last executing test programs: 12.863348972s ago: executing program 1 (id=4035): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="4a00000011007f0314066f9a70eaa1490675bc58080600", 0x17) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001880)="5e00000012006bab9e3de3d86e6c1dffff137e0300000000000000b68675f80007000a00a0e69ee517d34460bc24eab556a7e6241e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f408000300060100000800030011000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmmsg(r0, &(0x7f0000008640)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x0, 0x0) 12.079807236s ago: executing program 3 (id=4037): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x4, 0x70bd27, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8044}, 0x4000081) r2 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r2, &(0x7f00000004c0)={&(0x7f0000000180)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000200)=""/20, 0x14}, {&(0x7f0000000240)=""/201, 0xc9}, {&(0x7f0000000340)=""/14, 0xe}], 0x3, &(0x7f00000003c0)=""/241, 0xf1}, 0x120) r3 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x10, 0x3fb, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x40800) (async) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cgroup.freeze\x00', 0x0, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x36, &(0x7f0000000640)=""/232, &(0x7f0000000740)=0xe8) (async, rerun: 64) r5 = socket(0x0, 0x5, 0xff) (async, rerun: 64) socketpair(0x2b, 0x2, 0x4, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$can_raw(r6, &(0x7f00000008c0)={&(0x7f00000007c0), 0x10, &(0x7f0000000880)={&(0x7f0000000800)=@canfd={{0x4, 0x1, 0x0, 0x1}, 0x17, 0x3, 0x0, 0x0, "86e41abbeefe004ea71ec1ffc2ff63527a61e7272a74c7f9b84e83a6383815305b7b730c1e46046b6517cb729886041eb7f6674c5b60ff22e4cdf4d8faceb557"}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) ioctl$sock_inet_SIOCSIFPFLAGS(r4, 0x8934, &(0x7f0000000900)={'veth1_macvtap\x00', 0x7fff}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000009c0)={r4, 0x58, &(0x7f0000000940)}, 0x10) (async) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f00000018c0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001880)={&(0x7f0000000a40)={0xe0c, 0x1, 0x5, 0x201, 0x0, 0x0, {0xc, 0x0, 0x8}, [{{0x254, 0x1, {{0x1, 0x7}, 0x2, 0xf5, 0x1, 0x4b, 0x8, 'syz1\x00', "0866f9351a752074f20bc246550d42b5b315c967a96d571d55d0d4d723e45af2", "a4c1c84bd0f98cbcf88a42b8e50618e64f8b9b870d449d9e5faccb9a6340ecf7", [{0x100, 0x7, {0x2, 0x40}}, {0xfff8, 0x3ff, {0x2, 0x8}}, {0x2, 0xfff7, {0x3, 0x3}}, {0x90, 0x0, {0x1, 0x2}}, {0x3, 0x4, {0x0, 0x8000}}, {0xa9, 0xfffd, {0x2, 0x8001}}, {0x2, 0xec06, {0x0, 0x1}}, {0xdb, 0x2, {0x1, 0x8}}, {0x4f, 0x4, {0x3, 0x1}}, {0x800, 0x2, {0x2, 0x10}}, {0x1, 0xa800, {0x0, 0x1}}, {0x4, 0x5, {0x3, 0x3}}, {0x4, 0xb}, {0x5, 0x800, {0x2, 0x101}}, {0x5, 0x5, {0x1, 0x2}}, {0x9, 0x7ff, {0x2, 0xb}}, {0x2, 0x9, {0x0, 0xb4}}, {0x8, 0xf9, {0x1, 0x101}}, {0x1, 0x6ecf, {0x2}}, {0x4, 0x0, {0x3}}, {0x1, 0x2, {0x3, 0x2}}, {0x4919, 0x6, {0x3, 0x1}}, {0x0, 0x9, {0x0, 0x9}}, {0x800, 0x9, {0x2, 0x3}}, {0x6, 0x20de, {0x2}}, {0x400, 0x4, {0x2, 0x1}}, {0x1, 0x92ba, {0x3, 0x80000000}}, {0xf, 0x7fff, {0x0, 0x7ff}}, {0x8001, 0x1, {0x0, 0x7}}, {0x5, 0x7fff, {0x2, 0x3}}, {0x1, 0x7ff, {0x2, 0xff}}, {0x8, 0x5, {0x1, 0x4}}, {0x2, 0x9, {0x3, 0x5b18cf19}}, {0x5, 0x1, {0x3, 0x7ff}}, {0x8000, 0x7, {0x3, 0x10001}}, {0xc, 0xfffd, {0x1, 0x7}}, {0x1, 0x8d6, {0x2, 0x7f}}, {0x9, 0x10, {0x3, 0x8}}, {0x0, 0x5c6, {0x2, 0x6}}, {0xab, 0x6, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0xf, 0xa, 0x2, 0x1, 0x1b, 'syz0\x00', "7beb7fe5434be6a85cbf89654426d4cfe8efa3601e1586b746ecc6afee208fc0", "061ccf8ba755580fc32a4cf26404bd5ea2eb63a5f01a35f4e5a913a27bdc0262", [{0x8000, 0x8, {0x3, 0x7}}, {0x8, 0x4, {0x0, 0x6}}, {0x1ff, 0x2, {0x3, 0xa52a}}, {0x2, 0x4, {0x3, 0x686}}, {0x0, 0x800, {0x2, 0x5}}, {0x3, 0x0, {0x2, 0x80000000}}, {0x10, 0x0, {0x2, 0x99a9}}, {0x1, 0xfffc, {0x3, 0x1}}, {0x9, 0x7, {0x2}}, {0x0, 0x8, {0x0, 0x2}}, {0x0, 0xfffb, {0x2, 0x6}}, {0x8, 0x3, {0x2, 0x8}}, {0x1, 0xfff9, {0x1, 0x3}}, {0x7, 0x32, {0x2, 0x3}}, {0x8, 0x6, {0x0, 0x3}}, {0x3, 0x1, {0x1, 0x6}}, {0x6, 0x6, {0x2, 0x3ff}}, {0x6, 0x3, {0x3, 0x8}}, {0x7fff, 0x1000, {0x1, 0x80000001}}, {0x4, 0x2, {0x2, 0xd7}}, {0x8d1d, 0x8, {0x1, 0x6}}, {0xbf86, 0xfb2, {0x0, 0x2}}, {0x0, 0x5, {0x3, 0xb07}}, {0x28, 0x40, {0x2, 0x2}}, {0x7, 0x7ff, {0x0, 0x6}}, {0x96, 0x100, {0x2, 0x4}}, {0x3, 0x0, {0x0, 0x10000}}, {0x5, 0x87, {0x2, 0x1}}, {0xfbff, 0x4, {0x1, 0x1}}, {0x1a4f, 0x1, {0x0, 0x5}}, {0x6, 0x7, {0x1, 0xffff}}, {0xfff8, 0x100, {0x0, 0x8}}, {0x8, 0x80, {0x0, 0xb}}, {0x6, 0x3, {0x1, 0x3}}, {0x8, 0x3ede, {0x2, 0x1ff}}, {0x2, 0xff, {0x0, 0x3c}}, {0x6, 0x301, {0x3, 0x4}}, {0x8001, 0xff, {0x1, 0x80000000}}, {0x1, 0xd, {0x1, 0xb859}}, {0xbc6, 0x2, {0x3, 0x6}}]}}}, {{0x254, 0x1, {{0x3}, 0x1, 0xb6, 0x1, 0x9, 0x8, 'syz1\x00', "2fcc4367896bea6511be689f5d4e95693cffbe9616b897bf42f2283118f80f03", "4b78a37a89b02fa42f0b2ecc84f822b491a3ecdef1774ba8e2e87036965d65a3", [{0x3f, 0xfffa, {0x0, 0x2}}, {0x33dc, 0x0, {0x2, 0x4}}, {0x4c9d, 0x400}, {0xff, 0xfe3, {0x1, 0xa077}}, {0xe, 0x9, {0x2, 0xd}}, {0x5bb9, 0x2, {0x1, 0x8}}, {0xffff, 0x1, {0x0, 0xfff}}, {0xd6, 0x6, {0x2, 0x5}}, {0x5, 0xc4, {0x1, 0x2}}, {0x8001, 0x7, {0x1, 0x8}}, {0xfff, 0x81}, {0xd, 0x0, {0x3, 0x5}}, {0x7, 0xd6d, {0x2, 0x7}}, {0x0, 0x6, {0x0, 0x3}}, {0x2, 0x9, {0x2, 0x5}}, {0x7, 0x9, {0x2, 0x10}}, {0xffff, 0x7, {0x3, 0x4}}, {0x0, 0x7, {0x0, 0xd0f}}, {0x2, 0x8, {0x1, 0x10001}}, {0x2952, 0x4, {0x3, 0x6}}, {0x38f1, 0x800, {0x0, 0x1}}, {0x1, 0x8001, {0x3}}, {0x1, 0xe000, {0x1, 0x86}}, {0x6, 0x2800}, {0x7, 0x6, {0x2, 0xb}}, {0x9, 0x0, {0x1, 0xfffffffc}}, {0xd, 0xe, {0x2, 0x42083357}}, {0x5, 0x3, {0x0, 0x7}}, {0xff, 0xc, {0x3, 0x96}}, {0x6, 0xfff3, {0x3, 0x2}}, {0x3, 0xd, {0x2, 0x9377}}, {0x4, 0x0, {0x0, 0x6d1}}, {0xfff3, 0x5, {0x0, 0x4}}, {0x1, 0x8, {0x1, 0x40a}}, {0x0, 0xff, {0x2, 0x4}}, {0x4a7f, 0x9, {0x2, 0x2}}, {0x6d2, 0x27, {0x3, 0xc}}, {0x3, 0x8, {0x2, 0x4}}, {0x8, 0x3, {0x2, 0x9}}, {0x0, 0x40, {0x2, 0x4}}]}}}, {{0x254, 0x1, {{0x3, 0x5}, 0x5, 0x5, 0xd68, 0xf65b, 0x1f, 'syz1\x00', "4ac7cf0550fc2fbecaae79039112a301c4d8a12ac349020f38069cc3a26b0cc3", "94535d99ca4affc5596449ee53f70c9317cf95b79d1518b7d52b9a1e258b60a2", [{0x8893, 0x7892, {0x2, 0x4ae}}, {0x200, 0x0, {0x1, 0x3}}, {0x5, 0x10, {0x0, 0x5}}, {0x9, 0x2, {0x0, 0x8}}, {0x7, 0x2, {0x2, 0x6}}, {0x3, 0x7, {0x0, 0x6}}, {0x1000, 0xfff9, {0x3, 0x2}}, {0x1, 0x9, {0x2, 0xffffffff}}, {0x40, 0x7, {0x3, 0x8}}, {0x4, 0x6a3f, {0x0, 0x2}}, {0x1f, 0x7, {0x2, 0x81}}, {0x8, 0x2, {0x3, 0xfffff903}}, {0x9, 0x32d9, {0x2}}, {0x5, 0x335c, {0x1, 0x5ab9}}, {0xb7, 0x1, {0x3, 0x9}}, {0x0, 0x1ff, {0x3, 0x10}}, {0x2, 0xe, {0x1, 0x4}}, {0xa47, 0x6, {0x2, 0x3a8}}, {0x8, 0x8, {0x0, 0x5}}, {0x4, 0x76c, {0x2, 0x5}}, {0x8001, 0x4, {0x1, 0x2}}, {0x6fc3, 0x1, {0x2, 0x3ff}}, {0x5, 0x0, {0x3, 0x5}}, {0x9, 0x10, {0x0, 0xbd}}, {0x8, 0x0, {0x1, 0x2}}, {0x0, 0xfff8, {0x2, 0x7}}, {0xe9bd, 0x4, {0x2}}, {0x1, 0x8, {0x3, 0x2}}, {0x0, 0x9a, {0x0, 0x9}}, {0x4e73, 0x3, {0x0, 0x3}}, {0xa21, 0x64, {0x2, 0x7}}, {0xf9c, 0xffff, {0x2, 0x1}}, {0x6, 0x9, {0x1, 0x486}}, {0x2, 0x5, {0x3, 0xa}}, {0xc, 0xc, {0x2, 0x7ff}}, {0x4, 0x200, {0x1, 0x6}}, {0x8, 0x8, {0x2, 0x4665199d}}, {0x4, 0x2, {0x0, 0x6}}, {0x0, 0x0, {0x1, 0xff}}, {0x8000, 0xd, {0x2, 0x2}}]}}}, {{0x254, 0x1, {{0x1, 0x5}, 0x4, 0x3, 0x4, 0x6, 0x4, 'syz0\x00', "76007ebf6b01eb293334665f493c7b4ab8f379656b425575a82fa10a98e5685d", "282d2355d4951998aae33f76eaef141c2e55a0d238da8b8b30e6d07fc8f37690", [{0x2, 0x4dd6, {0x0, 0x5}}, {0x8, 0x8, {0x3, 0xa}}, {0x1, 0x4, {0x2, 0xe}}, {0x5, 0x4, {0x3, 0x3}}, {0x1000, 0x2, {0x2, 0x7}}, {0x5, 0x2e2, {0x2, 0x6}}, {0x40, 0x101, {0x2, 0x100}}, {0x8, 0x1, {0x2, 0x400}}, {0x7, 0x7, {0x1, 0xfd}}, {0x5, 0xfff9, {0x3, 0x400}}, {0x3, 0x1, {0x1, 0x1}}, {0x100, 0x8001, {0x2, 0x80}}, {0x4, 0xf525, {0x1, 0x2}}, {0x2, 0x4e0, {0x2, 0x4}}, {0x9, 0x5, {0x1, 0x3}}, {0x5, 0x7, {0x2, 0x5}}, {0x5, 0x1, {0x2, 0x4}}, {0x27d, 0xff, {0x2, 0x9}}, {0x2, 0x8, {0x3, 0xe0d}}, {0x0, 0x6, {0x2, 0x69}}, {0x8, 0xa34b, {0x1, 0x1}}, {0x7, 0x6, {0x0, 0x35cdeb14}}, {0x16, 0xfff, {0x1, 0x4}}, {0xb, 0x8, {0x1, 0xdfb7}}, {0x0, 0x60, {0x2, 0x10001}}, {0x0, 0x6, {0x3, 0x5}}, {0x3, 0x1, {0x2, 0x8}}, {0x35, 0x6, {0x0, 0x800}}, {0xd41, 0x3, {0x1, 0x100}}, {0xec, 0x0, {0x0, 0x8001}}, {0xb, 0x8, {0x1, 0x9}}, {0x8001, 0x7, {0x3, 0x5}}, {0x0, 0x2c, {0x3, 0x1}}, {0x1, 0x6, {0x1, 0xfffffc01}}, {0xeab, 0x2, {0x0, 0x10001}}, {0x2, 0x8, {0x1, 0x8}}, {0x5, 0x5, {0x0, 0x5}}, {0xffff, 0x2, {0x1, 0x9}}, {0x6904, 0x8, {0x0, 0x766}}, {0xd6, 0x7f, {0x2, 0x1}}]}}}, {{0x254, 0x1, {{0x1, 0x3}, 0x10, 0xd, 0x7, 0x1, 0x16, 'syz0\x00', "a7e82640f50fd32cbd13b7cb4c309f025463539e40bd69a6c8939e235fcd2c92", "c521446d87ba231b79e2f5670d563d522d9adbf72942eb201d981ea9b9fee8a4", [{0x5, 0xf001, {0x1}}, {0x4, 0x6, {0x2, 0x7}}, {0xa991, 0xb, {0x0, 0x9}}, {0x9, 0x5, {0x0, 0x5}}, {0x6, 0x3, {0x2, 0xd45}}, {0x101, 0xfff9, {0x1, 0x5e4}}, {0x5, 0x7, {0x0, 0x80}}, {0xc6, 0xea9a, {0x3, 0x2}}, {0x6, 0x0, {0x3, 0x88}}, {0x7fff, 0x2, {0x3, 0x3}}, {0x8, 0x8, {0x2, 0xdfc1}}, {0x4, 0xfff, {0x3, 0x7}}, {0x6, 0x8001, {0x1, 0x8}}, {0xfc8, 0x8, {0x3, 0x3}}, {0x8, 0x4, {0x1, 0xffff}}, {0x8, 0x2, {0x3, 0x4}}, {0x9, 0xfffa, {0x1, 0x1}}, {0x0, 0x7, {0x1, 0x1}}, {0x400, 0x6, {0x2, 0x3}}, {0xfbff, 0x6, {0x3, 0x8}}, {0x1800, 0x4, {0x3, 0x5}}, {0x4, 0x1ff, {0x3, 0x9}}, {0xbe, 0xb2d7, {0x2, 0x4}}, {0x1, 0x3, {0x2, 0x9}}, {0x7868, 0x4, {0x0, 0x6}}, {0xfa, 0x1, {0x0, 0x4}}, {0x5, 0x3, {0xdcfbc33de9e98b92, 0x10001}}, {0x3, 0x5, {0x3, 0x9}}, {0xb, 0x605, {0x0, 0x4}}, {0x4, 0x7, {0x2, 0xfffffffa}}, {0x100, 0x6, {0x0, 0x4}}, {0x1, 0x5, {0x0, 0x8}}, {0x2400, 0x7, {0x1, 0xb93}}, {0x1, 0xfff9, {0x1, 0x2}}, {0xcc0a, 0xc, {0x1, 0x8}}, {0x3, 0x6, {0xd4cfadd615a85fed, 0x8}}, {0x5, 0x5, {0x2, 0x592}}, {0x80, 0x0, {0x3, 0x10}}, {0x8, 0xa, {0x0, 0x4}}, {0x7f, 0x4, {0x3, 0x401}}]}}}]}, 0xe0c}, 0x1, 0x0, 0x0, 0x40000024}, 0x4044010) ioctl$sock_inet_SIOCDELRT(r6, 0x890c, &(0x7f0000001900)={0x0, {0x2, 0x4e21, @loopback}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x24}}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x120, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffff9, 0x9}) (async) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) setsockopt$bt_BT_VOICE(r8, 0x112, 0xb, &(0x7f0000001980)=0x63, 0x2) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f00000019c0)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}}, [0xffff0, 0xfffffffffffff7c2, 0x7, 0x9, 0x7, 0x8, 0x0, 0x10000, 0x1ff, 0x800, 0x51651b48, 0x8000000000000000, 0x4b18, 0xd640, 0xfffffffffffffffd]}, &(0x7f0000001ac0)=0x100) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000001b00)={r9, 0x3}, &(0x7f0000001b40)=0x8) (async) setsockopt$IP_VS_SO_SET_EDITDEST(r5, 0x0, 0x489, &(0x7f0000001b80)={{0x2b, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e20, 0x2, 'rr\x00', 0xa, 0x5, 0xc}, {@rand_addr=0x64010101, 0x4e20, 0x4, 0x0, 0xe7e, 0x1cb6}}, 0x44) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000001c00)={0x2, {0x1, 0xffffffff7fffffff, 0x0, 0x6, 0xc}}) (async) connect$bt_l2cap(r5, &(0x7f0000001c40)={0x1f, 0x65, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x7, 0x1}, 0xe) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000001c80)=0x3) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r6, &(0x7f0000001d80)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001d00)={0x40, 0x140b, 0x200, 0x70bd26, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x3}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8800}, 0x8000) (async) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000001dc0)={r10, @in6={{0xa, 0x4e23, 0x1, @private1, 0x4}}, 0x6, 0x2, 0x0, 0x6, 0x8}, &(0x7f0000001e80)=0x98) connect$bt_l2cap(r4, &(0x7f0000001ec0)={0x1f, 0x2, @none, 0x6, 0x2}, 0xe) sendmsg$TIPC_NL_BEARER_DISABLE(r4, &(0x7f0000002180)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002140)={&(0x7f0000001f80)={0x1ac, 0x0, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x386}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa4dc}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}]}, @TIPC_NLA_NODE={0x48, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "e23770ec499c60dba97fb27a69ed2ceed81c1b8c956cb14b"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK={0xac, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x40}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7ff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xf860}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x90}, 0x40) 11.272204167s ago: executing program 1 (id=4040): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) unshare(0x2c020400) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff04000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008802) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) r5 = socket(0x1, 0x803, 0x0) sendto$unix(r5, 0x0, 0x0, 0x800, &(0x7f0000000700)=@file={0x1, './file0\x00'}, 0x6e) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000740)=ANY=[@ANYBLOB="0a000000bbbbbbbbbbbbaaaaaaaaaaaa86dd6a00899300083aff"], 0x42) 10.438940636s ago: executing program 3 (id=4044): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x64}]}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x24000144}, 0x2000) close(r2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc4f, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x0, 0x4, 0x6, 0x1, 0x29}]}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x18, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x2004a6}, 0x94) 8.3295745s ago: executing program 0 (id=4048): r0 = socket(0x40000000015, 0x5, 0x0) bind(r0, &(0x7f0000000000)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'ccm(arc4)\x00'}, 0x80) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000007b80)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) 8.106976022s ago: executing program 4 (id=4049): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000001c0)={0x2}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x4) r3 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r3, 0x3a, 0x1, 0x0, &(0x7f0000000080)=0xfffffffffffffdfe) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x7}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}]}}]}, 0x58}}, 0x44080) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x11}, [@NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x401}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x3c}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014800c00198008"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r2, 0x1, 0x3}, 0x48) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x37, &(0x7f0000000480)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa20000000000ff07020000fcfef3ff620200000000000018110000", @ANYRES32=r6, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=ANY=[@ANYRESOCT=r6], 0x7c}, 0x1, 0x0, 0x0, 0x844}, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="3000000076000d0b000000080000000003c00e0000000000080001000100000008000a0000000000080005"], 0x30}}, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) write(r10, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r12 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r12, 0x10c, 0x5, &(0x7f0000000800), &(0x7f0000000840)=0x4) ioctl(r11, 0x8916, &(0x7f0000000100)="76657468303a30000000000000000000020000000a0000010000000000000000") ioctl(r11, 0x8914, &(0x7f0000000300)="76657468303a300000000000000000000100"/32) (async) ioctl(r11, 0x890b, &(0x7f0000000000)="0000000000000000020000000a00000100000000000000000200000000000000000000000000000002000000ffffffff000000000000000005000000000000000000000000000000000000000000000000010000007f00"/106) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a010400000000004000000200000314000480100001800800010064757000040002800900010073794b03000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x68}}, 0x8c0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x64, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x20}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) 8.106416421s ago: executing program 3 (id=4050): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a400000010000104080000000300000000000000", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a70001280110001006272696467655f736c6176650000000058000580050019a103000000050005000000000005000c000700000005000700a100000005000a00ffa1000005000800ffa10000040018000500060001000000060002000100000005001e00000000000500010003000000140003006272696467655f736c6176655f30"], 0xa4}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="04000000", @ANYRES16=r4, @ANYBLOB="07000000000000001fff0200000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r1) (rerun: 64) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r5, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x7}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c080}, 0x40) (async, rerun: 32) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x8000) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) 7.731836754s ago: executing program 2 (id=4051): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {}, {0xa, 0xb}}, [@filter_kind_options=@f_basic={{0xa}, {0x8, 0x2, [@TCA_BASIC_EMATCHES={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x200008c0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, '\x00', [{0x800, 0x49dd51a9, 0x5, 0xfffffffffffff003, 0xaa53, 0x2}, {0xfc2b, 0x2, 0x800000000080, 0xfffffffbffffffff, 0x5, 0x8}]}) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000cc0)={'ip6_vti0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x4, 0x10, 0x8, 0x2, 0x41, @empty, @empty, 0x7800, 0x7800, 0x5, 0x2}}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r7, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) 7.524649464s ago: executing program 0 (id=4052): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd26, 0xfffffffe, {0x0, 0x0, 0x0, r2, {0x0, 0x4101}, {0xffff, 0xffff}, {0x7, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x560, 0x7, 0x6c, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x94, 0x8, 0x0, 0x8, 0x7}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c0c4}, 0x44) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x0, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448f0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0x4, &(0x7f0000000080)=@framed={{}, [@alu={0x4, 0x1, 0x3, 0x0, 0x3, 0x30, 0x8}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2}, 0x94) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e2, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$SIOCX25GFACILITIES(r6, 0x89e2, &(0x7f00000000c0)) close(r6) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r7, @ANYBLOB="000000000000000050020c"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'ip6_vti0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000005c0)={@local, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xa7, 0x2400008, r9}) syz_emit_ethernet(0x7a, &(0x7f0000000640)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x40, 0x0, 0xff, @private1, @private2, [@hopopts={0x3a}], "f4c638bed6f068cc"}}}}}}}, 0x0) 5.325904973s ago: executing program 4 (id=4053): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x4}]}}}]}, 0x3c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_ADDR={0xa, 0x14, @remote}, @IFLA_BR_AGEING_TIME={0x8, 0x9}]}}}]}, 0x48}}, 0x0) 5.295541744s ago: executing program 1 (id=4054): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000480)=@gettaction={0x28, 0x30, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}]}, 0x28}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000000008500000019000000958e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.046003333s ago: executing program 0 (id=4055): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x850) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x10e, 0x5, 0x0, 0x20000000) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000003c0)=0x100000001, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)="8907040400", 0x5) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf25080001000100000008000100020000000800010002000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4df}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x20, 0x0, 0x20, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x850) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) getsockopt$bt_BT_SECURITY(r2, 0x10e, 0x5, 0x0, 0x20000000) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) (async) sendmsg$IEEE802154_SCAN_REQ(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x34, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1f}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0xf}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x9}, @IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004002}, 0x0) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000003c0)=0x100000001, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104d000000000063012d00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2}, 0x50) (async) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)="8907040400", 0x5) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="500000000614010027bd7000fbdbdf25080001000100000008000100020000000800010002000000080008"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x8080) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xba6}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4df}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 4.900117151s ago: executing program 3 (id=4056): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="ffff0006bcd32a000000000000000000000000ff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffffff}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000400)={'syztnl0\x00', &(0x7f0000000340)={'ip6_vti0\x00', 0x0, 0x4, 0x8, 0x8, 0xfffffff4, 0xa, @dev={0xfe, 0x80, '\x00', 0xb}, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8000, 0x7, 0x5f000595, 0x4}}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x2]}]}, 0x6c}}, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) (async) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000480)=0x14) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)=ANY=[@ANYBLOB="a8000000", @ANYRES16=0x0, @ANYBLOB="000126bd7000ffdbdf250500000008000200070000003c000180050002000100000014000400ff02000000000000000000000000000108000700", @ANYRES32=r3, @ANYBLOB="14000400fc02000000000000000000000000000140000180060005004e220000060005004e210000060001000200000014000400ff01000000000000000000000000000108000700", @ANYRES32=r6, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYBLOB="05000500060000000800040003000000c5e1ede0f54a8ecee53a69a3743198cfe3140721402b4efbdebb7e07424cb21c2e844447987dc3989bd079b78088a3388cb6f06e4ddc43c399008dd44c2895fe0248f63acea6fce163cccc1082e8ae53f6d11de00ea0c727b1c4751ffea85b5808676d7fd05f27617e01500a4d71c6a4e1b596fb24630b5f7f29c51724c7c3118c78ee92eca1401053b539c73ba1374fc7e8dcbe362e84aed08cdd74e5ceec71822cf8c6d029b040cf44a7950b00d505f6f4934fad7c29328053d722ea930b840944a30a5cd4a580baa8a6a06a8c5aecb00a0537"], 0xa8}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) (async) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r8) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r7, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) (async) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r8, r8, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6, 0x20}}, 0x20) 4.624790701s ago: executing program 2 (id=4057): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001c00010000000000000000a007000000", @ANYRES32=r2, @ANYBLOB="400096040a000200aaaaaaaaaa0c00000600050001"], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x10000, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x8000000000000000}}}, 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000a40)=@migrate={0xa0, 0x21, 0x1, 0x0, 0xfffffffe, {{@in6=@local, @in6=@loopback, 0xfffe, 0x0, 0x2, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x50, 0x11, [{@in=@multicast2=0xfc020000, @in6=@mcast1, @in=@loopback, @in=@broadcast, 0x6c, 0x1, 0x0, 0x0, 0xa, 0xa}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 3.816336127s ago: executing program 3 (id=4058): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x0, 0x50020000, 0x0, 0x0, 0x0, 0x178, 0x1f0, 0x1f0, 0x178, 0x1f0, 0x3, 0x0, {[{{@ip={@remote, @multicast2, 0xff, 0x0, 'veth1_to_batadv\x00', 'vlan1\x00', {}, {}, 0x6, 0x3, 0x25}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x6, 0x1, 0x0, 0x0, 0x0, "f8b54bef56811d5a23a1093978539521d944884d917284e3021e0fe5400ac5774e467ac2cca185bac3d45955522fa784cec24fb8b15a3c0b5bbf6044ae73b3e2"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) socket$inet6(0xa, 0x3, 0x8000000003c) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000711204000000000095000000000000005b027979f920009223e97964531444cea59b00f1557e6a3d3b6c90fdc3a25a8a470b2735b3abbe77b6423fc7e0570141b8549a01a00f1bfdb7cdca6f9499414a84c2eddd1ef0c5d32e1efb8bfa2ec2a2ca4c0ca40ecd9d62e07c8fadd1b2c3eb34ba81a4b01e0b1945e52d654437e720152fa34e75ed6f155b2e992123d62ca6fa5136e2e3c0a0fd5119cc6a0b4fb25d7ddc2f427caa664d685cd2e3d17178103a11bfd9ea5d0f6683"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000711204000000000095000000000000005b027979f920009223e97964531444cea59b00f1557e6a3d3b6c90fdc3a25a8a470b2735b3abbe77b6423fc7e0570141b8549a01a00f1bfdb7cdca6f9499414a84c2eddd1ef0c5d32e1efb8bfa2ec2a2ca4c0ca40ecd9d62e07c8fadd1b2c3eb34ba81a4b01e0b1945e52d654437e720152fa34e75ed6f155b2e992123d62ca6fa5136e2e3c0a0fd5119cc6a0b4fb25d7ddc2f427caa664d685cd2e3d17178103a11bfd9ea5d0f6683"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) accept$inet(r0, &(0x7f0000000280)={0x2, 0x0, @initdev}, &(0x7f00000002c0)=0x10) 3.729364783s ago: executing program 1 (id=4059): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000084000000840000000800000008000000000000070000000009000000000000010000000a000000000f000000020000130e0000000200000001000100080000000c0000000900000000000000060000000000000e03000000000000000e00000000000010040000040b0000000000000c030000000e0000000000000e050000000200000000305f2e00003000"/164], &(0x7f0000000180)=""/164, 0xa4, 0xa4, 0x1}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4008, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000084000000840000000800000008000000000000070000000009000000000000010000000a000000000f000000020000130e0000000200000001000100080000000c0000000900000000000000060000000000000e03000000000000000e00000000000010040000040b0000000000000c030000000e0000000000000e050000000200000000305f2e00003000"/164], &(0x7f0000000180)=""/164, 0xa4, 0xa4, 0x1}, 0x28) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x4008, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) 3.525127194s ago: executing program 0 (id=4060): sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="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", 0x114, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x9, &(0x7f0000000380), 0x98) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x2f}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "910d000000"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf4}, 0x1, 0x0, 0x0, 0x180}, 0x40800) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f00000010c0)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x4, 0x1, 0x0, @private=0xa0100ff, @local}, @redirect={0xb, 0x0, 0x0, @private=0xa010101, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x1000000, @multicast2, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@remote, 0x4e20fffc}]}, @timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@rand_addr=0x64010102}, {@remote}, {@private=0xa010101}, {@private, 0x800}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty}]}]}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610434000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) 3.524796067s ago: executing program 4 (id=4061): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYRESDEC=0x0, @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000001c00000000000000bf9800000000000056080000000000008500000005000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x3c, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 3.395017308s ago: executing program 2 (id=4062): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001340)=@newtfilter={0x58, 0x2c, 0x609, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0xffffffff, {0x0, 0x2}, {0x1}, {0xd, 0x1}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_IPV4_SRC={0x8, 0xa, @broadcast}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4c000}, 0x0) 2.619495416s ago: executing program 4 (id=4063): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x6}, [@map_idx_val={0x18, 0x5, 0x6, 0x0, 0x2}]}, 0x0, 0x1, 0x0, 0x0, 0x41100, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r0 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[], 0x128}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.587801483s ago: executing program 1 (id=4064): ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000140)={0x7, 'lo\x00', {0x7}, 0x7}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000002540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@struct={0x8, 0x2, 0x0, 0xf, 0x0, 0x5, [{0xe, 0x0, 0x3}, {0x7, 0x3}]}]}, {0x0, [0x0, 0x5f, 0x0, 0x0, 0x0, 0x5f, 0x0, 0x2e]}}, &(0x7f0000000040)=""/235, 0x46, 0xeb, 0x6}, 0x28) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}, {0x0, 0x700}, {&(0x7f0000000280)='4', 0x1}], 0x3}, 0x804) (async) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}, {0x0, 0x700}, {&(0x7f0000000280)='4', 0x1}], 0x3}, 0x804) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000180)='syz_tun\x00') syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 2.347597414s ago: executing program 2 (id=4065): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f00000006c0), 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb0100180000000099e34c8608d693a91e4d0000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040600000100000001000000000000001800000002000004080000171300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) 2.329369972s ago: executing program 0 (id=4066): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000001c46000000b70300000000000a850000000c000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r2, &(0x7f0000000480)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)=r1}, 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x38, 0x21}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x6, 0x21, &(0x7f0000000000)=ANY=[@ANYBLOB="1808000000000000000000feffffe60018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b70300002bb91a008500000008000000bc090000000000004509010000200000950000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000392200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf9800000000000056090000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.600985199s ago: executing program 4 (id=4067): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="00008000000000001800348005"], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000900)=@delchain={0x2c, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff3}, {}, {0xb, 0x9}}, [@TCA_CHAIN={0x8, 0xb, 0xfffffff9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_newaddr={0x2c, 0x14, 0x1, 0x70bd27, 0x25dfdbfd, {0xa, 0x0, 0x4, 0xfe, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4) ioctl$sock_SIOCBRADDBR(r3, 0x89a0, &(0x7f0000000040)='bridge_slave_0\x00') sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x114, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0xd6, 0x6, "aab08d833d92529931109b6ca2dc64cf03c538dbdde0c100b84efa956ed9e9cfdc09f6db0f21dada6832994ce48ac1e3876ac3b222da99f1bad0a8ec25db1724a062cd83fa2a98e9870251f069f98a6c3886a2bea38b936a203065d3804a154bfa641508b5deb2f10f617dba44b57d15fb5eda59d631026b64fe252734ebf3a37e9fc12e377be93ef43bb95ad4064373a6ddfe3e4bbfae0455c17e9a4ed8fd2642f9630d3672a10fe1c220537fb1e24606324136c0451bed40c5d267850a5e07df9cd6b5248753ec625944a0c8e817785ee4"}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWSETELEM={0x160, 0xc, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x134, 0x3, 0x0, 0x1, [{0x130, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x124, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}, {0x10, 0x1, 0x0, 0x1, @tproxy={{0xb}, @void}}, {0x68, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x54, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x80}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BYTEORDER_LEN={0x8, 0x4, 0x1, 0x0, 0xc8}, @NFTA_BYTEORDER_SREG={0x8}, @NFTA_BYTEORDER_OP={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_BYTEORDER_DREG={0x8}]}}}, {0x5c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x720}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x7fff}, @NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0xabc49a473d000252}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x29c}, 0x1, 0x0, 0x0, 0x4c000}, 0x2004c000) 1.324579962s ago: executing program 2 (id=4068): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000200)="1700000072006bcd9e3fe3dc6e08000007230000040200", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000000) socket$nl_xfrm(0x10, 0x3, 0x6) 1.208780836s ago: executing program 0 (id=4069): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast2}, &(0x7f00000004c0)=0x10) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r0, 0x80286722, &(0x7f0000000600)={&(0x7f0000000500)=""/249, 0xf9, 0x7, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791200000000000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x58, &(0x7f0000000200)}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000240)={0x34, r3, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x30}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}]}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000c40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c00)={&(0x7f0000000680)={0x55c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x636cac67, 0x1e}}}}, [@NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x2}, @NL80211_NAN_FUNC_SUBSCRIBE_ACTIVE={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x10, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_FOLLOW_UP_ID={0x5, 0x6, 0x8}, @NL80211_NAN_FUNC_PUBLISH_BCAST={0x4}]}, @NL80211_ATTR_NAN_FUNC={0x514, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_SRF={0x218, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x2}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TERM_REASON={0x5, 0x10, 0x1}, @NL80211_NAN_FUNC_SERVICE_INFO={0x99, 0xb, "3883963c4062bec7c90f1bf7ae5e840ae647a98aa5ff402030b00efc19b9b7d072371902639a8ee25e68da21402705c3244c579d5a4576fee1a408ed5940848358ccbf5c45032127b1b04b05139c4f972898f7e2d7fca9f983a772bd382423022232684c43f034d08979d4c5230703f1b948287ad39521777052f4865328620d2cb5f541a98a06e0d9f9c7f3bed223a3ca176f1bcc"}, @NL80211_NAN_FUNC_PUBLISH_TYPE={0x5, 0x3, 0x81}, @NL80211_NAN_FUNC_SRF={0x238, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_MAC_ADDRS={0x1c, 0x4, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x3}, @NL80211_NAN_SRF_INCLUDE={0x4}]}, @NL80211_NAN_FUNC_TTL={0x8, 0xa, 0x401}, @NL80211_NAN_FUNC_SERVICE_ID={0xa, 0x2, "fcce2671f3f3"}]}]}, 0x55c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008001) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r9 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_MMAP_OFFSETS(r9, 0x11b, 0x3f, 0xfffffffffffffffd, &(0x7f0000000040)=0x60) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x26, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11, 0x4de}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4000}]}}]}, 0x40}}, 0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x29, 0x3, 0x10, 0x7fd4, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @loopback}, 0x10, 0x7800, 0x4, 0x9}}) syz_emit_ethernet(0x8e, &(0x7f0000000240)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x58, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c909", 0x0, 0x2b, 0x0, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, [@srh={0x6c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote]}]}}}}}}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa0, r2, 0x10, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x24}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x80}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9d}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0xa0}}, 0x20004014) 1.137301062s ago: executing program 1 (id=4070): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x20, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x102, 0x117, 0x0, 0x1, [@typed={0xc, 0x16, 0x0, 0x0, @u64=0xfac06}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29", @typed={0x4, 0xeb}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20008010) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000200)={0x9, {{0x2, 0x4e21, @multicast1}}}, 0x88) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)=ANY=[@ANYBLOB="2c00fbff0c0a010300000012000000000a0000010900020073797a31400000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x4008000) 860.827008ms ago: executing program 3 (id=4071): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r6 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r4, r7, 0x25, 0x0, @val=@netkit={@void, @value=r4}}, 0x1c) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r3, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.bfq.io_serviced\x00', 0x0, 0x0) 293.387155ms ago: executing program 2 (id=4072): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x9c, 0x10, 0x503, 0x70bd26, 0x0, {}, [@IFLA_LINK={0x8, 0x5, r1}, @IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x10, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1000009, 0x81}}]}, @IFLA_VLAN_EGRESS_QOS={0x34, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x80000001}}]}]}}}, @IFLA_BROADCAST={0xa, 0x2, @local}]}, 0x9c}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1d, '\x00', r1, 0xffffffffffffffff, 0x3, 0x4, 0x2}, 0x50) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x1e, &(0x7f00000002c0)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1000}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x0, 0x6, 0x3, 0x8, 0x0, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @btf_id={0x18, 0x4, 0x3, 0x0, 0x2}], &(0x7f00000003c0)='GPL\x00', 0xff, 0xaa, &(0x7f0000000400)=""/170, 0x41100, 0xc, '\x00', r1, 0x25, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000500), &(0x7f0000000540)=[{0x1, 0x1, 0xd, 0xa}, {0x2, 0x2, 0xd, 0xb}, {0x3, 0x5, 0xb, 0x3}], 0x10, 0x2}, 0x94) 0s ago: executing program 4 (id=4073): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x3}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [0x0, 0xd, 0x4, 0xf, 0x0, 0xa, 0xd, 0x7, 0xc, 0x5, 0xa, 0xf, 0x3, 0x6, 0x5, 0x2], 0x0, [0xeb, 0x7, 0x7, 0x1400, 0x7f, 0x80, 0x4, 0x1, 0x3, 0x8, 0x101, 0x2, 0xf, 0x2, 0x4, 0x4], [0x0, 0x8, 0x1, 0x7, 0x3c4, 0x6, 0x3, 0x7, 0xd3, 0xa75, 0x2, 0x1, 0x2f, 0x40, 0xfffe, 0xaa06]}, [@TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0x90}}, 0x44890) close(r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r2, 0xc0385868, &(0x7f0000000440)={r5, &(0x7f0000000040)='\x00', 0x1, &(0x7f0000000340)={@align=0x6, {0x1, 0x5, 0x40000000}}, 0xffffffff, &(0x7f0000000380)={@_ha_fsid}, &(0x7f0000000400)=0xc7a}) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r7, &(0x7f0000000080)='syz0\x00', 0x1ff) openat$cgroup(r7, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r8, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000400)=r9, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480)={r6, r7, 0x2b, 0x0, @val=@target_btf_id=r9}, 0x14) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000098bc836dc1c9d3440a480000000c0a01e900000000000000000a0000060900020073797a31000000000900010073797a31000000008500000000180000800c00018006000100d10300000800034000000001140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a0101"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="3000000002"], 0x8) kernel console output (not intermixed with test programs): read 0... [ 380.371965][T18548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3133'. [ 380.391047][T18545] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3135'. [ 380.446102][T18550] IPVS: using max 30 ests per chain, 72000 per kthread [ 381.025673][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 381.034296][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 381.054255][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 381.068358][ T5629] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 381.072540][ T5629] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 381.218342][T18573] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 382.428600][T18609] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3151'. [ 382.432710][T18609] netlink: 'syz.0.3151': attribute type 2 has an invalid length. [ 382.564418][T18617] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.579946][T18614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 382.804440][T18622] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 383.155258][ T4934] Bluetooth: hci2: command tx timeout [ 383.275264][T18642] 8021q: VLANs not supported on ip_vti0 [ 383.645529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.752636][T18650] netlink: 'syz.0.3163': attribute type 4 has an invalid length. [ 384.211017][T18664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3165'. [ 384.634655][T18667] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3166'. [ 385.118247][T18684] netlink: 'syz.1.3169': attribute type 1 has an invalid length. [ 385.235692][ T4934] Bluetooth: hci2: command tx timeout [ 385.464494][T18566] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.464622][T18566] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.464776][T18566] bridge_slave_0: entered allmulticast mode [ 385.497639][T18566] bridge_slave_0: entered promiscuous mode [ 385.510691][T18566] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.510860][T18566] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.511005][T18566] bridge_slave_1: entered allmulticast mode [ 385.514381][T18566] bridge_slave_1: entered promiscuous mode [ 385.541799][T18705] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3173'. [ 385.554150][T18707] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3173'. [ 385.555336][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 385.658158][T18566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.661675][T18566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.714052][T18566] team0: Port device team_slave_0 added [ 385.725742][T18566] team0: Port device team_slave_1 added [ 385.944565][T18566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 385.944617][T18566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.944653][T18566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 385.949674][T18566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 385.949705][T18566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 385.949760][T18566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.060516][T18720] netlink: 'syz.0.3178': attribute type 4 has an invalid length. [ 386.129316][T18719] netlink: ct family unspecified [ 386.219495][T18720] netlink: 'syz.0.3178': attribute type 4 has an invalid length. [ 386.255332][T18566] hsr_slave_0: entered promiscuous mode [ 386.256354][T18566] hsr_slave_1: entered promiscuous mode [ 386.257229][T18566] debugfs: 'hsr0' already exists in 'hsr' [ 386.257246][T18566] Cannot create hsr debugfs directory [ 386.538695][T18733] netlink: 'syz.3.3182': attribute type 1 has an invalid length. [ 386.722348][T18733] 8021q: adding VLAN 0 to HW filter on device bond8 [ 386.827687][T18751] tipc: Can't bind to reserved service type 2 [ 387.215891][T18762] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3187'. [ 387.215929][T18762] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3187'. [ 387.269792][T18566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.269827][T18566] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.314979][ T4934] Bluetooth: hci2: command tx timeout [ 387.354064][T18765] team0: Device veth1_macvtap failed to register rx_handler [ 387.579013][T18566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.579048][T18566] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.791179][T18786] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3193'. [ 387.832512][T18781] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3190'. [ 387.832551][T18781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3190'. [ 387.832584][T18781] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3190'. [ 388.074642][T18566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.074709][T18566] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.976362][T18829] netlink: 'syz.1.3201': attribute type 1 has an invalid length. [ 389.164139][T18837] netlink: 'syz.1.3205': attribute type 1 has an invalid length. [ 389.280181][T18839] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 389.294631][T18838] ip_tables: iptables: counters copy to user failed while replacing table [ 389.395943][ T4934] Bluetooth: hci2: command tx timeout [ 389.410048][T18837] netlink: 'syz.1.3205': attribute type 1 has an invalid length. [ 389.419251][T18845] __nla_validate_parse: 2 callbacks suppressed [ 389.419284][T18845] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3205'. [ 389.429644][T18840] ip_tables: iptables: counters copy to user failed while replacing table [ 389.623439][T18848] netlink: 'syz.3.3207': attribute type 1 has an invalid length. [ 389.807732][T18566] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 389.876151][T18566] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.877499][T18566] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 389.964560][T18566] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.979901][T18566] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 390.019314][T18566] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 390.029278][T18566] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 390.065852][T18566] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 390.404020][T18566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.458088][T18566] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.474215][ T189] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.474339][ T189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.509441][T18879] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3212'. [ 390.520816][ T189] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.520978][ T189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.610704][T18879] netlink: 'syz.4.3212': attribute type 10 has an invalid length. [ 390.902494][T18885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3214'. [ 390.902576][T18885] bridge_slave_0: left allmulticast mode [ 390.902595][T18885] bridge_slave_0: left promiscuous mode [ 390.902859][T18885] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.434667][T18907] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 391.434700][T18907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3217'. [ 391.558780][T18566] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.640704][T18566] veth0_vlan: entered promiscuous mode [ 391.662549][T18566] veth1_vlan: entered promiscuous mode [ 391.792700][T18566] veth0_macvtap: entered promiscuous mode [ 391.873739][T18566] veth1_macvtap: entered promiscuous mode [ 391.990928][T18566] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.071929][T18566] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.217589][ T189] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.217769][ T189] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.217907][ T189] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.296237][T18928] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3226'. [ 392.297980][T18928] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.3226'. [ 392.362562][ T6777] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.378388][T18928] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 392.466347][T18928] 0ªX¹¦Dö»: entered allmulticast mode [ 392.774111][T18936] bridge1: entered promiscuous mode [ 392.781797][T18936] bridge1: entered allmulticast mode [ 392.829195][ T6775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.829232][ T6775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.928324][ T6774] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.928377][ T6774] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.088453][T18951] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3231'. [ 393.634684][T18961] netlink: 'syz.0.3234': attribute type 1 has an invalid length. [ 393.784339][T18961] 8021q: adding VLAN 0 to HW filter on device bond8 [ 393.786664][T18971] bond8: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 393.851245][T18961] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3234'. [ 393.854502][T18971] bond8: entered allmulticast mode [ 393.888379][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 393.898359][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 393.910340][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 393.915414][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 393.930982][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 394.021850][T18979] netlink: 'syz.2.3239': attribute type 3 has an invalid length. [ 394.022048][T18979] netlink: 'syz.2.3239': attribute type 3 has an invalid length. [ 394.266633][T18987] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3242'. [ 394.326771][T18987] netlink: 'syz.2.3242': attribute type 4 has an invalid length. [ 394.442664][T18997] x_tables: duplicate underflow at hook 3 [ 394.464373][T18997] x_tables: duplicate underflow at hook 2 [ 394.759826][T19002] netlink: ct family unspecified [ 394.763769][T19002] No such timeout policy "s" [ 394.763786][T19002] netlink: Failed to associated timeout policy 's' [ 394.805675][T19002] __nla_validate_parse: 1 callbacks suppressed [ 394.805694][T19002] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3245'. [ 394.838678][T19004] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3246'. [ 395.143728][T19019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3248'. [ 395.350715][T19028] openvswitch: netlink: Unexpected mask (mask=810, allowed=10058) [ 395.965152][ T4934] Bluetooth: hci3: command tx timeout [ 396.061392][T18973] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.061572][T18973] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.061770][T18973] bridge_slave_0: entered allmulticast mode [ 396.063554][T18973] bridge_slave_0: entered promiscuous mode [ 396.093004][T18973] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.093169][T18973] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.093302][T18973] bridge_slave_1: entered allmulticast mode [ 396.116874][T18973] bridge_slave_1: entered promiscuous mode [ 396.157056][T18973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.160431][T18973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.249572][T18973] team0: Port device team_slave_0 added [ 396.252432][T18973] team0: Port device team_slave_1 added [ 396.293217][T18973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.293234][T18973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.293257][T18973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.296844][T18973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.296874][T18973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 396.296912][T18973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.414705][T18973] hsr_slave_0: entered promiscuous mode [ 396.418517][T18973] hsr_slave_1: entered promiscuous mode [ 396.420122][T18973] debugfs: 'hsr0' already exists in 'hsr' [ 396.420178][T18973] Cannot create hsr debugfs directory [ 396.652849][T18973] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.752040][T18973] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.858051][T18973] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.959716][T18973] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.665088][T19002] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 397.685703][T18973] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 397.717719][T18973] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.718786][T18973] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 397.766063][T18973] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.767482][T18973] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 397.798845][T18973] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.800517][T18973] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 397.854126][T18973] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 398.037722][ T4934] Bluetooth: hci3: command tx timeout [ 398.096648][T19055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3252'. [ 398.255520][T18973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.319254][T18973] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.351940][ T6777] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.352039][ T6777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.397560][ T189] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.397669][ T189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.412076][T19070] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3257'. [ 398.412107][T19070] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 398.510073][T19076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input6 [ 398.608473][T19080] netlink: 'syz.0.3260': attribute type 4 has an invalid length. [ 398.608528][T19080] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3260'. [ 398.609064][T19081] netlink: 'syz.0.3260': attribute type 4 has an invalid length. [ 398.609094][T19081] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3260'. [ 398.613618][T19080] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3260'. [ 398.613667][T19080] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3260'. [ 399.062574][T19090] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3263'. [ 399.340042][T19106] x_tables: duplicate underflow at hook 2 [ 399.571808][T19111] macsec1: entered promiscuous mode [ 399.952195][T19124] __nla_validate_parse: 1 callbacks suppressed [ 399.952216][T19124] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3271'. [ 400.048748][T19125] x_tables: duplicate underflow at hook 1 [ 400.110866][T19138] x_tables: duplicate underflow at hook 1 [ 400.115124][ T4934] Bluetooth: hci3: command tx timeout [ 400.178768][T19128] netlink: 64 bytes leftover after parsing attributes in process `syz.4.3271'. [ 400.361124][T19148] netlink: 'syz.4.3274': attribute type 12 has an invalid length. [ 400.501002][T18973] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.592469][T19153] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3276'. [ 400.734265][T18973] veth0_vlan: entered promiscuous mode [ 400.759021][T18973] veth1_vlan: entered promiscuous mode [ 400.839643][T18973] veth0_macvtap: entered promiscuous mode [ 400.869979][T18973] veth1_macvtap: entered promiscuous mode [ 400.982025][T18973] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.079743][T18973] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 401.125544][ T6776] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.126576][ T6776] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.126640][ T6776] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.126672][ T6776] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.417911][ T6776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.417956][ T6776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.615678][T19182] netlink: 180 bytes leftover after parsing attributes in process `syz.0.3283'. [ 401.693069][ T6772] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 401.693091][ T6772] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 401.933120][T19188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3285'. [ 401.949101][T19188] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3285'. [ 402.018147][T19190] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3233'. [ 402.195361][ T4934] Bluetooth: hci3: command tx timeout [ 402.551553][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 402.556567][ T5629] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 402.566570][ T5629] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 402.581129][ T5629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 402.584233][ T5629] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 403.908240][T19241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3295'. [ 404.071352][T19255] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3296'. [ 404.071384][T19255] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3296'. [ 404.158831][T19255] gretap1: entered promiscuous mode [ 404.158852][T19255] gretap1: entered allmulticast mode [ 404.428324][T19268] dvmrp8: entered allmulticast mode [ 404.676169][ T5629] Bluetooth: hci4: command tx timeout [ 405.085926][T19297] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 1, id = 0 [ 405.218459][T19299] macvlan0: entered promiscuous mode [ 405.293963][ T5280] veth1_vlan: left promiscuous mode [ 405.856724][T19324] netlink: 'syz.4.3310': attribute type 24 has an invalid length. [ 406.318883][T19337] __nla_validate_parse: 1 callbacks suppressed [ 406.318906][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3312'. [ 406.756072][ T5629] Bluetooth: hci4: command tx timeout [ 406.758713][T19349] pim6reg: entered allmulticast mode [ 406.856811][T19362] netlink: 120 bytes leftover after parsing attributes in process `syz.3.3316'. [ 407.322983][T19374] netlink: 31 bytes leftover after parsing attributes in process `syz.3.3318'. [ 407.323025][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3318'. [ 407.323059][T19374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3318'. [ 407.483665][T19387] xt_hashlimit: size too large, truncated to 1048576 [ 407.963201][T19208] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.963301][T19208] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.964602][T19208] bridge_slave_0: entered allmulticast mode [ 407.988851][T19208] bridge_slave_0: entered promiscuous mode [ 407.999628][T19208] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.999798][T19208] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.999994][T19208] bridge_slave_1: entered allmulticast mode [ 408.002204][T19208] bridge_slave_1: entered promiscuous mode [ 408.088425][T19208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.107909][T19208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.166575][T19406] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 408.310701][T19208] team0: Port device team_slave_0 added [ 408.324633][T19208] team0: Port device team_slave_1 added [ 408.569701][T19208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.569719][T19208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.569742][T19208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.631716][T19208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.631752][T19208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.631809][T19208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.793871][T19208] hsr_slave_0: entered promiscuous mode [ 408.803113][T19208] hsr_slave_1: entered promiscuous mode [ 408.811348][T19208] debugfs: 'hsr0' already exists in 'hsr' [ 408.811371][T19208] Cannot create hsr debugfs directory [ 408.841111][ T5629] Bluetooth: hci4: command tx timeout [ 408.990431][T19429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3334'. [ 408.990450][T19429] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3334'. [ 408.990465][T19429] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3334'. [ 409.056151][T19434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3336'. [ 409.543817][T19444] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3339'. [ 409.888986][T19208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.889031][T19208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.889056][T19208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 409.889080][T19208] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 410.073360][T19208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.073395][T19208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.073419][T19208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 410.073443][T19208] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 410.159301][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.159372][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.160819][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.191182][T19469] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 410.191218][T19469] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 410.191255][T19469] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 410.250874][T19469] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 410.334034][T19208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.334069][T19208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.334092][T19208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 410.334115][T19208] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 410.511256][T19479] netlink: 'syz.2.3348': attribute type 1 has an invalid length. [ 410.550388][T19472] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.552786][T19472] bond0: (slave bond1): Enslaving as an active interface with an up link [ 410.574891][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.583039][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.718192][T19208] netdevsim netdevsim0  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 410.718248][T19208] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.718291][T19208] netdevsim netdevsim0  (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 410.718345][T19208] netdevsim netdevsim0  (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 410.767767][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.769869][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.782049][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.794802][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.800528][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.816715][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.829035][T19469] hsr0 speed is unknown, defaulting to 1000 [ 410.915352][ T4934] Bluetooth: hci4: command tx timeout [ 411.287107][T19496] netlink: 'syz.4.3356': attribute type 13 has an invalid length. [ 411.354575][T19208] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.379857][T19208] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 411.380736][T19208] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 411.423725][T19208] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 411.434076][T19208] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 411.448011][T19208] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 411.451236][T19208] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 411.544656][T19208] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 411.586145][T19510] __nla_validate_parse: 6 callbacks suppressed [ 411.586173][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3357'. [ 411.586248][T19510] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3357'. [ 411.733442][T19508] ip6t_srh: unknown srh match flags 4000 [ 411.948470][T19528] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3360'. [ 412.109301][T19208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.153244][T19208] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.171488][ T189] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.171656][ T189] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.192262][ T189] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.192440][ T189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.362670][T19541] netlink: 10 bytes leftover after parsing attributes in process `syz.3.3362'. [ 412.743364][T19548] netlink: 75 bytes leftover after parsing attributes in process `syz.4.3364'. [ 412.995362][ T4934] Bluetooth: hci4: command 0x0405 tx timeout [ 413.076772][T19560] netlink: 'syz.4.3366': attribute type 12 has an invalid length. [ 413.076828][T19560] netlink: 'syz.4.3366': attribute type 29 has an invalid length. [ 413.076841][T19560] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3366'. [ 413.076921][T19560] netlink: 'syz.4.3366': attribute type 1 has an invalid length. [ 413.076934][T19560] netlink: 'syz.4.3366': attribute type 2 has an invalid length. [ 413.076962][T19560] netlink: 11 bytes leftover after parsing attributes in process `syz.4.3366'. [ 413.492458][T19575] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3370'. [ 413.492490][T19575] netlink: 'syz.4.3370': attribute type 8 has an invalid length. [ 413.579062][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 413.579100][T19579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3371'. [ 414.071830][T19596] veth3: entered promiscuous mode [ 414.178955][T19597] veth3: entered promiscuous mode [ 414.388481][T19208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.548887][ T6774] bond7: left allmulticast mode [ 414.576673][ T6774] bond7: left promiscuous mode [ 414.577268][ T6774] bridge0: port 2(bond7) entered disabled state [ 414.795429][ T6774] pimreg: left allmulticast mode [ 415.198586][ T6774] bond4 (unregistering): (slave ip6erspan0): Releasing active interface [ 415.378569][ T6774] bond6 (unregistering): (slave gretap2): Releasing active interface [ 415.512471][ T6774] team0: Port device bridge2 removed [ 415.527244][ T6774] team0: Port device bridge3 removed [ 415.558050][ T6774] bond3 (unregistering): (slave bridge5): Releasing active interface [ 415.654713][ T6774] bond0 (unregistering): (slave bond5): Releasing backup interface [ 415.667014][ T6774] bond0 (unregistering): (slave team0): Releasing backup interface [ 415.669275][ T6774] bond0 (unregistering): Released all slaves [ 415.691250][ T6774] bond1 (unregistering): Released all slaves [ 415.710160][ T6774] bond2 (unregistering): Released all slaves [ 415.729909][ T6774] bond3 (unregistering): Released all slaves [ 415.749565][ T6774] bond4 (unregistering): Released all slaves [ 415.784772][ T6774] bond5 (unregistering): Released all slaves [ 415.806403][ T6774] bond6 (unregistering): Released all slaves [ 415.835183][ T6774] bond7 (unregistering): Released all slaves [ 415.855189][T19613] veth1_vlan: left promiscuous mode [ 416.021192][ T6774] tipc: Left network mode [ 416.224390][T19208] veth0_vlan: entered promiscuous mode [ 416.250107][T19208] veth1_vlan: entered promiscuous mode [ 416.718548][T19650] __nla_validate_parse: 2 callbacks suppressed [ 416.718569][T19650] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3390'. [ 416.767707][T19208] veth0_macvtap: entered promiscuous mode [ 416.780049][T19654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3391'. [ 416.780087][T19654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3391'. [ 416.872752][T19208] veth1_macvtap: entered promiscuous mode [ 417.263499][T19208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 417.289782][T19208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 417.483143][T19682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3396'. [ 417.582211][T19669] batman_adv: batadv0: Adding interface: veth0 [ 417.582228][T19669] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 417.582255][T19669] batman_adv: batadv0: Interface activated: veth0 [ 417.709221][T19682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.709281][T19682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.737929][T19682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.737970][T19682] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.766233][T19682] batman_adv: batadv0: Interface deactivated: veth0 [ 417.766274][T19682] batman_adv: batadv0: Removing interface: veth0 [ 418.508424][ T189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.700712][ T6776] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.702515][ T6776] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.702610][ T6776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.165110][ T6773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.165132][ T6773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.204565][T19704] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3400'. [ 419.504085][ T6776] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.504106][ T6776] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.527167][T19729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3408'. [ 419.986870][T19702] hsr0 speed is unknown, defaulting to 1000 [ 420.042337][T19744] openvswitch: netlink: IPv4 tun info is not correct [ 420.116573][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 420.687950][T19760] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3415'. [ 420.724096][T19760] tipc: Started in network mode [ 420.724135][T19760] tipc: Node identity 4, cluster identity 11 [ 420.724164][T19760] tipc: Node number set to 4 [ 420.884709][T19760] tipc: Cannot configure node identity twice [ 420.907810][T19766] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3416'. [ 420.907831][T19766] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3416'. [ 421.077457][T19775] netlink: 'syz.0.3418': attribute type 1 has an invalid length. [ 421.149145][T19777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3418'. [ 421.807834][T19807] netlink: 'syz.1.3422': attribute type 10 has an invalid length. [ 421.833536][ T6774] hsr_slave_0: left promiscuous mode [ 421.884088][T19812] netlink: 'syz.1.3422': attribute type 10 has an invalid length. [ 421.884540][ T6774] veth1_macvtap: left promiscuous mode [ 421.884595][ T6774] veth0_macvtap: left promiscuous mode [ 421.897067][ T6774] veth1_vlan: left promiscuous mode [ 421.897140][ T6774] veth0_vlan: left promiscuous mode [ 422.222621][ T6776] smc: removing ib device syz2 [ 422.489403][ T6771] smbdirect: ib_dev[syz0] removed [ 422.899103][ T1220] infiniband syz0: ib_query_port failed (-19) [ 422.917063][ T5732] infiniband syz2: ib_query_port failed (-19) [ 422.990264][T19825] Bluetooth: MGMT ver 1.23 [ 423.326191][ T6776] smbdirect: ib_dev[syz2] removed [ 423.354241][T19830] openvswitch: netlink: IP tunnel dst address not specified [ 423.407282][T19834] __nla_validate_parse: 1 callbacks suppressed [ 423.407301][T19834] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3427'. [ 423.901369][T19854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3432'. [ 424.595664][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 424.689921][T19880] tipc: Enabling of bearer rejected, already enabled [ 424.898355][T19889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3442'. [ 424.980073][T19892] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 425.580168][T19908] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3447'. [ 425.818895][T19914] ªªªªªª: renamed from virt_wifi0 [ 425.982851][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3448'. [ 427.114652][T19956] netlink: 7 bytes leftover after parsing attributes in process `syz.2.3463'. [ 427.170062][T19945] syzkaller0: entered promiscuous mode [ 427.170084][T19945] syzkaller0: entered allmulticast mode [ 427.495685][ T189] IPVS: starting estimator thread 0... [ 427.496848][T19967] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3467'. [ 427.646444][T19969] IPVS: using max 42 ests per chain, 100800 per kthread [ 427.768713][T19967] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3467'. [ 427.768739][T19967] block nbd1: Unsupported socket: should be TCP or UNIX. [ 428.079105][T19979] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3470'. [ 428.972292][T20011] netlink: 'syz.1.3475': attribute type 10 has an invalid length. [ 429.261159][T20013] 8021q: adding VLAN 0 to HW filter on device bond2 [ 430.383335][T20057] 8021q: VLANs not supported on ip6tnl0 [ 430.650054][T20079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3495'. [ 430.650075][T20079] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3495'. [ 431.159606][T20090] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 431.323036][ T6774] IPVS: stop unused estimator thread 0... [ 431.927861][T20117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3502'. [ 431.973448][T20117] netlink: 'syz.0.3502': attribute type 1 has an invalid length. [ 431.973468][T20117] nbd: error processing sock list [ 432.012586][T20108] veth0: entered promiscuous mode [ 432.027182][T20123] ip_tables: iptables: counters copy to user failed while replacing table [ 432.318230][ T6774] vlan2: left allmulticast mode [ 432.318266][ T6774] geneve0: left allmulticast mode [ 432.332491][ T6774] bridge0: port 3(vlan2) entered disabled state [ 432.438595][T20137] netlink: 'syz.4.3506': attribute type 3 has an invalid length. [ 432.541376][ T6774] pimreg: left allmulticast mode [ 432.541481][ T6774] dvmrp8: left allmulticast mode [ 433.121375][ T6774] bond7 (unregistering): (slave ip6gretap1): Releasing active interface [ 433.226228][ T6774] team0: Port device xfrm0 removed [ 433.448048][ T6774] bond1 (unregistering): (slave bridge2): Releasing active interface [ 433.467168][ T6774] bond4 (unregistering): (slave bridge3): Releasing active interface [ 433.534144][ T6774] bond0 (unregistering): Released all slaves [ 433.547849][ T6774] bond1 (unregistering): Released all slaves [ 433.571053][ T6774] bond2 (unregistering): Released all slaves [ 433.601845][ T6774] bond3 (unregistering): Released all slaves [ 433.623367][ T6774] bond4 (unregistering): Released all slaves [ 433.644529][ T6774] bond5 (unregistering): Released all slaves [ 433.678778][ T6774] bond6 (unregistering): Released all slaves [ 433.701391][ T6774] bond7 (unregistering): Released all slaves [ 433.729204][ T6774] bond8 (unregistering): Released all slaves [ 433.754789][T20107] veth0: left promiscuous mode [ 433.769644][T20132] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 433.892290][ T6776] IPVS: starting estimator thread 0... [ 433.990231][T20162] IPVS: using max 26 ests per chain, 62400 per kthread [ 434.128773][ T6774] : left promiscuous mode [ 434.268782][T20169] Cannot find set identified by id 0 to match [ 434.287221][T20169] IPv6: Can't replace route, no match found [ 434.508094][ T6774] tipc: Disabling bearer [ 434.508254][ T6774] tipc: Left network mode [ 434.861526][T20191] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.898684][ T6774] IPVS: stopping backup sync thread 9971 ... [ 435.290463][T20210] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3523'. [ 435.571879][T20218] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3524'. [ 439.575095][T20267] netlink: 84 bytes leftover after parsing attributes in process `syz.0.3538'. [ 439.657739][T20254] netlink: 'syz.0.3538': attribute type 1 has an invalid length. [ 439.778131][T20271] sock: sock_timestamping_bind_phc: sock not bind to device [ 439.794676][T20273] xt_TCPMSS: Only works on TCP SYN packets [ 439.969550][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.447538][T20286] team0: Device xfrm0 is of different type [ 440.491010][T20294] tipc: Enabled bearer , priority 0 [ 440.851340][T20258] netlink: 'syz.1.3536': attribute type 10 has an invalid length. [ 440.851560][T20258] bond0: (slave virt_wifi0): The slave device specified does not support setting the MAC address [ 440.851744][T20258] bond0: (slave virt_wifi0): Error -95 calling set_mac_address [ 441.100938][ T6774] hsr_slave_0: left promiscuous mode [ 441.117158][ T6774] hsr_slave_1: left promiscuous mode [ 441.173532][ T6774] veth1_macvtap: left promiscuous mode [ 441.173649][ T6774] veth0_macvtap: left promiscuous mode [ 441.179545][ T6774] veth1_vlan: left promiscuous mode [ 441.179580][ T6774] v: left promiscuous mode [ 441.457536][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'. [ 441.476087][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3552'. [ 441.476111][T20326] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3552'. [ 443.209308][T20373] netlink: 'syz.2.3557': attribute type 4 has an invalid length. [ 443.542961][T20383] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 443.624595][T20393] xt_esp: unknown flags DD [ 443.702846][ T6774] IPVS: stop unused estimator thread 0... [ 444.182187][T20415] x_tables: duplicate underflow at hook 4 [ 444.354458][T20425] openvswitch: netlink: Message has 5 unknown bytes. [ 444.399863][T20402] syzkaller0: entered promiscuous mode [ 444.399887][T20402] syzkaller0: entered allmulticast mode [ 444.647296][T20437] xt_MASQUERADE: bad rangesize 2147483646 [ 445.265790][T20460] sctp: [Deprecated]: syz.2.3571 (pid 20460) Use of struct sctp_assoc_value in delayed_ack socket option. [ 445.265790][T20460] Use struct sctp_sack_info instead [ 445.546703][T20470] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3574'. [ 445.557963][T20471] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3574'. [ 448.551771][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 448.551793][T20479] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3575'. [ 448.551829][T20479] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3575'. [ 448.651848][T20438] macsec0: entered promiscuous mode [ 448.959357][T20512] Unknown options in mask 4 [ 449.002106][T20519] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 449.253586][T20536] netlink: zone id is out of range [ 449.253620][T20536] netlink: zone id is out of range [ 449.253911][T20536] netlink: zone id is out of range [ 450.427453][T20597] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3593'. [ 450.429077][T20597] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3593'. [ 450.632785][T20574] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3590'. [ 450.633350][T20588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3592'. [ 450.682780][T20581] xt_IDLETIMER: label is empty or not nul-terminated [ 450.749607][T20588] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.981907][T20605] netlink: 216 bytes leftover after parsing attributes in process `syz.3.3594'. [ 451.059617][T20607] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.663217][T20638] xt_hashlimit: size too large, truncated to 1048576 [ 452.072968][T20651] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3602'. [ 452.249992][T20657] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3603'. [ 453.071114][T20653] Bluetooth: hci5: Opcode 0x0c20 failed: -4 [ 453.192800][T20691] netlink: 'syz.2.3610': attribute type 1 has an invalid length. [ 453.334760][T20691] bond2: entered promiscuous mode [ 453.346222][T20691] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.434062][T20696] 8021q: adding VLAN 0 to HW filter on device bond2 [ 453.434449][T20696] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 453.434469][T20696] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 453.445126][T20658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3605'. [ 453.483799][T20696] bond2: (slave ip6gre1): making interface the new active one [ 453.483843][T20696] ip6gre1: entered promiscuous mode [ 453.502066][T20696] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 454.195214][ T5629] Bluetooth: hci5: command 0x0c20 tx timeout [ 454.585657][T20729] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3613'. [ 454.723905][T20736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3620'. [ 454.790658][T20736] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3620'. [ 454.802722][T20744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3621'. [ 454.954088][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 454.954333][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 454.954569][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 454.954793][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 454.955089][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 454.955295][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 454.955509][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 454.955711][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 454.955915][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 454.956139][T20744] ICMPv6: RA: ndisc_router_discovery failed to add default route [ 455.630637][T20774] 8021q: adding VLAN 0 to HW filter on device bond3 [ 456.093227][T20801] __nla_validate_parse: 4 callbacks suppressed [ 456.093264][T20801] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3633'. [ 456.263926][T20806] x_tables: duplicate underflow at hook 3 [ 456.734481][T20827] syzkaller0: entered promiscuous mode [ 456.734504][T20827] syzkaller0: entered allmulticast mode [ 457.117585][T20848] veth0: entered promiscuous mode [ 457.124372][T20847] veth0: left promiscuous mode [ 457.525396][T20865] netlink: 'syz.4.3653': attribute type 1 has an invalid length. [ 457.678331][T20865] 8021q: adding VLAN 0 to HW filter on device bond3 [ 457.679443][T20869] ªªªªª»: renamed from bond_slave_0 (while UP) [ 458.003955][T20884] bond3: (slave geneve2): making interface the new active one [ 458.014477][T20884] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 458.161629][T20903] vlan0: entered allmulticast mode [ 458.161653][T20903] veth0_vlan: entered allmulticast mode [ 458.292338][T20909] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3658'. [ 458.293121][T20909] netlink: 'syz.3.3658': attribute type 21 has an invalid length. [ 458.293143][T20909] IPv6: NLM_F_CREATE should be specified when creating new route [ 458.451472][T20911] gretap1: entered promiscuous mode [ 460.459585][T20872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 460.751230][T20927] x_tables: unsorted underflow at hook 1 [ 460.783948][T20920] hsr0 speed is unknown, defaulting to 1000 [ 460.887268][T20928] netlink: 'syz.4.3662': attribute type 21 has an invalid length. [ 460.887324][T20928] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3662'. [ 460.930681][T20927] netlink: 'syz.4.3662': attribute type 21 has an invalid length. [ 460.930719][T20927] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3662'. [ 460.930875][T20927] netlink: 'syz.4.3662': attribute type 4 has an invalid length. [ 460.930888][T20927] netlink: 'syz.4.3662': attribute type 5 has an invalid length. [ 460.930917][T20927] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3662'. [ 460.933993][T20936] x_tables: unsorted underflow at hook 1 [ 460.986174][T20939] netlink: 'syz.4.3662': attribute type 21 has an invalid length. [ 460.986194][T20939] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3662'. [ 460.986330][T20938] netlink: 'syz.4.3662': attribute type 21 has an invalid length. [ 460.986344][T20938] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3662'. [ 461.003044][T20934] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3667'. [ 461.031296][T20928] netlink: 'syz.4.3662': attribute type 4 has an invalid length. [ 461.031344][T20928] netlink: 'syz.4.3662': attribute type 5 has an invalid length. [ 461.031355][T20928] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3662'. [ 461.211785][T20939] netlink: 'syz.4.3662': attribute type 4 has an invalid length. [ 461.211838][T20939] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3662'. [ 461.212030][T20938] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3662'. [ 461.292142][T20945] net_ratelimit: 44 callbacks suppressed [ 461.292162][T20945] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303 [ 461.499019][T20946] batman_adv: batadv0: Adding interface: gretap2 [ 461.499036][T20946] batman_adv: batadv0: The MTU of interface gretap2 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 461.499065][T20946] batman_adv: batadv0: Interface activated: gretap2 [ 461.706927][T20954] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3670'. [ 461.706956][T20954] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3670'. [ 463.168936][T20997] openvswitch: netlink: Multiple metadata blocks provided [ 463.355598][T20999] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3677'. [ 463.432728][T21003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3679'. [ 463.649549][T21011] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3682'. [ 463.681775][T21015] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3684'. [ 463.708218][T21015] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3684'. [ 463.708946][T21015] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3684'. [ 463.873187][T21024] tipc: Enabling of bearer rejected, failed to enable media [ 464.193171][T21041] gretap0: entered promiscuous mode [ 464.202617][T21041] 0ªî{X¹¦: renamed from gretap0 [ 464.207124][T21041] 0ªî{X¹¦: left promiscuous mode [ 464.207142][T21041] 0ªî{X¹¦: entered allmulticast mode [ 464.209041][T21041] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 466.791628][T21017] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 466.797101][T21060] __nla_validate_parse: 4 callbacks suppressed [ 466.797119][T21060] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3695'. [ 467.133050][T21077] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3699'. [ 467.133330][T21077] validate_nla: 3 callbacks suppressed [ 467.133342][T21077] netlink: 'syz.2.3699': attribute type 1 has an invalid length. [ 467.200290][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3699'. [ 467.200321][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3699'. [ 467.256799][T21085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3699'. [ 467.283141][T21077] 8021q: adding VLAN 0 to HW filter on device bond4 [ 467.325748][T21080] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3699'. [ 467.326084][T21087] netlink: 'syz.2.3699': attribute type 1 has an invalid length. [ 467.326804][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3699'. [ 467.326849][T21085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3699'. [ 467.335041][T21077] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3699'. [ 467.630663][T21098] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3703'. [ 467.648454][ T5626] Bluetooth: hci5: command 0x0c20 tx timeout [ 467.746173][T21101] bond0: option miimon: invalid value (18446744071829782528) [ 467.746216][T21101] bond0: option miimon: allowed values 0 - 2147483647 [ 467.799797][T21101] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 467.920479][T21107] tipc: New replicast peer: 255.255.255.255 [ 467.921142][T21107] tipc: Enabled bearer , priority 10 [ 468.780163][T21127] bond3: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 468.808477][T21127] bond3 (unregistering): Released all slaves [ 469.009524][T21133] ip_tables: iptables: counters copy to user failed while replacing table [ 469.037277][T21133] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 469.337128][T21156] 0: reclassify loop, rule prio 0, protocol 03 [ 469.691524][T21172] netlink: 'syz.1.3722': attribute type 1 has an invalid length. [ 469.913701][T21172] 8021q: adding VLAN 0 to HW filter on device bond1 [ 470.411694][T21190] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 471.098760][ T5629] Bluetooth: hci3: unexpected event 0x10 length: 87 > 1 [ 471.100896][ T5629] Bluetooth: hci3: hardware error 0x66 [ 471.385831][T21220] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 471.943051][T21248] __nla_validate_parse: 16 callbacks suppressed [ 471.943072][T21248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3743'. [ 472.184012][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3744'. [ 472.250707][T21254] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 472.318300][T21262] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3745'. [ 472.422348][T21266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3746'. [ 472.422386][T21266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3746'. [ 472.494206][T21271] netlink: 'syz.0.3748': attribute type 32 has an invalid length. [ 472.494243][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3748'. [ 472.636136][T21271] bond1: option coupled_control: invalid value (192) [ 472.643508][T21271] bond1 (unregistering): Released all slaves [ 472.695445][T21284] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3749'. [ 472.798611][T21275] macvlan0: entered promiscuous mode [ 472.830699][T21288] syzkaller1: entered promiscuous mode [ 472.830723][T21288] syzkaller1: entered allmulticast mode [ 472.841430][T21275] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3749'. [ 472.900953][T21287] netlink: 'syz.4.3751': attribute type 27 has an invalid length. [ 473.107935][T21300] tipc: Enabling of bearer rejected, failed to enable media [ 473.141452][T21297] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3753'. [ 473.141481][T21297] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3753'. [ 473.238487][ T5629] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 473.388265][T21305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.559163][T21318] netlink: 'syz.4.3760': attribute type 39 has an invalid length. [ 473.632384][T21321] netlink: 'syz.3.3761': attribute type 1 has an invalid length. [ 473.634560][T21321] netlink: 'syz.3.3761': attribute type 1 has an invalid length. [ 474.038907][T21330] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 474.052262][T21330] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 474.185126][T21335] syzkaller1: entered promiscuous mode [ 474.185147][T21335] syzkaller1: entered allmulticast mode [ 474.248581][T21332] can: request_module (can-proto-0) failed. [ 474.702342][T21361] IPVS: set_ctl: invalid protocol: 59 172.20.20.170:20004 [ 474.720171][T21366] netlink: 'syz.2.3773': attribute type 4 has an invalid length. [ 474.909067][T21363] netlink: 'syz.1.3772': attribute type 29 has an invalid length. [ 476.279552][T21413] ip6gre1: entered promiscuous mode [ 476.349094][T21417] ip6t_hbh: too many supported opts specified [ 476.524320][T21429] netlink: 'syz.3.3791': attribute type 2 has an invalid length. [ 476.552096][T21429] : entered promiscuous mode [ 476.681944][T21435] netlink: 'syz.4.3793': attribute type 3 has an invalid length. [ 476.683111][T21435] netlink: 'syz.4.3793': attribute type 1 has an invalid length. [ 476.994487][T21447] __nla_validate_parse: 18 callbacks suppressed [ 476.994509][T21447] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3795'. [ 476.994523][T21447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3795'. [ 477.051300][ T6773] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 477.053957][ T61] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 477.054046][ T61] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 477.054111][ T61] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 477.192599][T21452] Cannot find map_set index 135 as target [ 477.426304][T21467] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3802'. [ 477.427062][T21467] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.427362][T21467] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.627674][T21468] validate_nla: 3 callbacks suppressed [ 477.627710][T21468] netlink: 'syz.3.3800': attribute type 21 has an invalid length. [ 477.630119][T21469] batman_adv: batadv0: Adding interface: veth0 [ 477.630134][T21469] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.630191][T21469] batman_adv: batadv0: Interface activated: veth0 [ 477.649989][T21472] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3802'. [ 478.050397][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3805'. [ 478.790109][T21517] bridge0: port 3(veth1_to_bridge) entered blocking state [ 478.791116][T21517] bridge0: port 3(veth1_to_bridge) entered disabled state [ 478.791309][T21517] veth1_to_bridge: entered allmulticast mode [ 478.833073][T21517] veth1_to_bridge: entered promiscuous mode [ 478.833375][T21517] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 478.834318][T21517] bridge0: port 3(veth1_to_bridge) entered blocking state [ 478.834487][T21517] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 479.044782][T21522] IPv6: sit2: Disabled Multicast RS [ 479.195257][T21534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3820'. [ 479.310780][T21538] ip6_vti0: entered promiscuous mode [ 479.348136][T21538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3820'. [ 479.640700][T21553] netlink: 'syz.2.3826': attribute type 21 has an invalid length. [ 479.640725][T21553] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3826'. [ 479.664210][T21553] netlink: 'syz.2.3826': attribute type 4 has an invalid length. [ 479.664232][T21553] netlink: 'syz.2.3826': attribute type 5 has an invalid length. [ 479.664244][T21553] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3826'. [ 479.697590][T21553] netlink: 'syz.2.3826': attribute type 21 has an invalid length. [ 479.697613][T21553] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3826'. [ 479.697668][T21553] netlink: 'syz.2.3826': attribute type 4 has an invalid length. [ 479.697681][T21553] netlink: 'syz.2.3826': attribute type 5 has an invalid length. [ 479.846057][T21562] netlink: 'syz.0.3829': attribute type 3 has an invalid length. [ 479.846606][T21562] netlink: 'syz.0.3829': attribute type 2 has an invalid length. [ 482.036252][T21641] __nla_validate_parse: 37 callbacks suppressed [ 482.036289][T21641] netlink: 268 bytes leftover after parsing attributes in process `syz.1.3852'. [ 482.626776][T21662] netlink: 2 bytes leftover after parsing attributes in process `syz.3.3857'. [ 482.701122][T21662] lo: entered allmulticast mode [ 482.791805][T21663] syzkaller0: entered promiscuous mode [ 482.791851][T21663] syzkaller0: entered allmulticast mode [ 483.442625][T21660] lo: left allmulticast mode [ 485.423025][T21650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 486.309830][T21716] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3872'. [ 486.814190][T21737] netlink: 'syz.3.3876': attribute type 21 has an invalid length. [ 486.814215][T21737] IPv6: NLM_F_CREATE should be specified when creating new route [ 486.814308][T21737] netlink: 'syz.3.3876': attribute type 1 has an invalid length. [ 487.200021][T21751] xt_hashlimit: size too large, truncated to 1048576 [ 487.223352][T21755] netlink: zone id is out of range [ 487.223383][T21755] netlink: del zone limit has 4 unknown bytes [ 487.282991][T21756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3879'. [ 487.948294][T21792] netlink: 'syz.1.3889': attribute type 32 has an invalid length. [ 488.052837][T21798] gtp1: entered promiscuous mode [ 488.052859][T21798] gtp1: entered allmulticast mode [ 488.063528][T21796] netlink: 'syz.2.3890': attribute type 3 has an invalid length. [ 488.063548][T21796] netlink: 634 bytes leftover after parsing attributes in process `syz.2.3890'. [ 488.118199][ T5626] Bluetooth: hci1: command 0x0406 tx timeout [ 488.336569][T21810] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3893'. [ 488.336593][T21810] nbd: illegal input index -8454144 [ 488.441944][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3895'. [ 488.538175][T21816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3895'. [ 488.565075][ T3366] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.565169][ T3366] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.565218][ T3366] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.565280][ T3366] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 488.722570][T21818] netlink: 228 bytes leftover after parsing attributes in process `syz.2.3896'. [ 488.821355][T21824] syzkaller0: entered promiscuous mode [ 488.821378][T21824] syzkaller0: entered allmulticast mode [ 489.159248][T21837] sctp: [Deprecated]: syz.3.3901 (pid 21837) Use of int in maxseg socket option. [ 489.159248][T21837] Use struct sctp_assoc_value instead [ 489.163239][T21837] sctp: [Deprecated]: syz.3.3901 (pid 21837) Use of int in maxseg socket option. [ 489.163239][T21837] Use struct sctp_assoc_value instead [ 489.293565][T21845] ip_tables: iptables: counters copy to user failed while replacing table [ 489.341315][T21841] netlink: 'syz.0.3903': attribute type 3 has an invalid length. [ 489.554228][T21858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3907'. [ 489.760742][T21872] CÏß^-: renamed from virt_wifi0 [ 489.801186][T21869] batman_adv: batadv0: Adding interface: syzkaller0 [ 489.801219][T21869] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.801282][T21869] batman_adv: batadv0: Interface activated: syzkaller0 [ 489.930128][T21868] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 490.011923][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 490.038800][T21868] batman_adv: batadv0: Removing interface: syzkaller0 [ 490.040923][T21881] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.3915'. [ 490.067955][T21881] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 490.072291][T21879] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3914'. [ 490.491128][T21897] netlink: 'syz.2.3920': attribute type 10 has an invalid length. [ 490.498480][T21898] openvswitch: netlink: Message has 512 unknown bytes. [ 490.547166][T21897] team0: Port device dummy0 added [ 491.000773][T21907] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 491.082624][T21907] bond5: option lp_interval: invalid value (18446744071562067969) [ 491.082648][T21907] bond5: option lp_interval: allowed values 1 - 2147483647 [ 491.109008][T21907] bond5 (unregistering): Released all slaves [ 491.157425][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 491.517338][T21919] IPVS: set_ctl: invalid protocol: 115 172.30.1.4:20002 [ 491.670592][T21928] netlink: 'syz.3.3931': attribute type 29 has an invalid length. [ 491.674764][T21928] netlink: 'syz.3.3931': attribute type 29 has an invalid length. [ 491.790438][T21932] gtp0: entered promiscuous mode [ 491.790462][T21932] gtp0: entered allmulticast mode [ 492.063785][T21946] netlink: 'syz.4.3937': attribute type 1 has an invalid length. [ 492.103382][T21948] netlink: 'syz.3.3934': attribute type 18 has an invalid length. [ 492.306152][T21958] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 492.738777][T21970] openvswitch: netlink: IPv6 tunnel dst address is zero [ 492.740976][T21971] __nla_validate_parse: 9 callbacks suppressed [ 492.740994][T21971] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3942'. [ 493.219208][T21983] netlink: 252 bytes leftover after parsing attributes in process `syz.1.3948'. [ 493.237674][T21983] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3948'. [ 493.238378][T21983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3948'. [ 493.242523][T21983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3948'. [ 493.380637][T21992] netlink: 'syz.4.3949': attribute type 1 has an invalid length. [ 493.380652][T21992] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3949'. [ 493.456515][T22000] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3952'. [ 493.515938][ T6772] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 493.516852][ T6772] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 493.516889][ T6772] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 493.516920][ T6772] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 493.520641][T21991] netlink: 'syz.0.3950': attribute type 1 has an invalid length. [ 493.568285][T21991] netlink: 'syz.0.3950': attribute type 1 has an invalid length. [ 494.084083][T22018] netlink: 'syz.0.3960': attribute type 6 has an invalid length. [ 494.084103][T22018] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3960'. [ 494.392388][T22031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3963'. [ 494.523577][T22036] syzkaller1: entered promiscuous mode [ 494.523600][T22036] syzkaller1: entered allmulticast mode [ 494.650724][T22043] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3967'. [ 495.143656][T22061] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.144085][T22061] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.144504][T22061] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.152508][T22061] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.152925][T22061] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.153297][T22061] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.153675][T22061] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.154065][T22061] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.154428][T22061] openvswitch: netlink: Flow actions attr not present in new flow. [ 495.170128][T22061] sctp: [Deprecated]: syz.2.3969 (pid 22061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 495.170128][T22061] Use struct sctp_sack_info instead [ 495.573509][T22060] bridge0: port 1(bridge_slave_0) entered forwarding state [ 495.905332][T22097] sctp: [Deprecated]: syz.0.3977 (pid 22097) Use of int in maxseg socket option. [ 495.905332][T22097] Use struct sctp_assoc_value instead [ 496.142121][T22109] bond2: option min_links: invalid value (18446744073709551614) [ 496.142148][T22109] bond2: option min_links: allowed values 0 - 2147483647 [ 496.169252][T22109] bond2 (unregistering): Released all slaves [ 496.292790][T22117] netlink: 'syz.3.3980': attribute type 24 has an invalid length. [ 496.563772][T22126] netlink: 'syz.4.3982': attribute type 4 has an invalid length. [ 496.589103][T22126] syzkaller1: entered promiscuous mode [ 496.589125][T22126] syzkaller1: entered allmulticast mode [ 496.592983][T22126] netlink: 'syz.4.3982': attribute type 24 has an invalid length. [ 496.630684][T22126] Cannot find add_set index 65532 as target [ 497.744902][ C0] net_ratelimit: 2320 callbacks suppressed [ 497.744923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.745324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.745686][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.746091][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.746534][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.746915][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.747308][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.747679][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.748102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.748520][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 499.118406][T22154] __nla_validate_parse: 72 callbacks suppressed [ 499.118460][T22154] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3991'. [ 500.849891][T22184] syz.3.3997: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 500.850063][T22184] CPU: 1 UID: 0 PID: 22184 Comm: syz.3.3997 Not tainted syzkaller #0 PREEMPT(full) [ 500.850084][T22184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 500.850099][T22184] Call Trace: [ 500.850111][T22184] [ 500.850119][T22184] dump_stack_lvl+0xe8/0x150 [ 500.850207][T22184] warn_alloc+0x24d/0x270 [ 500.850253][T22184] ? kasan_save_track+0x4f/0x80 [ 500.850271][T22184] ? kasan_save_track+0x3e/0x80 [ 500.850292][T22184] ? __pfx_warn_alloc+0x10/0x10 [ 500.850307][T22184] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 500.850464][T22184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.850522][T22184] __vmalloc_node_range_noprof+0x127/0x1540 [ 500.850575][T22184] ? rcu_is_watching+0x16/0xb0 [ 500.850623][T22184] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 500.850649][T22184] ? __kmalloc_cache_noprof+0x321/0x600 [ 500.850669][T22184] ? __kmalloc_cache_noprof+0x14d/0x600 [ 500.850686][T22184] ? xskq_create+0x56/0x220 [ 500.850781][T22184] xskq_create+0x148/0x220 [ 500.850801][T22184] ? xsk_init_queue+0x8a/0xe0 [ 500.850822][T22184] xsk_init_queue+0x8a/0xe0 [ 500.850844][T22184] xsk_setsockopt+0x52a/0x960 [ 500.850865][T22184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 500.850884][T22184] ? __pfx_aa_sk_perm+0x10/0x10 [ 500.850980][T22184] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 500.851022][T22184] ? __pfx_xsk_setsockopt+0x10/0x10 [ 500.851043][T22184] do_sock_setsockopt+0x17c/0x1b0 [ 500.851079][T22184] __x64_sys_setsockopt+0x13d/0x1b0 [ 500.851109][T22184] do_syscall_64+0x166/0x520 [ 500.851190][T22184] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.851210][T22184] ? clear_bhb_loop+0x70/0xc0 [ 500.851232][T22184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.851250][T22184] RIP: 0033:0x7f61b999e159 [ 500.851269][T22184] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 500.851284][T22184] RSP: 002b:00007f61ba7e8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 500.851304][T22184] RAX: ffffffffffffffda RBX: 00007f61b9c25fa0 RCX: 00007f61b999e159 [ 500.851318][T22184] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 500.851329][T22184] RBP: 00007f61b9a3506b R08: 0000000000000004 R09: 0000000000000000 [ 500.851340][T22184] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 500.851352][T22184] R13: 00007f61b9c26038 R14: 00007f61b9c25fa0 R15: 00007fff701431d8 [ 500.851383][T22184] [ 501.182296][T22184] Mem-Info: [ 501.182328][T22184] active_anon:6198 inactive_anon:0 isolated_anon:0 [ 501.182328][T22184] active_file:10 inactive_file:42851 isolated_file:0 [ 501.182328][T22184] unevictable:0 dirty:38 writeback:0 [ 501.182328][T22184] slab_reclaimable:11973 slab_unreclaimable:113927 [ 501.182328][T22184] mapped:29369 shmem:532 pagetables:1281 [ 501.182328][T22184] sec_pagetables:0 bounce:0 [ 501.182328][T22184] kernel_misc_reclaimable:0 [ 501.182328][T22184] free:1309110 free_pcp:8698 free_cma:0 [ 501.182419][T22184] Node 0 active_anon:24792kB inactive_anon:0kB active_file:40kB inactive_file:171208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117476kB dirty:152kB writeback:0kB shmem:2128kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14552kB pagetables:4984kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 501.182490][T22184] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 501.182560][T22184] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.182659][T22184] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 501.182776][T22184] Node 0 DMA32 free:1282980kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24792kB inactive_anon:0kB active_file:40kB inactive_file:171208kB unevictable:0kB writepending:152kB zspages:0kB present:3129332kB managed:2546968kB mlocked:0kB bounce:0kB free_pcp:34792kB local_pcp:21480kB free_cma:0kB [ 501.182850][T22184] lowmem_reserve[]: 0 0 0 0 0 [ 501.182916][T22184] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.182986][T22184] lowmem_reserve[]: 0 0 0 0 0 [ 501.183053][T22184] Node 1 Normal free:3938100kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:196kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 501.183141][T22184] lowmem_reserve[]: 0 0 0 0 0 [ 501.183207][T22184] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 501.183432][T22184] Node 0 DMA32: 1125*4kB (UME) 481*8kB (UME) 77*16kB (ME) 106*32kB (UME) 49*64kB (UME) 35*128kB (UME) 33*256kB (UM) 21*512kB (UM) 4*1024kB (UME) 9*2048kB (UME) 298*4096kB (UM) = 1282924kB [ 501.183738][T22184] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 501.183967][T22184] Node 1 Normal: 3*4kB (UM) 5*8kB (UM) 10*16kB (UM) 7*32kB (UM) 10*64kB (UM) 6*128kB (UM) 6*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 1*2048kB (U) 959*4096kB (M) = 3938100kB [ 501.184265][T22184] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.184297][T22184] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 501.184350][T22184] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 501.184382][T22184] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 501.184413][T22184] 43389 total pagecache pages [ 501.184425][T22184] 0 pages in swap cache [ 501.184448][T22184] Free swap = 124996kB [ 501.184455][T22184] Total swap = 124996kB [ 501.184462][T22184] 2097051 pages RAM [ 501.184485][T22184] 0 pages HighMem/MovableOnly [ 501.184493][T22184] 428693 pages reserved [ 501.184515][T22184] 0 pages cma reserved [ 501.416133][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.277952][T22191] netlink: 596 bytes leftover after parsing attributes in process `syz.0.3999'. [ 502.430752][T22191] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3999'. [ 502.430797][T22191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3999'. [ 502.430829][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3999'. [ 502.499060][T22188] IPv6: sit1: Disabled Multicast RS [ 502.723709][T22195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4000'. [ 502.755002][ C0] net_ratelimit: 12541 callbacks suppressed [ 502.755025][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.755496][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.755999][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.756472][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.756945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.757445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.757936][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.758445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.758933][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.759412][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 503.242122][T22194] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4002'. [ 503.242210][T22194] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4002'. [ 503.861381][T22208] tipc: New replicast peer: 172.20.20.170 [ 504.508703][ T31] audit: type=1800 audit(1789962330.977:70): pid=22216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4008" name="memory.events" dev="tmpfs" ino=740 res=0 errno=0 [ 504.569696][ T31] audit: type=1804 audit(1789962331.047:71): pid=22218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.4008" name="/newroot/142/memory.events" dev="tmpfs" ino=740 res=1 errno=0 [ 504.630177][T22217] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 505.336382][T22236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4012'. [ 505.336421][T22236] netlink: 14 bytes leftover after parsing attributes in process `syz.4.4012'. [ 505.483714][T22240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4013'. [ 505.483752][T22240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4013'. [ 505.566889][T22241] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4013'. [ 505.566941][T22241] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4013'. [ 506.363883][T22249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4015'. [ 506.431557][T22237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4011'. [ 506.470978][T22249] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 506.484265][T22249] netlink: 152 bytes leftover after parsing attributes in process `syz.0.4015'. [ 506.564144][T22248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4014'. [ 507.765100][ C0] net_ratelimit: 12544 callbacks suppressed [ 507.765120][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.766117][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.766506][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.766915][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.767283][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.767695][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.768109][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.768473][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.768937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.769316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 508.685842][ T5626] Bluetooth: hci2: command 0x0406 tx timeout [ 509.759511][T22286] netlink: 'syz.2.4024': attribute type 11 has an invalid length. [ 509.936044][T22291] netlink: 'syz.2.4024': attribute type 21 has an invalid length. [ 510.119518][ T61] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.120954][ T61] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.121025][ T61] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 510.121091][ T61] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 511.444245][T22305] __nla_validate_parse: 4 callbacks suppressed [ 511.444291][T22305] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4028'. [ 511.457235][ T6773] IPVS: starting estimator thread 0... [ 511.487618][T22302] veth0_macvtap: left promiscuous mode [ 511.566191][T22311] IPVS: using max 28 ests per chain, 67200 per kthread [ 511.573180][T22308] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4027'. [ 511.668701][T22314] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4028'. [ 512.775179][ C0] net_ratelimit: 13215 callbacks suppressed [ 512.775200][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.775595][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.775994][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.776365][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.776758][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.777141][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.777505][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.777912][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.778287][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.778718][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 513.510315][T22314] team0 (unregistering): Port device team_slave_0 removed [ 513.588533][T22314] team0 (unregistering): Port device team_slave_1 removed [ 513.653026][T22314] team0 (unregistering): Port device dummy0 removed [ 515.644174][T22350] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4038'. [ 515.670153][T22353] ieee802154 phy1 wpan1: encryption failed: -22 [ 516.285858][T22358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4040'. [ 517.537242][T22374] netlink: 538 bytes leftover after parsing attributes in process `syz.0.4042'. [ 517.785092][ C0] net_ratelimit: 12848 callbacks suppressed [ 517.785115][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.785532][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.785979][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.786399][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.786807][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.787231][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.787659][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.788091][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.788518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.788940][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 518.371461][T22381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4047'. [ 519.884857][ C0] sched: DL replenish lagged too much [ 520.006617][T22403] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4051'. [ 521.543967][T22391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.291458][T22413] netlink: 'syz.4.4053': attribute type 9 has an invalid length. [ 522.730007][T22419] netlink: 'syz.0.4055': attribute type 8 has an invalid length. [ 522.795018][ C0] net_ratelimit: 15187 callbacks suppressed [ 522.795038][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.795289][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.795519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.795745][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 522.795986][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.796232][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.796464][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.796692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.796982][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 522.797218][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.049669][T22425] netlink: 'syz.0.4055': attribute type 8 has an invalid length. [ 523.706953][T22431] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 523.959331][T22431] xt_hashlimit: size too large, truncated to 1048576 [ 526.547037][T22467] netlink: 'syz.1.4070': attribute type 1 has an invalid length. [ 526.547076][T22467] netlink: 224 bytes leftover after parsing attributes in process `syz.1.4070'. [ 526.884462][T22469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4071'. [ 527.804917][ C0] net_ratelimit: 23567 callbacks suppressed [ 527.804940][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 527.805006][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.805178][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.805391][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.805413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 527.805628][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.805770][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.805894][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.806128][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.806357][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.814929][ C1] net_ratelimit: 33672 callbacks suppressed [ 532.814966][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.814989][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.815249][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.815393][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.815825][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.816211][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 532.816310][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.816451][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.816723][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 532.816806][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.824982][ C1] net_ratelimit: 27525 callbacks suppressed [ 537.825019][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.825022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.825265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.825438][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.825876][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.826144][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 537.826292][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.826362][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.826612][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 537.826715][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.835015][ C0] net_ratelimit: 26962 callbacks suppressed [ 542.835037][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.835096][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.835498][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.835914][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.835916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.836133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.836324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.836384][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 542.836608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.836739][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.844857][ C1] net_ratelimit: 26967 callbacks suppressed [ 547.844894][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.845288][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.845353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.845505][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.845740][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.845743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 547.846053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.846111][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.846284][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.846496][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.606420][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 552.855145][ C1] net_ratelimit: 27367 callbacks suppressed [ 552.855182][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.855518][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.855598][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.855735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.855997][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.856035][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 552.856258][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.856393][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.856488][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.856717][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.732313][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 557.864905][ C1] net_ratelimit: 26453 callbacks suppressed [ 557.864954][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.865359][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.865386][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 557.865628][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.865756][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.865891][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 557.866113][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.866238][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.866350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.866607][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.874946][ C1] net_ratelimit: 26620 callbacks suppressed [ 562.874982][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.875015][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.875267][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 562.875382][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.875516][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.875756][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.875800][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.876012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.876198][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.876613][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 563.063980][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 567.884948][ C0] net_ratelimit: 26768 callbacks suppressed [ 567.884970][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.885095][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.885234][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 567.885460][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.885499][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.885704][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.885914][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.885960][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.886384][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.886798][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.894892][ C0] net_ratelimit: 27273 callbacks suppressed [ 572.894914][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 572.894929][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.895160][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.895377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.895392][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 572.895608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.895814][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.895892][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.896149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.896309][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.904952][ C0] net_ratelimit: 25983 callbacks suppressed [ 577.904974][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 577.904980][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.905200][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.905397][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.905431][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.905662][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.905821][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.906221][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.906521][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 577.906646][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.914891][ C0] net_ratelimit: 25678 callbacks suppressed [ 582.914912][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.914990][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.915357][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.915784][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 582.915784][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.916026][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.916218][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.916266][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 582.916492][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.916577][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.925132][ C0] net_ratelimit: 25666 callbacks suppressed [ 587.925259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 587.925336][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.925567][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.925783][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.925807][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 587.926061][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.926391][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.926408][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.926671][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.926917][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.935012][ C1] net_ratelimit: 25747 callbacks suppressed [ 592.935061][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.935393][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 592.935472][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.935610][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.935859][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 592.935898][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.936075][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.936319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.936333][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.936562][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.944971][ C1] net_ratelimit: 24966 callbacks suppressed [ 597.945017][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.945458][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.945467][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 597.945729][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.945966][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.946020][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 597.946274][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.946456][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.946631][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.947304][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 602.954875][ C0] net_ratelimit: 26234 callbacks suppressed [ 602.954898][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.955116][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.955135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.955548][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.955969][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.955991][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 602.956206][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.956413][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.956433][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 602.956648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.965125][ C1] net_ratelimit: 26953 callbacks suppressed [ 607.965161][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.965161][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 607.965380][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.965615][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.965640][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 607.965874][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.966057][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.966106][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.966335][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.966530][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.172670][ T5626] Bluetooth: hci4: command 0x0405 tx timeout [ 612.974916][ C0] net_ratelimit: 24926 callbacks suppressed [ 612.974937][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.975056][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.975279][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.975555][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.975560][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.976577][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 612.976885][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.976886][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.977199][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 612.977372][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.984986][ C1] net_ratelimit: 24731 callbacks suppressed [ 617.985035][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.985506][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.985961][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.986134][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 617.986411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.986419][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.986710][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 617.986878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.987004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.987314][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.994987][ C0] net_ratelimit: 25466 callbacks suppressed [ 622.995009][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 622.995052][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.995252][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.995491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.995516][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.995772][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.995948][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.996397][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.996741][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 622.996858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 624.595172][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.005030][ C0] net_ratelimit: 25509 callbacks suppressed [ 628.005052][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.005181][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.005286][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.005535][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 628.005610][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.005794][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.006031][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.006057][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.006342][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.006457][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 629.405885][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 633.015206][ C1] net_ratelimit: 26232 callbacks suppressed [ 633.015255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.015262][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.015531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.015680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.015802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 633.016062][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.016108][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.016579][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.017003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.017023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.024911][ C0] net_ratelimit: 25994 callbacks suppressed [ 638.024934][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.024979][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.025214][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.025409][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.025843][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.026099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.026268][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.026356][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.026607][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 638.026690][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.035003][ C1] net_ratelimit: 25445 callbacks suppressed [ 643.035039][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.035588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.035641][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.035969][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.036052][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.036224][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 643.036464][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.036519][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.036725][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.036979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.045026][ C0] net_ratelimit: 26689 callbacks suppressed [ 648.045029][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.045048][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.045414][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.045614][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.045870][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.046203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.046242][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.046440][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.046629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.046692][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 653.055001][ C0] net_ratelimit: 26352 callbacks suppressed [ 653.055023][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.055176][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.055310][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.055567][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.055853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.055940][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.056325][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.056349][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 653.056581][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.056748][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.134856][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 657.278755][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22474/1:b..l P22463/1:b..l [ 657.287995][ C0] rcu: (detected by 0, t=10517 jiffies, g=105965, q=1935 ncpus=2) [ 657.295913][ C0] task:syz.0.4069 state:R running task stack:24432 pid:22463 tgid:22463 ppid:19208 task_flags:0x40004c flags:0x00080000 [ 657.309424][ C0] Call Trace: [ 657.312712][ C0] [ 657.315659][ C0] __schedule+0x17db/0x58f0 [ 657.320282][ C0] ? __schedule+0x17f1/0x58f0 [ 657.324984][ C0] ? __pfx___schedule+0x10/0x10 [ 657.329861][ C0] preempt_schedule_irq+0x4b/0x90 [ 657.334896][ C0] irqentry_exit+0x14f/0x910 [ 657.339500][ C0] ? trace_irq_disable+0x3b/0x140 [ 657.344588][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.350589][ C0] RIP: 0010:lock_acquire+0x91/0x350 [ 657.355847][ C0] Code: 0f 84 e9 00 00 00 48 8b b4 24 88 00 00 00 4c 89 e7 e8 13 82 94 00 83 3d 9c 44 d7 0e 00 0f 84 e4 00 00 00 65 8b 05 c7 36 f2 11 <85> c0 0f 85 d5 00 00 00 65 48 8b 2d 07 f2 f1 11 83 bd a4 0b 00 00 [ 657.375558][ C0] RSP: 0018:ffffc90003207590 EFLAGS: 00000202 [ 657.381641][ C0] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 8000000000000001 [ 657.389622][ C0] RDX: 0000000000000000 RSI: ffffffff8177f1fc RDI: 1ffffffff1dab91c [ 657.397605][ C0] RBP: 1ffff92000640eec R08: 0000000000000000 R09: 0000000000000000 [ 657.405589][ C0] R10: ffffc90003207728 R11: fffff52000640ef1 R12: ffffffff8ed5c8e0 [ 657.413576][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000000 [ 657.421660][ C0] ? unwind_next_frame+0xac/0x2550 [ 657.426856][ C0] ? lock_acquire+0x115/0x350 [ 657.431549][ C0] ? __unwind_start+0xed/0x660 [ 657.436325][ C0] ? unwind_next_frame+0x8f/0x2550 [ 657.441459][ C0] unwind_next_frame+0xac/0x2550 [ 657.446422][ C0] ? unwind_next_frame+0x8f/0x2550 [ 657.451578][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 657.456802][ C0] ? get_stack_info_noinstr+0x19/0x130 [ 657.462294][ C0] __unwind_start+0x514/0x660 [ 657.466991][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 657.473160][ C0] arch_stack_walk+0xe3/0x150 [ 657.477863][ C0] ? __unwind_start+0xed/0x660 [ 657.482649][ C0] stack_trace_save+0xa9/0x100 [ 657.487424][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 657.492821][ C0] save_stack+0x122/0x230 [ 657.497234][ C0] ? __pfx_save_stack+0x10/0x10 [ 657.502116][ C0] ? page_ext_put+0x97/0xc0 [ 657.506635][ C0] __reset_page_owner+0x71/0x1f0 [ 657.511592][ C0] __free_frozen_pages+0xc93/0xd90 [ 657.516738][ C0] __slab_free+0x274/0x2c0 [ 657.521175][ C0] ? qlist_free_all+0x8e/0x100 [ 657.525958][ C0] qlist_free_all+0x99/0x100 [ 657.530563][ C0] ? taskstats_exit+0x19e/0xe10 [ 657.535438][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 657.541096][ C0] kasan_quarantine_reduce+0x148/0x160 [ 657.546570][ C0] __kasan_slab_alloc+0x22/0x80 [ 657.551448][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 657.556928][ C0] ? taskstats_exit+0x19e/0xe10 [ 657.561795][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 657.567450][ C0] ? taskstats_exit+0x19e/0xe10 [ 657.572331][ C0] taskstats_exit+0x19e/0xe10 [ 657.577015][ C0] ? acct_update_integrals+0x342/0x410 [ 657.582453][ C0] ? acct_update_integrals+0x38a/0x410 [ 657.587889][ C0] ? __pfx_taskstats_exit+0x10/0x10 [ 657.593074][ C0] ? seccomp_filter_release+0x18a/0x2d0 [ 657.598598][ C0] do_exit+0x6ad/0x2360 [ 657.602758][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 657.607864][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 657.612797][ C0] ? __pfx_do_exit+0x10/0x10 [ 657.617377][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 657.622647][ C0] do_group_exit+0x22d/0x2f0 [ 657.627232][ C0] __x64_sys_exit_group+0x3f/0x40 [ 657.632255][ C0] x64_sys_call+0x18c6/0x18d0 [ 657.636918][ C0] do_syscall_64+0x166/0x520 [ 657.641497][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.647548][ C0] ? clear_bhb_loop+0x70/0xc0 [ 657.652212][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.658143][ C0] RIP: 0033:0x7fad32b9e159 [ 657.662552][ C0] RSP: 002b:00007fffef2205e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 657.670981][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fad32b9e159 [ 657.679038][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 657.687024][ C0] RBP: 00007fffef22064c R08: 0000000000000000 R09: 00000000000927c0 [ 657.694980][ C0] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000083 [ 657.702930][ C0] R13: 00000000000927c0 R14: 0000000000080482 R15: 00007fffef2206a0 [ 657.710898][ C0] [ 657.713899][ C0] task:syz-executor state:R running task stack:28200 pid:22474 tgid:22474 ppid:18566 task_flags:0x400040 flags:0x00080002 [ 657.727348][ C0] Call Trace: [ 657.730607][ C0] [ 657.733533][ C0] __schedule+0x17db/0x58f0 [ 657.738024][ C0] ? lock_acquire+0x115/0x350 [ 657.742682][ C0] ? look_up_lock_class+0x57/0x110 [ 657.747772][ C0] ? register_lock_class+0x31/0x2e0 [ 657.752947][ C0] ? __pfx___schedule+0x10/0x10 [ 657.757781][ C0] preempt_schedule_irq+0x4b/0x90 [ 657.762791][ C0] irqentry_exit+0x14f/0x910 [ 657.767359][ C0] ? trace_irq_disable+0x3b/0x140 [ 657.772360][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 657.778313][ C0] RIP: 0010:handle_dots+0x0/0xfe0 [ 657.783337][ C0] Code: 07 80 c1 03 38 c1 0f 8c 4e ff ff ff 4c 89 f7 e8 16 17 e7 ff e9 41 ff ff ff 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <55> 41 57 41 56 41 55 41 54 53 48 83 ec 30 89 f5 48 89 fb 65 48 8b [ 657.802919][ C0] RSP: 0018:ffffc90003697a98 EFLAGS: 00000293 [ 657.808962][ C0] RAX: ffffffff82506924 RBX: ffffc90003697cd8 RCX: ffff88802de48000 [ 657.816910][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: ffffc90003697ca0 [ 657.824859][ C0] RBP: 0000000000000002 R08: ffff88802de48000 R09: 0000000000000002 [ 657.832831][ C0] R10: 000000000000002f R11: 0000000000000000 R12: ffffc90003697cd0 [ 657.840790][ C0] R13: ffffc90003697cf0 R14: 0000000000000031 R15: ffff888028b72a1a [ 657.848747][ C0] ? link_path_walk+0xc44/0x1910 [ 657.853676][ C0] link_path_walk+0xc50/0x1910 [ 657.858430][ C0] path_lookupat+0xe4/0x8c0 [ 657.862920][ C0] filename_lookup+0x265/0x5d0 [ 657.867666][ C0] ? __pfx_filename_lookup+0x10/0x10 [ 657.872944][ C0] ? strncpy_from_user+0x150/0x2c0 [ 657.878174][ C0] ? do_getname+0x151/0x250 [ 657.882662][ C0] __se_sys_chdir+0xa8/0x2a0 [ 657.887229][ C0] ? __pfx___se_sys_chdir+0x10/0x10 [ 657.892687][ C0] do_syscall_64+0x166/0x520 [ 657.897275][ C0] ? trace_irq_disable+0x3b/0x140 [ 657.902297][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.908347][ C0] ? clear_bhb_loop+0x70/0xc0 [ 657.913006][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 657.918886][ C0] RIP: 0033:0x7f95d5b9c597 [ 657.923280][ C0] RSP: 002b:00007ffd035d8cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000050 [ 657.931670][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f95d5b9c597 [ 657.939735][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007ffd035d8d10 [ 657.947741][ C0] RBP: 00007ffd035d8cfc R08: 00007f95d6958060 R09: 0000000000000000 [ 657.955705][ C0] R10: 0000000000000008 R11: 0000000000000246 R12: 00000000000000b4 [ 657.963673][ C0] R13: 00000000000927c0 R14: 000000000008083b R15: 00007ffd035d8d50 [ 657.971647][ C0] [ 657.974676][ C0] rcu: rcu_preempt kthread starved for 1138 jiffies! g105965 f0x0 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=1 [ 657.985692][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 657.995657][ C0] rcu: RCU grace-period kthread stack dump: [ 658.001538][ C0] task:rcu_preempt state:R running task stack:27496 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 658.015033][ C0] Call Trace: [ 658.018319][ C0] [ 658.021261][ C0] __schedule+0x17db/0x58f0 [ 658.025776][ C0] ? __lock_acquire+0x747/0x2de0 [ 658.030735][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 658.035869][ C0] ? __pfx___schedule+0x10/0x10 [ 658.040733][ C0] ? lock_acquire+0x115/0x350 [ 658.045430][ C0] ? schedule+0x90/0x2b0 [ 658.049752][ C0] schedule+0x164/0x2b0 [ 658.053928][ C0] schedule_timeout+0x152/0x2c0 [ 658.058797][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 658.064194][ C0] ? __pfx_process_timeout+0x10/0x10 [ 658.069546][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 658.075358][ C0] ? prepare_to_swait_event+0x322/0x350 [ 658.080921][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 658.085799][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 658.091966][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 658.097262][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 658.102486][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 658.107089][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 658.107748][ C1] net_ratelimit: 23462 callbacks suppressed [ 658.107764][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.108080][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.108336][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.108577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.108862][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.109101][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.109351][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.109588][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.109825][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.110062][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.237417][ C0] ? __kthread_parkme+0x71/0x1f0 [ 658.242423][ C0] ? __kthread_parkme+0x199/0x1f0 [ 658.247481][ C0] kthread+0x38b/0x480 [ 658.251559][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 658.256769][ C0] ? __pfx_kthread+0x10/0x10 [ 658.261366][ C0] ret_from_fork+0x514/0xb70 [ 658.265969][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 658.271088][ C0] ? __switch_to+0xc89/0x1420 [ 658.275832][ C0] ? __pfx_kthread+0x10/0x10 [ 658.280434][ C0] ret_from_fork_asm+0x1a/0x30 [ 658.285235][ C0] [ 658.288255][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 658.294588][ C0] Sending NMI from CPU 0 to CPUs 1: [ 658.299808][ C1] NMI backtrace for cpu 1 [ 658.299828][ C1] CPU: 1 UID: 0 PID: 6773 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT(full) [ 658.299871][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 658.299883][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 658.300053][ C1] RIP: 0010:unwind_next_frame+0x11df/0x2550 [ 658.300078][ C1] Code: 89 3b 43 0f b6 44 25 00 84 c0 0f 85 29 11 00 00 49 8d 46 36 c6 00 00 49 8d 5e 50 4c 8b 6c 24 18 48 8b 44 24 30 42 0f b6 04 20 <84> c0 4c 8b 04 24 0f 85 46 0e 00 00 42 0f b6 44 25 00 84 c0 0f 85 [ 658.300093][ C1] RSP: 0000:ffffc90000a17b20 EFLAGS: 00000246 [ 658.300109][ C1] RAX: 0000000000000000 RBX: ffffc90000a17c18 RCX: 0000000000000000 [ 658.300121][ C1] RDX: ffffffff9116c8c4 RSI: 0000000000000000 RDI: ffffc90000a17c28 [ 658.300134][ C1] RBP: 1ffffffff222d918 R08: ffffc90000a17c27 R09: 0000000000000000 [ 658.300147][ C1] R10: ffffc90000a17c18 R11: fffff52000142f85 R12: dffffc0000000000 [ 658.300160][ C1] R13: ffffffff9116c8c0 R14: ffffc90000a17bc8 R15: ffffc90000a17c10 [ 658.300174][ C1] FS: 0000000000000000(0000) GS:ffff888124dce000(0000) knlGS:0000000000000000 [ 658.300209][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 658.300222][ C1] CR2: 00007f520767f1d4 CR3: 000000000eb48000 CR4: 00000000003526f0 [ 658.300238][ C1] Call Trace: [ 658.300244][ C1] [ 658.300256][ C1] ? stack_trace_save+0xa9/0x100 [ 658.300274][ C1] ? unwind_next_frame+0x8f/0x2550 [ 658.300296][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 658.300313][ C1] arch_stack_walk+0x11b/0x150 [ 658.300337][ C1] ? kasan_save_track+0x3e/0x80 [ 658.300359][ C1] stack_trace_save+0xa9/0x100 [ 658.300376][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 658.300396][ C1] ? __lock_acquire+0x747/0x2de0 [ 658.300416][ C1] kasan_save_track+0x3e/0x80 [ 658.300463][ C1] ? ip6_mc_input+0x878/0xc80 [ 658.300535][ C1] kasan_save_free_info+0x40/0x50 [ 658.300560][ C1] __kasan_slab_free+0x5c/0x80 [ 658.300580][ C1] kmem_cache_free+0x182/0x650 [ 658.300603][ C1] ip6_mc_input+0x878/0xc80 [ 658.300630][ C1] ? __pfx_ip6_mc_input+0x10/0x10 [ 658.300658][ C1] ? ip6_rcv_finish+0x265/0x280 [ 658.300681][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 658.300702][ C1] ip_sabotage_in+0x1e1/0x270 [ 658.300790][ C1] ? __pfx_ip_sabotage_in+0x10/0x10 [ 658.300817][ C1] nf_hook_slow+0xc5/0x220 [ 658.300876][ C1] NF_HOOK+0x21f/0x3c0 [ 658.300899][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 658.300922][ C1] ? NF_HOOK+0x9e/0x3c0 [ 658.300944][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 658.300965][ C1] ? ip6_rcv_core+0xa1/0x1870 [ 658.300989][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 658.301015][ C1] ? netif_receive_skb+0x102/0xbf0 [ 658.301067][ C1] netif_receive_skb+0x278/0xbf0 [ 658.301084][ C1] ? lock_acquire+0x115/0x350 [ 658.301103][ C1] ? __pfx_netif_receive_skb+0x10/0x10 [ 658.301124][ C1] ? br_netif_receive_skb+0x126/0x190 [ 658.301181][ C1] NF_HOOK+0xa4/0x3a0 [ 658.301211][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 658.301238][ C1] ? NF_HOOK+0xfa/0x3a0 [ 658.301262][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 658.301289][ C1] ? __pfx_br_netif_receive_skb+0x10/0x10 [ 658.301318][ C1] ? br_pass_frame_up+0x275/0x420 [ 658.301345][ C1] br_handle_frame_finish+0x1136/0x1950 [ 658.301379][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 658.301405][ C1] ? ip6t_do_table+0x1d1/0x15b0 [ 658.301451][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 658.301471][ C1] ? nf_hook_slow+0x176/0x220 [ 658.301491][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 658.301517][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 658.301543][ C1] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 658.301620][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 658.301648][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 658.301675][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 658.301700][ C1] ? lock_acquire+0x115/0x350 [ 658.301719][ C1] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 658.301748][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 658.301778][ C1] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 658.301807][ C1] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 658.301835][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 658.301865][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 658.301893][ C1] ? br_nf_pre_routing+0x720/0x14b0 [ 658.301923][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 658.301949][ C1] br_handle_frame+0x1329/0x1600 [ 658.301981][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 658.302009][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 658.302041][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 658.302066][ C1] __netif_receive_skb_core+0x989/0x30c0 [ 658.302118][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 658.302152][ C1] ? process_backlog+0x3de/0x18b0 [ 658.302172][ C1] ? process_backlog+0x3de/0x18b0 [ 658.302200][ C1] process_backlog+0x727/0x18b0 [ 658.302223][ C1] ? process_backlog+0x3de/0x18b0 [ 658.302250][ C1] __napi_poll+0xaa/0x330 [ 658.302270][ C1] net_rx_action+0x61d/0xf50 [ 658.302297][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 658.302322][ C1] ? sched_balance_domains+0x770/0x880 [ 658.302356][ C1] handle_softirqs+0x226/0x860 [ 658.302381][ C1] ? do_softirq+0x77/0xd0 [ 658.302406][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 658.302468][ C1] do_softirq+0x77/0xd0 [ 658.302490][ C1] [ 658.302496][ C1] [ 658.302503][ C1] __local_bh_enable_ip+0x100/0x140 [ 658.302526][ C1] ieee80211_ibss_rx_queued_mgmt+0x1e97/0x2c40 [ 658.302555][ C1] ? process_scheduled_works+0xc3d/0x1630 [ 658.302581][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf15/0x2c40 [ 658.302603][ C1] ? __lock_acquire+0x747/0x2de0 [ 658.302621][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 658.302656][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 658.302681][ C1] ? kcov_remote_start+0x9c/0x7e0 [ 658.302704][ C1] ? kcov_remote_start+0x1a6/0x7e0 [ 658.302725][ C1] ieee80211_iface_work+0x78a/0x1010 [ 658.302755][ C1] cfg80211_wiphy_work+0x29e/0x420 [ 658.302785][ C1] ? process_scheduled_works+0x97a/0x1630 [ 658.302809][ C1] process_scheduled_works+0xc3d/0x1630 [ 658.302849][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 658.302876][ C1] ? assign_work+0x3cf/0x5d0 [ 658.302901][ C1] worker_thread+0xa47/0xfb0 [ 658.302940][ C1] kthread+0x38b/0x480 [ 658.302957][ C1] ? __pfx_worker_thread+0x10/0x10 [ 658.302980][ C1] ? __pfx_kthread+0x10/0x10 [ 658.302998][ C1] ret_from_fork+0x514/0xb70 [ 658.303017][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 658.303033][ C1] ? __switch_to+0xc89/0x1420 [ 658.303059][ C1] ? __pfx_kthread+0x10/0x10 [ 658.303077][ C1] ret_from_fork_asm+0x1a/0x30 [ 658.303113][ C1] [ 663.114918][ C0] net_ratelimit: 30527 callbacks suppressed [ 663.114941][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:c2:3c:be:4a:69:6e, vlan:0) [ 663.115033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.115207][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.115466][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.115467][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.115731][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.115886][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)