740][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 540.816973][ C1] ? __pfx_kthread+0x10/0x10 [ 540.821588][ C1] ret_from_fork+0x514/0xb70 [ 540.826210][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 540.831360][ C1] ? __switch_to+0xc89/0x1420 [ 540.836070][ C1] ? __pfx_kthread+0x10/0x10 [ 540.840690][ C1] ret_from_fork_asm+0x1a/0x30 [ 540.845514][ C1] [ 540.848552][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 540.854902][ C1] CPU: 1 UID: 0 PID: 10105 Comm: kworker/R-bond1 Not tainted syzkaller #0 PREEMPT(full) [ 540.864736][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 540.874812][ C1] Workqueue: bond10 bond_3ad_state_machine_handler [ 540.881462][ C1] RIP: 0010:__local_bh_enable_ip+0xdf/0x140 [ 540.887400][ C1] Code: e8 96 74 5b 0a 65 66 8b 05 0a 82 0b 12 66 85 c0 75 34 bf 01 00 00 00 e8 1f ef 0b 00 e8 5a 12 47 00 fb 65 48 8b 05 c1 81 0b 12 <48> 85 c0 75 05 e8 07 77 aa ff 5b 41 5e e9 3f 5a 5e 0a cc 90 0f 0b [ 540.907027][ C1] RSP: 0018:ffffc90000a17e08 EFLAGS: 00000206 [ 540.913122][ C1] RAX: 8000000000000101 RBX: 0000000000000200 RCX: 8000000000000101 [ 540.921112][ C1] RDX: 0000000000000002 RSI: ffffffff8e47443d RDI: ffffffff8c6d9480 [ 540.929123][ C1] RBP: ffffc90000a18020 R08: ffffffff907a137f R09: 1ffffffff20f426f [ 540.937119][ C1] R10: dffffc0000000000 R11: fffffbfff20f4270 R12: ffff8880693f2910 [ 540.945110][ C1] R13: dffffc0000000000 R14: ffffffff8aa52831 R15: ffffffff907bb4c0 [ 540.953100][ C1] FS: 0000000000000000(0000) GS:ffff888124dd9000(0000) knlGS:0000000000000000 [ 540.962048][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 540.968652][ C1] CR2: 00007fa978be7afc CR3: 0000000028eb4000 CR4: 00000000003526f0 [ 540.976647][ C1] Call Trace: [ 540.979944][ C1] [ 540.982807][ C1] ip6t_do_table+0x13c4/0x15b0 [ 540.987723][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 540.992609][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 540.997762][ C1] ? lock_acquire+0x115/0x350 [ 541.002467][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 541.007614][ C1] nf_hook_slow+0xc5/0x220 [ 541.012135][ C1] ? NF_HOOK+0xa2/0x6e0 [ 541.016386][ C1] NF_HOOK+0x560/0x6e0 [ 541.020489][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 541.025108][ C1] ? net_generic+0x1e/0x240 [ 541.029639][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 541.035388][ C1] ? net_generic+0x1e/0x240 [ 541.039927][ C1] ? net_generic+0x1e/0x240 [ 541.044461][ C1] br_nf_forward_ip+0x7eb/0xa30 [ 541.049337][ C1] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 541.055083][ C1] ? __pfx_br_nf_forward+0x10/0x10 [ 541.060225][ C1] nf_hook_slow+0xc5/0x220 [ 541.064678][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 541.070219][ C1] NF_HOOK+0x23e/0x3f0 [ 541.074314][ C1] ? NF_HOOK+0xa2/0x3f0 [ 541.078490][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 541.083105][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 541.088595][ C1] ? br_handle_vlan+0x5e/0x530 [ 541.093465][ C1] __br_forward+0x397/0x540 [ 541.097990][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 541.103481][ C1] br_flood+0x3e6/0x8d0 [ 541.107674][ C1] br_handle_frame_finish+0x1119/0x1950 [ 541.113261][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 541.119179][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 541.124069][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 541.129213][ C1] ? nf_hook_slow+0x176/0x220 [ 541.133927][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 541.139850][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 541.144824][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 541.150148][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 541.155636][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 541.161558][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 541.166787][ C1] ? lock_acquire+0x115/0x350 [ 541.171496][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 541.177504][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 541.183431][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 541.188833][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 541.194412][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 541.200340][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 541.206868][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 541.212114][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 541.217602][ C1] br_handle_frame+0x127f/0x1510 [ 541.222579][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 541.227905][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 541.233822][ C1] ? packet_rcv+0x16e/0x16f0 [ 541.238534][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 541.243843][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 541.249593][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 541.255691][ C1] ? ip6_rcv_finish+0x265/0x280 [ 541.260606][ C1] ? NF_HOOK+0x336/0x3c0 [ 541.264901][ C1] ? process_backlog+0x3de/0x18b0 [ 541.269962][ C1] ? process_backlog+0x3de/0x18b0 [ 541.275024][ C1] process_backlog+0x727/0x18b0 [ 541.279919][ C1] ? call_timer_fn+0xd5/0x5f0 [ 541.284629][ C1] ? process_backlog+0x3de/0x18b0 [ 541.289705][ C1] __napi_poll+0xaa/0x330 [ 541.294074][ C1] net_rx_action+0x61d/0xf50 [ 541.298712][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 541.303886][ C1] handle_softirqs+0x226/0x860 [ 541.308693][ C1] ? do_softirq+0x77/0xd0 [ 541.313060][ C1] ? bond_3ad_state_machine_handler+0x5a7c/0x5d60 [ 541.319504][ C1] do_softirq+0x77/0xd0 [ 541.323715][ C1] [ 541.326663][ C1] [ 541.329615][ C1] __local_bh_enable_ip+0x100/0x140 [ 541.334843][ C1] bond_3ad_state_machine_handler+0x5a7c/0x5d60 [ 541.341145][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 541.346207][ C1] ? bond_3ad_state_machine_handler+0xd0/0x5d60 [ 541.352475][ C1] ? __pfx_bond_3ad_state_machine_handler+0x10/0x10 [ 541.359107][ C1] ? rcu_is_watching+0x16/0xb0 [ 541.363909][ C1] ? process_scheduled_works+0x97a/0x1630 [ 541.369657][ C1] process_scheduled_works+0xc3d/0x1630 [ 541.375270][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 541.381275][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 541.386385][ C1] ? assign_work+0x3af/0x5d0 [ 541.391127][ C1] rescuer_thread+0x7c5/0x10e0 [ 541.395947][ C1] ? rescuer_thread+0xb8/0x10e0 [ 541.400853][ C1] kthread+0x38b/0x480 [ 541.404958][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 541.410192][ C1] ? __pfx_kthread+0x10/0x10 [ 541.414811][ C1] ret_from_fork+0x514/0xb70 [ 541.419428][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 541.424578][ C1] ? __switch_to+0xc89/0x1420 [ 541.429289][ C1] ? __pfx_kthread+0x10/0x10 [ 541.433910][ C1] ret_from_fork_asm+0x1a/0x30 [ 541.438728][ C1] [ 544.884508][ C0] net_ratelimit: 2612 callbacks suppressed [ 544.884598][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)