last executing test programs: 41.716456851s ago: executing program 1 (id=4904): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x24040850) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000002c0)=0x4bfc, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x24004054}, 0x40051) listen(0xffffffffffffffff, 0x5) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000100)="b8", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @loopback, 0xfffffffe}, 0x1c) 40.833718854s ago: executing program 1 (id=4919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000040)="b6", 0x1}], 0x1) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc3c0000000c0a01010000000f000000000a0000060900020073797a31000000000900010073797a3100000000100003800c000080080003400000000214000000110001"], 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 64) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0xb, 0x0, &(0x7f0000000640)) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSETELEM={0x48, 0xe, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}, 0x1, 0x0, 0x0, 0x8080}, 0x24008040) 40.570329904s ago: executing program 1 (id=4924): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000037c00000400fc80a72601"], 0x26c0}}, 0x4010) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) unshare(0x20000400) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x0, 0x7}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, 0x0, 0x4) close(r1) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001300)={r1, &(0x7f0000001640)="02ccd4eb5d001f376cd5502915fcbb9f871d71d4abbc0ef2706a5a3fa3b310a0163dbdd4de7efecd55845fe9a90240573cc180157bc16f2279d033f1acc6b8968020c41409e5939cd0d7b7a5ff23146af7372e6bbba9b1cc09d5a75a06e97e54a97f8ff84741750fe377392bff7495f23ba5a18b6c60bcd4884c02a8b7c9cb16aa1d", &(0x7f0000001700)=""/199}, 0x20) recvmmsg(r0, &(0x7f0000001580)=[{{&(0x7f0000000000)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000001440)=[{&(0x7f0000000100)=""/193, 0xc1}, {&(0x7f0000000200)=""/69, 0x45}, {&(0x7f0000000280)=""/4096, 0xffffffffffffffd8}, {&(0x7f0000000080)=""/9, 0x9}, {&(0x7f0000001280)=""/17, 0x11}, {&(0x7f00000012c0)=""/45, 0x2d}, {&(0x7f00000015c0)=""/41, 0x23}, {&(0x7f0000001340)=""/117, 0x75}, {&(0x7f00000013c0)=""/114, 0x72}], 0x9, &(0x7f0000001500)=""/124, 0x7c}, 0x401}], 0x1, 0x20010000, &(0x7f0000001600)={0x0, 0x989680}) r3 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000001800)={0x1, 0x3ff}, 0x8) sendmmsg$inet_sctp(r3, &(0x7f0000002ec0)=[{0x0, 0x0, 0x0}], 0x1, 0x8000) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000001840)=0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000018c0)={0x0, @nfc={0x27, r4, 0xffffffffffffffff, 0x2}, @isdn={0x22, 0x7, 0x7, 0x0, 0x4}, @ax25={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, 0x8f9, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001880)='vlan0\x00', 0x5d3f9ee0, 0x6}) bind$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) 40.495928899s ago: executing program 1 (id=4928): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newsa={0x1a0, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@private, 0x0, 0xecdf}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0xcd}, [@algo_crypt={0x48, 0x2, {{'cbc(aes)\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2a}}, @algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}]}, 0x1a0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x198}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x198, 0x10, 0x713, 0x0, 0x0, {{@in6=@local, @in6=@local}, {@in6=@private1, 0x0, 0x33}, @in6=@local, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_auth_trunc={0x4c, 0x14, {{'cmac(aes)\x00'}}}, @algo_auth={0x59, 0x1, {{'cmac(aes)\x00'}, 0x88, "b6f3e543e3ff15c934decfda52def2c9f2"}}]}, 0x198}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r6, 0x50ccb}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gre={{0x8}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40010}, 0x4c040) sendmmsg$inet(r2, &(0x7f0000000700)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @empty, @remote}}}], 0x20}}], 0x1, 0x40000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv4_delrule={0x5c, 0x21, 0x400, 0x70bd26, 0x25dfdbff, {0x2, 0x20, 0x10, 0x10, 0x2, 0x0, 0x0, 0x0, 0x10002}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x6}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x7}, @FRA_DST={0x8, 0x1, @private=0xa010100}, @FRA_DST={0x8, 0x1, @private=0xa010101}, @FRA_SRC={0x8, 0x2, @remote}, @FRA_FLOW={0x8, 0xb, 0x800}, @FRA_GENERIC_POLICY=@FRA_FWMARK={0x8, 0xa, 0x100}]}, 0x5c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001b000)) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @local}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x4}, {0x7, 0x5}, {0x3, 0x3}, {0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x7}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x4}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x4}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x8}, {0x4, 0x2}, {0x7}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0xa}, {0x3}, {0x5, 0x5}, {0x4, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x7, 0x6}, {0x5, 0xa}, {0x5, 0x3}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x1}, {0x5}, {0x4, 0x2}, {0x1}, {0x1, 0x3}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4080) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x64, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x54, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x9, 0x2, [{0x4, 0x4}, {0x7, 0x5}, {0x3, 0x3}, {0x6}, {0x3, 0x4}]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x3, 0x7}, {0x7, 0x6}, {0x5, 0x5}, {0x7, 0x1}, {0x0, 0x4}, {0x4}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x7, 0x5}, {0x4, 0x4}, {0x0, 0x4}, {0x4, 0x4}, {0x0, 0x1}, {0x1, 0x7}, {0x1, 0x9}, {0x0, 0x4}, {0x5, 0x4}, {0x3, 0x4}, {0x1, 0x1}, {0x1, 0x5}, {0x3, 0x3}, {0x4, 0x1}, {0x1, 0x5}, {0x3, 0x6}, {0x6, 0x8}, {0x4, 0x2}, {0x7}, {0x1, 0x6}, {0x6, 0x1}, {0x4, 0x7}, {0x0, 0x1}, {0x7, 0x3}, {0x1, 0x8}, {0x5, 0x7}, {0x1}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0xa}, {0x3}, {0x5, 0x5}, {0x4, 0xa}, {0x2, 0x7}, {0x6, 0x1}, {0x5, 0x2}, {0x7, 0x6}, {0x5, 0xa}, {0x5, 0x3}, {0x5, 0x1}, {0x0, 0x7}, {0x1, 0x6}, {0x2, 0x1}, {0x5}, {0x4, 0x2}, {0x1}, {0x1, 0x3}]}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000841}, 0x4080) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, 0x0, 0x0) 40.154831391s ago: executing program 1 (id=4933): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$pptp(0x18, 0x1, 0x2) close(r1) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000180)="d8000000180081064e81f782db4cb904021d0820fe067c05e8fe55a10a0005000140020003600e41b0000900ac0006fc1100000016000500014002000000035c3b61c1d67f6f94007174cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001b14d6d930dfe1d9d322fe7c4650b5b9bd6ee6f63f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b4ff010000000000000dd6e4edef3d93452a09004b43370e9703920723f97e46bb5c07540d3b", 0xd8}], 0x1}, 0x8044) (async, rerun: 64) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$nl_netfilter(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x18, 0x10, 0xa, 0x101, 0x0, 0x0, {}, [@generic="c9"]}, 0x18}}, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) (async) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00'}) 40.016265789s ago: executing program 1 (id=4936): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000050007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8}}]}]}]}, 0x64}}, 0x24040800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) unshare(0x6a040000) unshare(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000050007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8}}]}]}]}, 0x64}}, 0x24040800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) (async) unshare(0x6a040000) (async) unshare(0x0) (async) 39.488752323s ago: executing program 2 (id=4943): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @netrom, @netrom, @bcast, @remote, @rose]}, &(0x7f0000000080)=0x48) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x5}, 0x8) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000100)={@broadcast, @broadcast, 0x0}, &(0x7f0000000140)=0xc) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000180)={@broadcast, @broadcast, r2}, 0xc) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f00000001c0)=0x3, 0x4) ioctl$AUTOFS_IOC_CATATONIC(r3, 0x9362, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000200)={0x3fc, 0x2, 0x200, 0x6, 0x8, 0x72, 0x5, 0xb0000, 0x0}, &(0x7f0000000240)=0x20) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r4, 0x4}, 0x8) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x7, 0x1, 0x8, 0x9, 0x7, 0x4, 0xb, 0x1, 0xbd, 0x81, 0x4, 0x6, 0x4, 0x7f}, 0xe) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000300)={0x0, 0x4, 0x1, [0xed, 0x0, 0x0, 0x1, 0x8], [0x1ff, 0x9, 0x5, 0x9, 0x2, 0x1, 0xfff, 0xfffffffffffffff7, 0x4, 0x0, 0x9, 0xf, 0x9, 0x3, 0xffffffff, 0x3, 0x0, 0x8, 0x5, 0x0, 0x400, 0x10, 0x7, 0x1, 0x5, 0x11851a7b, 0x6, 0x3, 0x52, 0x10001, 0x2, 0x60, 0xa, 0x9, 0x7fffffffffffffff, 0x7fffffff, 0x9, 0x0, 0x1000, 0xb, 0xf, 0x924, 0x1, 0x7, 0x5088, 0x8, 0xb831, 0x4, 0x6, 0x7, 0x7fffffffffffffff, 0x5, 0x2, 0x5, 0x2, 0x800, 0x1, 0x5, 0x3, 0x6, 0x0, 0x2, 0x9, 0x1, 0xffff, 0x3, 0xa, 0x4, 0x1, 0x7, 0x3, 0x9, 0x1, 0xfffffffffffffff7, 0xfffffffffffffff7, 0xfffffffffffffffa, 0x4, 0x1, 0x6f3f3746, 0xffffffffffff4548, 0x9, 0xeabc, 0x7, 0x4, 0x7fffffffffffffff, 0x4, 0x6, 0x77c0, 0x6b9, 0x382, 0x3, 0x1ff, 0x1c67ed4f, 0x9, 0x33f22f6e, 0x7, 0x100000000, 0x4, 0x4, 0x3607, 0x2, 0x0, 0xffffffffffffffff, 0x40, 0x6, 0x5f, 0x4, 0x8001, 0x5e5, 0x678, 0x9, 0x4, 0x0, 0xf1f, 0x7f, 0xc5, 0xff, 0x5, 0x6, 0x1, 0xf1b]}) close(r1) r5 = openat$cgroup(r3, &(0x7f0000000740)='syz1\x00', 0x200002, 0x0) mkdirat$cgroup(r5, &(0x7f0000000780)='syz0\x00', 0x1ff) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f00000007c0)={r4, @in6={{0xa, 0x4e23, 0xfffffffa, @local, 0x8000}}, 0x8, 0x0, 0x7, 0x46c3, 0xfffff001}, &(0x7f0000000880)=0x98) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000008c0)) r7 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000900)={r3}) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r3, 0x84, 0x1e, &(0x7f0000000940)=0x7fff, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000980)={r6, 0x2}, 0x8) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r8, 0x339, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xd2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8810}, 0x8800) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000000b00)={0x3f, 0x3, 0x2, 0x5e7, 0x1, [0x2, 0x6, 0xb, 0x1]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r9, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x74, r10, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1000, 0x3a}}}}, [@NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x1}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x14, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x40004}, 0x4040004) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000cc0)={r6, 0x2}, &(0x7f0000000d00)=0x8) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d80), r9) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r9, &(0x7f0000000e80)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x70, r11, 0x300, 0x70bd29, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xb}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xf0}]}, 0x70}, 0x1, 0x0, 0x0, 0x800c0}, 0x20000020) 39.292195519s ago: executing program 2 (id=4946): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2daa000000000000711012000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000900)={@random="e10931d8640a", @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x10, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) recvfrom(r1, &(0x7f00000002c0)=""/165, 0xa5, 0x10000, &(0x7f0000000380)=@in6={0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x28}, 0x4}, 0x80) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x70}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r3}, 0x48) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x2, 0x6, 0xe1f}, &(0x7f00000001c0)=0x10) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES64=r1, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="95d5a22579d7b2014d8cb49fd467e7d8bd5727b7ae84fdaf10c6c45dcddafeb8fa89db27c6723262df63f2a73dee672253e98758a45da76da9c0b114a6e9c8853bbe6e7632ddcf3d2209f5ef122071f100d7339cca2461fe3393d5fc20f1496ac3ebfb18a523f2"], 0x64}, 0x1, 0x0, 0x0, 0x8011}, 0x0) 38.957066261s ago: executing program 2 (id=4950): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_DETACH(0x22, &(0x7f0000000100)=r2, 0x4) close(0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x38}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtaction={0x90, 0x30, 0x1, 0x70bd2a, 0x0, {}, [{0x7c, 0x1, [@m_ct={0x78, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xffffffff}}]}, {0x35, 0x6, "bfbb7330fc2a5cd46bef0091d449c88e8fe3200152b8781c6ecf455bfe62ca403aa59595208fb247b1e802a2e40dd0e3d1"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000005}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f00000000c0)=0x40) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a0901c21241e328fc0652e60000000000000000020000000900020073797a32000000000900010073797a30000000002c00048028000180080001b4006e6174001c0002800800014000000000080002400000000a0800034000000016ffff00001100010000000000000000000000000a"], 0x80}}, 0x0) 38.666111881s ago: executing program 2 (id=4954): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x4001, 0x3, 0x4d0, 0x310, 0x700001b, 0x148, 0x0, 0x148, 0x438, 0x206, 0x240, 0x438, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0x2c8, 0x310, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@unspec=@bpf1={{0x230}, @fd}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x0, 0x5}}}, {{@ip={@initdev={0xac, 0x1e, 0x3, 0x0}, @private=0xa010101, 0xff, 0xffffffff, 'veth1_to_hsr\x00', 'gretap0\x00', {}, {}, 0x62, 0x1, 0x44}, 0x0, 0xc0, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1, 0x39, 0x8, 0xc, 'syz0\x00', 'syz1\x00', {0x8}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x530) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f01000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}], 0x10) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {}, {0x77359400}, {}, 0x2, @can={{}, 0x0, 0x0, 0x0, 0x0, "3fd31340e92c4bb8"}}, 0x48}, 0x300}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\a'], 0x48}, 0x300}, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f0000000c80)={0x2, &(0x7f0000000b40)=[{@none}, {@fixed}]}) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r7, 0x1, 0x3d, &(0x7f0000000080)={0xb}, 0x8) connect$inet6(r7, &(0x7f0000000000)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) write(r7, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="0d00000003000000040000000700000000000000", @ANYRES32=0x1, @ANYBLOB="71d4a1aceb9136fe220000000000007db2d276c147d8356a420b2c645d7a2a000000000000927e00e5fd45b11d3c0a0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x76, 0x0, &(0x7f0000000040)) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=ANY=[@ANYBLOB="20000000150001002abd7000ffdbdf2502180100", @ANYRES32=r10, @ANYBLOB="08000100f99dd429181ca0e0000021"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x804) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000440)={'gretap0\x00', &(0x7f00000003c0)={'syztnl1\x00', r10, 0x1, 0x10, 0x9, 0x1, {{0x10, 0x4, 0x1, 0xc, 0x40, 0x65, 0x0, 0x6, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@generic={0x82, 0x2}, @noop, @ssrr={0x89, 0xb, 0x8e, [@multicast1, @rand_addr=0x64010102]}, @lsrr={0x83, 0x1b, 0xd5, [@private=0xa010101, @multicast2, @remote, @multicast1, @multicast1, @remote]}]}}}}}) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x44, r11, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) 37.898705846s ago: executing program 4 (id=4961): clock_gettime(0xb, &(0x7f0000000980)) syz_emit_ethernet(0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaa2baaaaaaaaaabb08004599002f8a0f000000000000e0000102ac1492aa000000000000000000000000000000030000602000004e23000000ded39b3afefcc28da619c43f58b7603fb2d08263487a5760d9e4aed8e99786a212347500d228324fb6a3d6a8906322d5e6adc8fd37e03c813cd8be5640a7dbc4935497f8e7"], 0x0) 37.853978495s ago: executing program 3 (id=4962): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x800000, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x13}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001640), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES16=r3, @ANYBLOB="0900000000000000000002000000140001800500020001", @ANYBLOB="260c9ab934d936e3823d925da2d2522ba642702fb92e52c1e6675dcf535515c2ed15131868715535eb854989104880fcab6a670091c51dc02cf3354f88fa27bf367c1a0abedea19ee2fe89919ab2dab876983f8bac259ecca07f5c3e4beddbc8e06f49e55517a34bc6d1d12cf9c6149eebf79a94fe3543e530e6b07379fd2c4ef0ecada5dd53a7b8a69eabb4684ce0049d7b0313146953610da86b9162914c518974", @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRES8=r3, @ANYRES8=r1], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYBLOB="d7fb0ec7c9ac83b79066150cd91b65cece5d8abcebd09545c37600244a912af816d48378a5", @ANYRES8=r3], 0x4c}}, 0x4044) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, r4, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0xe000000, 0x3e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}, @NL80211_ATTR_SSID={0xa, 0x34, @random="cbaeeb1c9896"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x4040) 37.774146798s ago: executing program 4 (id=4963): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) recvmsg(r0, &(0x7f0000001d00)={0x0, 0x0, 0x0}, 0x40000020) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8932, &(0x7f0000000040)={'ip6gre0\x00', 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r3) socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000010000000001000095004e0000000000000000000000000000000000f2faec846c07a43279bf2e4694b0b1ca642822bd48ceb7cacc2a01245de1179f7edd01002208b682f8399a65c07d13721c2c77ad34a7819df8a52587db24111aea3d3db202faaa88ba6771e1ff3af62782ba7912f2f31feeac240de3336baeac9a79f4ad5ba819d94e7f891ff8187f1e2559c0e912bafa6c72a5"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e}, 0x94) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000001d40)=""/4087, 0xff7}, {&(0x7f0000002d40)=""/4098, 0x1002}, {&(0x7f0000000040)=""/28, 0x1c}, {&(0x7f0000000080)=""/21, 0x15}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/213, 0xd5}], 0x6}, 0x0) socketpair(0x2, 0x6, 0x3, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)={0x7c, r1, 0x8, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb53, 0x2}}}}, [@NL80211_ATTR_KEY={0x4c, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "d2f2aec8ce"}, @NL80211_KEY_IDX={0x5, 0x2, 0x3}, @NL80211_KEY_SEQ={0x14, 0x4, "3882496660a179209de2b872da5e9e3c"}, @NL80211_KEY_SEQ={0x14, 0x4, "5e5f01f008fc5e2e61315b63af7c16ab"}, @NL80211_KEY_MODE={0x5}]}, @NL80211_ATTR_KEY_SEQ={0x6, 0xa, "8b19"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0xc000) 37.680664906s ago: executing program 0 (id=4965): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x7ffffffe}, 0x840) write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_CONN_CREATE_RSP={0x0, 0x0, 0x2, 0x4, 0x1, {0x0, 0x0, 0xff, 0x4}}, 0x7) write$nci(r0, &(0x7f0000000380)=@NCI_OP_CORE_INIT_RSP_V2={0x0, 0x1, 0x2, 0x1, 0x9, {0x0, 0x7, 0x7, 0x3, 0x6, 0x4c, 0xc0, 0x8}}, 0x11) 37.659808302s ago: executing program 2 (id=4966): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000004780), 0x2, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r5 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="18000336c612e886b229000020000000000000000000000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x9430, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETSTEERINGEBPF(r7, 0x800454e0, &(0x7f0000000200)=r6) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r8, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360"], 0xffdd) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x2, 0x2, 0x2}}, 0x26) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000390400000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="000c00000000bbc562da5fa20000040012800b00010067656e65060000001000028008000b400000800804774c6906eaec8779acb03344000953"], 0x40}}, 0x0) 37.594826707s ago: executing program 3 (id=4967): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x154}}, 0x49080) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="2000000069000b00000000000000000000000000000000e7070001"], 0x20}, 0x1, 0x200000000000000}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000300), 0x0) 37.504294766s ago: executing program 3 (id=4968): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_COOKIE(r1, 0x1, 0x39, 0x0, &(0x7f0000000080)) sendmsg$nl_generic(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x27c, 0x26, 0x400, 0x70bd28, 0x25dfdbfd, {0x3}, [@nested={0xf6, 0x36, 0x0, 0x1, [@nested={0x4, 0xd4}, @generic="f249d65f4efba6a5d879619cac32464f2ecea18b9fd1b60ad2e77d08a50542d44ab832568939a9f439c3598d64b1ea43be1cf013be2f055511f3cc5c31bb1d507a2859e8befc8f90b07d957b96922367598026d0c244ecc7d269982aeffb8203f60684264588f61d895f26a5e563583b5f8de604844d2c8d9bf6b3f7c9eaaa646e2b702b2b7eacde51eeae3d8d68df7738a08b92b1aea40486a7cb369680c8a9a1209006f4b504684ddf6636bcf4c170b2a77e2c94b6a14c9f300f230bcc30b40f5f3e1e75b402be7fd258ec215a98817b25c852b01817a6603dbec37491beb313ee5ccacb2b66302ea14870e27b"]}, @nested={0x10, 0x7e, 0x0, 0x1, [@typed={0xc, 0x79, 0x0, 0x0, @u64=0x6}]}, @generic="a78a198fffb4a6209ed490023d73dd1bfc481b3e84b3679b08eb320efba0ac556f46fa09d78c43e9d450f560ce8c54225c9e964de647c4fb048ff4ae4795dc302dd9ba965f52e85acd2acf4b4b8ab556f2aae5f596c04f3fcafb0c2441c459f5b968327c849d5fb8596cac0cdb9f61317422e54292e58cc20427da54140a047b618a9500d265dc7690461b7c58537143c5919221277b6f3aecf79577e2686bbfe57ccd746b5d7c3c3f7f40eec4c33257a3aca62bdb8127bd3107af7ef1eb390120e53f9c5087e463e2266d", @generic="1a70bcee5c305d5bfedc3f300a4da98771c1f5158dd0c885c7364e520d05ee6a9550b38b4a5eff1d2b56ee964d2245dc11b362fbabe4ec51205ea07522a4560c484469ae84a7866bb5050c805bda040daa98ab0e0d900e3969d6fb2e44228d7e7158e83b13fd0d04bf3cc919480161b81bddefcfcdff05ec43092f5b7ee6f81df42b2bd47f9210c0ef948d1479fe19ed165528"]}, 0x27c}}, 0x1000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x824, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x5, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x824, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$RDMA_NLDEV_CMD_DELLINK(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x20, 0x1404, 0x4, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x800) 37.470633902s ago: executing program 0 (id=4969): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$tipc(0x1e, 0x5, 0x0) getsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f00000001c0), &(0x7f0000002640)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x24, &(0x7f0000000680)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x3a}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xa}, @generic={0x8, 0x5, 0x9, 0xa7, 0x6}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}], &(0x7f0000000340)='GPL\x00', 0x6, 0xc7, &(0x7f00000007c0)=""/199, 0x41000, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc7e}, 0x94) r3 = socket$kcm(0x2, 0x922000000001, 0x106) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x25, &(0x7f00000002c0)=r4, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@map, 0x15, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0], &(0x7f0000000900)=[0x0], 0x0}, 0x40) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@fallback=r0, r2, 0x23, 0x1004, r4, @void, @value, @void, @void, r5}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0xcc0, 0xcc0, &(0x7f0000000200)="e460cdfbef2408322900119386dd6a00000000072feb311ccd3ec8a755c1e1380081ffad008036e8d50000ff010000001400000500242f09880bd320d98a61a90057e9bf", 0x0, 0x401, 0x0, 0xa8, 0x0, &(0x7f00000011c0)="59235bd7a9324ff307d87177332368fbdeefaa1544600ea1870645446c357de433206896637019b84d57c3de1ea07638e494dd701db1af6fc15db78cf79f5ab4bc7aee8553677ffe377a35b4afdb989fb7da1ff63956ffb796d51daf1c268b9f1a4a06583f8c03ec1671b151a8a495c1b006fa5f2f3a54a46aeee8005b178b9516d2b928984ccb942fa2278a2e33a0b619f2dd814fc91942e03c48fd9b7d19d9a6612b46805b267ef3132a724cbfcd1c715be67930e2ae2b9a2479c5a4b2fecd301a745a6fd67598a5e5ecc1e56e58159c47def7f9285acfedc980596377e6f9ee076fa094e5d8f838b718ed63ff8265a1dbc1549bed03e6b27b6fc2b8a07373506a1a41d5a71cbf0eaa24ec737b02a8a2d5114c3c4e5810a2c3eae3373fd341800cfb0fb35cefe04ca4da2b02a83c40126e23cdf3c817b530bbe7b431bc0b7d864e3e6dd1ab90259a8bd7ad7dd4c6366ea6da661fd016b394adcce5988fff85fbc832a927c97b89337e195f562cd284911eef1ee52e4ff033b33beedea7cf43c4d0cc0471fa91011e1e7e8733bf82c01346d6ecb49f1a84e92d063c81a7227d89be33f7273b87e29ae53a5f38dc94cf391fcb82c9432821ef1a0f6bbfe8f7d6574479a8f621e1d8f7d9bb20f3d8d469e6d232d7d7837ff12a224a65c604907e787baaf7c863ad48a5edecbe1470c20507a6ee5dee75e9ef84c71af5af800a9ce9787ebdee9e1c8189fbf66048d5c3757fb2b697ce68cfd316a7b25a385111e0cd2fddb81602e36e74c4f99b403cb304a4774e648054c0456c7869f9d97873ff80e2664c1265292941a9b767c7f40767cfccdbcaa156453d6a910fd5440f7a2bf8f4bb6d6d9fd443f2304617a684b6afa99c157dcf70e51fdb55fd0dbf5c6733841024599f8d1791a07c5dc3a4ccaf4d7c0ca3d101b2beba3a49d2378c9fe4fdb10babd95083a0c4db5a30c4490828d97efe807a13e587fbac1089843964facfd27d287262759384fe9b610f81048be430c1e8fe6327c0f2fd003021d20563ec0c7e39aec6718649c958da2e02cb3848c76924492678889c18bea02ed5ee080106e9838cbca9ad5f66c0434182225b13a236b342cf80562c10d4a3459aea17589b84904d3d2c2b", &(0x7f00000004c0)="b33620dad49cc786c86a5c5444e76c2a1ef9224fb91083d2ba4368e98a14467703e9ee585196fa95320bd53c6a76ad443b81dc833b22016aeaafb4597c06919ecf7e5ea4d0a8995feaaf9a9feb0c4b5277398049a2f5475f6ceb26bd128189f4b1b3c662d3d1630717791de0cdac3ce6e01c5719b670da5ded7dfa9dda53f04ad151cb952d708eaa69e983dcfab36b2dac3f3fe85e1d86b3d73d4879fb11cfac51f3cb669a50", 0x1, 0xfffffffd}, 0x22) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000a40)=@o_path={&(0x7f0000000a00)='./file0\x00', r2, 0x4000, r2}, 0x18) r6 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r6, 0x107, 0xb, 0x0, &(0x7f0000000040)) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000400000000000900020073797a31000000000500010007000000050005000000000014000780080011400000000005001500030000000d000300686173683a6d6163"], 0x5c}}, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r7, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="240000005e00010100000000000000000080"], 0x24}], 0x1}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0xf, &(0x7f00000001c0)=0x2, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00"], 0x48) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r9, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)={0x64, r11, 0x2, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x78}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x21}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x43}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x33}]}, 0x64}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 37.31834796s ago: executing program 0 (id=4970): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x4a}}) r1 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, 0x0, 0x4044884) socket$netlink(0x10, 0x3, 0x4) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) 37.317869189s ago: executing program 2 (id=4971): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$caif_stream(0x25, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000005980)='ip6gre0\x00', 0x10) connect$caif(r1, &(0x7f00000059c0)=@dgm={0x25, 0x5, 0x9d}, 0x18) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001480)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099", @ANYBLOB="6401e8b279921be3c637378b8bb2d5"], 0x38}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000002a00)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xfc2, 0x66, 0x0, 0xb, 0x11, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e21, 0xfae, 0x0, @opaque="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"}}}, 0xfd0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af7edbc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_BACKUP_PORT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) 37.272054098s ago: executing program 4 (id=4972): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x28, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) (async) r4 = socket$key(0xf, 0x3, 0x2) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r6 = socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) bind$xdp(r5, &(0x7f0000000180)={0x2c, 0x1, r8, 0x0, r6}, 0x10) (async) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x90}, 0x1, 0x7}, 0x0) (async) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x99, 0x6}, &(0x7f0000000340)=0x8) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a010400000000000000000200000038000480340001800b0001006e756d67656e00002400028008000140000000000800024000000003080003400000000108000440ffffffff0900010073797a30000000000900020073797a32"], 0x8c}}, 0x0) 37.174970213s ago: executing program 3 (id=4973): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0) syz_emit_ethernet(0xa2, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3000bb", 0x6c, 0x2b, 0x0, @private2, @local, {[@srh={0x3b, 0x0, 0x7}], {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82f63de64f6ce2ee11028289aefdb3449391a823213e6336516748a7949bb108", "402fa83b1d661c18462075368a186092", {"9ddeb8f71aa23d391b8fa99e9816af2d", "040876a663a86d97f46b9665cc18492b"}}}}}}}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d00)=ANY=[@ANYBLOB="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"], 0x2a0}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) bind$l2tp6(r2, &(0x7f0000001600)={0xa, 0x0, 0xfffffffb, @local, 0xd, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmmsg$inet(r2, &(0x7f0000001340)=[{{&(0x7f0000000080)={0x2, 0x4e23, @private=0xa010100}, 0x10, 0x0}}], 0x1, 0x20000014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000) recvmmsg(r2, &(0x7f0000001b40)=[{{&(0x7f0000000100)=@pppol2tpv3, 0x80, &(0x7f0000000200)=[{&(0x7f00000001c0)=""/2, 0x2}], 0x1, &(0x7f0000000240)=""/123, 0x7b}, 0x8}, {{&(0x7f00000002c0)=@phonet, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000340)=""/74, 0x4a}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/10, 0xa}, {&(0x7f0000000400)=""/90, 0x5a}, {&(0x7f0000000780)=""/217, 0xd9}, {&(0x7f0000000480)}, {&(0x7f0000000880)=""/16, 0x10}, {&(0x7f00000008c0)=""/196, 0xc4}], 0x8}}, {{&(0x7f0000000a40)=@nfc, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000ac0)=""/182, 0xb6}, {&(0x7f0000000b80)=""/135, 0x87}, {&(0x7f0000000c40)=""/47, 0x2f}, {&(0x7f0000000c80)=""/146, 0x92}, {&(0x7f0000000d40)=""/143, 0x8f}], 0x5, &(0x7f0000003340)=""/4096, 0x1000}, 0xcf3}, {{&(0x7f0000000e80)=@xdp, 0x80, &(0x7f0000001200)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000000f00)=""/39, 0x27}, {&(0x7f0000000f40)=""/98, 0x62}, {&(0x7f0000000fc0)=""/41, 0x29}, {&(0x7f0000001000)=""/196, 0xc4}, {&(0x7f0000001100)=""/229, 0xe5}], 0x6, &(0x7f0000001280)=""/174, 0xae}, 0x1000}, {{&(0x7f0000001380)=@isdn, 0x80, &(0x7f0000001580)=[{&(0x7f0000001400)=""/98, 0x62}, {&(0x7f0000001480)=""/205, 0xcd}], 0x2, &(0x7f00000015c0)=""/49, 0x31}, 0x4}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001780)=""/107, 0x6b}], 0x1, &(0x7f0000001800)=""/172, 0xac}, 0x800}, {{&(0x7f00000018c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000001b00)=[{&(0x7f0000001940)=""/140, 0x8c}, {&(0x7f0000001a00)=""/244, 0xf4}], 0x2}, 0x2}], 0x7, 0x2002, &(0x7f0000001740)) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r1) 37.122122658s ago: executing program 0 (id=4974): sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000440)={0x3dc, 0x1, 0x3, 0xe02, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFQA_EXP={0x80, 0xf, 0x0, 0x1, [@CTA_EXPECT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_MASTER={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x13}}, {0x8, 0x2, @remote}}}]}]}, @NFQA_VLAN={0x44, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x800}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x5}]}, @NFQA_EXP={0x1d4, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0xa, 0xb, 'Q.931\x00'}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x4}, @CTA_EXPECT_NAT={0x138, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x80, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010101}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @multicast1}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0x64010102}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_EXPECT_NAT_TUPLE={0x14, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_TUPLE={0x54, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa3}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010102}}}]}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASTER={0x50, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x3}, @CTA_EXPECT_MASK={0xc, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}]}, @NFQA_CT={0x98, 0xb, 0x0, 0x1, [@CTA_SEQ_ADJ_ORIG={0x2c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xf}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x7}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x10}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x1}]}, @CTA_TUPLE_ORIG={0x68, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @remote}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}]}]}, @NFQA_PAYLOAD={0x8d, 0xa, "24e59ccb90b1c09888e55f1c5e528c646ff74e09fac0bf51c64519eb9e7c0b798c61674e776057fcf3dbeca2b42ce5f7f92a77a59b459f85190c7dd7c94f8a88fe45d4705227b11d7ded592f68c769370939900d85a97a16fc8ed47137e3e8197dcb6cd03305e380ed3c0bf530d591001ad9203c4821158c87d3abe952e0d9c77e5bf083e4d9631ff0"}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x8000}, 0x20004050) r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xe8, 0x453, 0x2, 0x70bd2a, 0x25dfdbfe, "fb5bc1f32daa983edcde7a4b656b7b3ff24a7c38f268e47efa187c7ad2fa675e0a9eca1f5ec7958056199de6fc8ddd0c635459a5f8fd0d34fae04df9d29827edcfe6dce5f40230e6b93b6eb137ca03315bc11cc3574f2daf92ba7fd8dbdaaf9b91ac80d3ec34288c3b3e5be4e1157fe5c26f41aad762bffe9394105ef568c6d809fee616e714852f952ea25742aa2a019e7b867b0a04a9b5ae25b20cbe4a630033fab5a3328548eac06b338669be1c4b12540187d6442f49fe1fe12ade1fa99260d830807b936f750f966631a641fef5056b3a222004ed", ["", ""]}, 0xe8}, 0x1, 0x0, 0x0, 0x20040014}, 0x4000040) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) 37.040190904s ago: executing program 3 (id=4975): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x38, r0, 0x200, 0x70bd2e, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1840}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x51870ce395227226) 37.032847604s ago: executing program 0 (id=4976): r0 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, &(0x7f0000034000)={0x7, {{0xa, 0x8, 0xa, @remote}}}, 0x88) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000100)={'wg1\x00'}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000000, 0x10, 0xffffffffffffffff, 0xdccb4000) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000002c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) getsockopt$inet6_buf(r0, 0x29, 0x10000000000030, &(0x7f0000034000)=""/144, &(0x7f0000002280)=0x90) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0xf, &(0x7f0000000140)=0x23, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newneigh={0x28, 0x1c, 0x401, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x4}, [@NDA_DST_MAC={0xa, 0x1, @link_local}]}, 0x28}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000004900010000000000000000000a00076e08000000e0000001140001800d2a79075827af5aa534d6815c2e93f10c0002"], 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32=r8, @ANYBLOB='\x00\x00g\x00\b\x00\b\x00', @ANYRES64=r8], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) 36.986520759s ago: executing program 4 (id=4977): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="288940127dcd0233c161", @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e00000000000000000004000380"], 0x30}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073113400000000008510000002000000b70089bd000000009500c2000000000095000012697e0800"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37}, 0x94) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="1b0000000000000000000000ff00000000000000", @ANYRESHEX=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000009f41ae67a74c3bd61a7d44f7c078e1828cda6a278fd0c5038737c5a1d8e004cfb99467f0e59d323b9422d852b5ff81d9b7a19176f8bdc907742848b24b04efb78af5ce5e063ca3e8f5107a2e346157e5c843d359d37be7c27861415aaed37465ac8c8", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000020000000200"/28], 0x50) (async) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x1000000c}) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000140)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00ed50f5feffe80004d8ecdd00000000005205000000002100000000"], 0x50) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000580)='%-010d \x00'}, 0x20) (async) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000640)=@generic={&(0x7f0000000600)='./file0\x00', 0x0, 0x10}, 0x18) (async) r9 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, 0x0, 0x60) r10 = socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000940)=ANY=[@ANYBLOB="44000000100000020400"/20, @ANYRES32=0x0, @ANYBLOB="000000001de802000c1489831a0ca60e9761638510f77b00766c616e000c01f57f08e900000800000008001e00100000b75ca9e2b4065e029358faa0bbffe4b6ac4470872d3f13a31e878b3d7645e4465cf20000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) sendmsg$DEVLINK_CMD_RATE_GET(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01070000000000000000410000000e0001006e657464657673696d0000000f0002006e6585537d7464657673696d"], 0x34}}, 0x0) (async, rerun: 64) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) writev(r13, &(0x7f0000000200)=[{&(0x7f00000000c0)='X\x00', 0x2}], 0x1) (async, rerun: 64) write$cgroup_subtree(r13, &(0x7f0000001200)=ANY=[], 0xfe33) (async, rerun: 64) r14 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) (async) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r15, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r15, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r15, 0x84, 0x83, &(0x7f0000000000)={r16, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000840)={0x0, 0x200, 0x3, 0xb, r16}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x12, &(0x7f0000000280)=@raw=[@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff}, @ldst={0x0, 0x0, 0x2, 0x9, 0x8, 0x50, 0xfffffffffffffffc}, @map_idx={0x18, 0x0, 0x5, 0x0, 0x5}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @call={0x85, 0x0, 0x0, 0x22}], &(0x7f0000000140)='syzkaller\x00', 0x7f, 0x1f, &(0x7f0000000180)=""/31, 0x40f00, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x1, 0x2, 0xf}, 0x10, 0x0, 0x0, 0x6, &(0x7f00000006c0)=[r4, 0xffffffffffffffff, r4, r3, r6, r7, r8, r13, r14], &(0x7f0000000700)=[{0x3, 0x1, 0x5, 0x5}, {0x0, 0x3, 0x5, 0x8}, {0x1, 0x2, 0x4, 0x6}, {0x3, 0x2, 0xd, 0x8}, {0x3, 0x3, 0x9, 0x9}, {0x2, 0x5, 0xa, 0x9}], 0x10, 0x1}, 0x94) 36.67195522s ago: executing program 4 (id=4978): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x5}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x14, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffff018, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@map_fd={0x18, 0xb, 0x1, 0x0, r2}, @jmp={0x5, 0x0, 0x3, 0x9, 0x9, 0xc, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x12}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x24}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x60, r4, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080) 36.421167435s ago: executing program 3 (id=4979): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r3, 0xc040ff0b, 0x2000000000) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003b050c00"/20, @ANYRES32=0x0, @ANYBLOB="c1900000815c00001800128008040100677470000c00028008000200", @ANYRESOCT=0x0, @ANYRES8=r1, @ANYRES32], 0x40}}, 0x48010) 36.298229337s ago: executing program 4 (id=4980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000005d00)={@map, 0xffffffffffffffff, 0x1c}, 0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)=@delqdisc={0x8c, 0x25, 0x8, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x8, 0x3db06ab1e1b3e9c5}, {0xfff2, 0xf}, {0xd, 0xe}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x6, 0x1, 0x2}}}}, @TCA_STAB={0x2c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x4, 0x3a85, 0x8, 0x0, 0x2, 0x0, 0x3}}, {0xa, 0x2, [0x5, 0x405, 0x3]}}]}, @qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x3}]}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20004894}, 0x0) 36.29785705s ago: executing program 0 (id=4981): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x50) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x6d8, 0x490, 0x390, 0xd0, 0xd0, 0x490, 0x608, 0x608, 0x608, 0x608, 0x608, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'erspan0\x00', {}, {}, 0x0, 0x0, 0x0, 0x52}, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x33}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1c8, 0x1f0, 0x0, {}, [@common=@unspec=@comment={{0x120}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@ipv6={@local, @mcast1, [], [], 'lo\x00', 'vlan1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x4d5]}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x738) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xfffc, 0x0, 0x0, 0x0, 0xa, 0xe0, 0x80}, 0x2}, [@migrate={0x9c, 0x11, [{@in=@local, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, @in6=@local, 0x33, 0x0, 0x0, 0x2, 0x2, 0x2}, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@private2, @in=@rand_addr=0x64010102, @in6=@private2, 0x3c, 0x0, 0x0, 0x0, 0x8, 0x8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x800}, 0x42000) (async) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) unshare(0x22020400) (async) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x6e02a6c3770c3083) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000a80)={'ipvlan0\x00', &(0x7f0000000040)=@ethtool_rxnfc={0x2e, 0x7, 0x40000000, {0xa, @tcp_ip4_spec={@local, @local, 0x4e21, 0x4e23, 0xfd}, {0x0, @broadcast, 0x8, 0x2, [0xfd]}, @hdata="6dc60e213488f696f784288b1f8212ead5c00f9eb0d4b3fb29bb59ae72b0f9996a22cccdc85af9177552bb971937c609e7e3bc37", {0x0, @remote, 0x2ce, 0x3, [0x0, 0x9]}, 0x3, 0x80}}}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, 0x8, 0x0, 0x0}}, 0x10) (async) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r6, &(0x7f0000000080), 0x0}, 0x20) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x23}, 0x38) 0s ago: executing program 32 (id=4936): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000050007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8}}]}]}]}, 0x64}}, 0x24040800) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) unshare(0x6a040000) unshare(0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) (async) socket$inet(0x2, 0x2, 0x1) (async) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x5a}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000050007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20000000) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x64, 0x10, 0x1, 0x70bd2f, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x102}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x8}}]}]}]}, 0x64}}, 0x24040800) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000000308010100000000000000000000000005000300ff0000000600024088ca00002c0004"], 0x50}}, 0x0) (async) unshare(0x6a040000) (async) unshare(0x0) (async) kernel console output (not intermixed with test programs): edia [ 503.486857][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.507079][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.518697][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.530108][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.541979][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.552102][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.562769][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.577082][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.588116][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.618336][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.631393][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.658242][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.672628][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.703044][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.715310][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.728535][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.739517][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.751987][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.768873][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.782754][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.815828][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.827265][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.848295][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.862596][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.877065][T18462] netlink: 'syz.1.3435': attribute type 15 has an invalid length. [ 503.894540][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.913749][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.927327][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.940075][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 503.950767][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 504.010649][T18471] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 504.028754][T18460] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.044538][T18468] team0: Port device dummy0 removed [ 504.052422][T18468] bridge_slave_0: left allmulticast mode [ 504.058571][T18468] bridge_slave_0: left promiscuous mode [ 504.066990][T18468] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.083662][T18468] bridge_slave_1: left allmulticast mode [ 504.083955][T18474] netlink: 'syz.3.3438': attribute type 10 has an invalid length. [ 504.090325][T18468] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.111667][T18468] bond0: (slave bond_slave_0): Releasing backup interface [ 504.120557][T18468] bond_slave_0: left allmulticast mode [ 504.129675][T18468] bond0: (slave bond_slave_1): Releasing backup interface [ 504.141081][T18468] bond_slave_1: left allmulticast mode [ 504.151717][T18468] team0: Port device team_slave_0 removed [ 504.161276][T18468] team0: Port device team_slave_1 removed [ 504.168149][T18468] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.176590][T18468] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.187984][T18468] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 504.197718][T18468] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 504.207047][T18468] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 504.225969][T18434] tipc: Enabling of bearer rejected, failed to enable media [ 504.253488][T18474] team0: Device vxcan1 is of different type [ 504.321190][T18479] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 506.162057][T18589] dvmrp0: entered allmulticast mode [ 506.274264][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 506.282944][ C1] lec:lec_tx_timeout: lec0 [ 506.288775][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 506.337204][T18600] syzkaller1: entered promiscuous mode [ 506.343013][T18600] syzkaller1: entered allmulticast mode [ 506.385654][T18604] netlink: 'syz.3.3478': attribute type 1 has an invalid length. [ 506.400884][T18604] __nla_validate_parse: 12 callbacks suppressed [ 506.400901][T18604] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3478'. [ 506.416777][T18600] bond1: option fail_over_mac: invalid value (16) [ 506.428507][T18600] bond1 (unregistering): Released all slaves [ 506.941427][T18628] netlink: 'syz.1.3484': attribute type 4 has an invalid length. [ 507.144665][T18638] xt_socket: unknown flags 0x50 [ 507.281262][T18640] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3487'. [ 507.292296][T18640] nbd: must specify at least one socket [ 507.422928][T18644] netlink: 64985 bytes leftover after parsing attributes in process `syz.1.3489'. [ 507.509727][T18648] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3491'. [ 507.581014][T18648] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3491'. [ 507.797437][T18668] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 507.931090][T18678] netlink: 'syz.3.3500': attribute type 3 has an invalid length. [ 507.998317][T18681] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input5 [ 508.021071][T18678] Cannot find add_set index 65532 as target [ 508.095908][T18684] siw: device registration error -23 [ 508.161275][T18688] syzkaller0: entered promiscuous mode [ 508.167120][T18688] syzkaller0: entered allmulticast mode [ 508.635077][T18720] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 508.845301][T18728] netlink: 'syz.4.3517': attribute type 11 has an invalid length. [ 508.845920][ T58] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.875384][T18728] netlink: 'syz.4.3517': attribute type 11 has an invalid length. [ 508.885587][ T58] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.900311][T18728] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3517'. [ 508.924482][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 508.930778][ T58] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 508.968822][ T58] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 509.437271][T18755] bond2 (unregistering): Released all slaves [ 509.649061][T18779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3530'. [ 509.921463][T18796] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3534'. [ 509.989661][T18802] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 510.018844][T18808] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3538'. [ 510.039856][T18802] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 510.090057][T18802] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 510.147119][T18802] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 510.215402][T18802] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 510.321363][T18802] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 510.381505][T18802] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 510.420545][T18802] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 510.448816][T18802] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 512.124253][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5830 ms [ 512.132384][ C1] lec:lec_tx_timeout: lec0 [ 512.830934][T18842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3543'. [ 513.188979][T18861] syzkaller1: entered promiscuous mode [ 513.203382][T18859] netlink: 13 bytes leftover after parsing attributes in process `syz.3.3547'. [ 513.219767][T18859] netlink: 'syz.3.3547': attribute type 10 has an invalid length. [ 513.231097][T18861] syzkaller1: entered allmulticast mode [ 513.235258][T18859] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3547'. [ 513.260038][T18861] xt_TPROXY: Can be used only with -p tcp or -p udp [ 513.631551][T18889] netlink: 'syz.1.3555': attribute type 10 has an invalid length. [ 513.706862][T18889] team0: Device vxcan1 is of different type [ 513.719562][T18893] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3556'. [ 513.833431][T18905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3560'. [ 513.869281][T18911] netlink: 'syz.4.3558': attribute type 1 has an invalid length. [ 513.878551][T18911] netlink: 'syz.4.3558': attribute type 2 has an invalid length. [ 513.922698][T18912] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3560'. [ 513.977152][T18893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3556'. [ 514.092169][T18920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 514.092542][T18917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3562'. [ 514.205656][T18925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3565'. [ 514.224951][T18922] syzkaller0: entered promiscuous mode [ 514.234713][T18922] syzkaller0: entered allmulticast mode [ 514.328065][T18934] xt_limit: Overflow, try lower: 604147548/4200216962 [ 514.969665][T18972] syzkaller0: entered promiscuous mode [ 514.975396][T18972] syzkaller0: entered allmulticast mode [ 515.023589][T18984] ip6t_REJECT: ECHOREPLY is not supported [ 515.985690][ T30] audit: type=1800 audit(1773268035.403:3): pid=19057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3596" name="memory.events" dev="tmpfs" ino=250 res=0 errno=0 [ 516.043224][ T30] audit: type=1804 audit(1773268035.453:4): pid=19063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3596" name="/newroot/45/memory.events" dev="tmpfs" ino=250 res=1 errno=0 [ 516.082847][T19065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 516.090428][T19065] IPv6: NLM_F_CREATE should be set when creating new route [ 516.101878][T19065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 518.528319][T19034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 518.790414][T19087] netlink: 'syz.4.3604': attribute type 1 has an invalid length. [ 518.857826][T19087] 8021q: adding VLAN 0 to HW filter on device bond4 [ 519.040600][T19087] bond4: (slave geneve2): making interface the new active one [ 519.049787][T19087] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 519.270164][T19113] bridge1: entered promiscuous mode [ 519.277664][T19113] bridge1: entered allmulticast mode [ 519.290138][T19121] syz_tun: entered allmulticast mode [ 519.388074][T19121] bridge_slave_0: left allmulticast mode [ 519.454908][T19121] bridge_slave_0: left promiscuous mode [ 519.460893][T19121] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.483840][T19133] __nla_validate_parse: 11 callbacks suppressed [ 519.484015][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'. [ 519.569223][T19121] bridge_slave_1: left allmulticast mode [ 519.576940][T19121] bridge_slave_1: left promiscuous mode [ 519.583048][T19121] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.596891][T19117] IPVS: set_ctl: invalid protocol: 50 172.20.20.187:20003 [ 519.667475][T19121] bond0: (slave bond_slave_0): Releasing backup interface [ 519.728449][T19121] bond0: (slave bond_slave_1): Releasing backup interface [ 519.777031][T19121] team0: Port device team_slave_0 removed [ 519.797599][T19121] team0: Port device team_slave_1 removed [ 519.807356][T19121] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 519.827668][T19121] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 519.841521][T19121] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 519.858557][T19121] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 519.883737][T19121] net_ratelimit: 33020 callbacks suppressed [ 519.883758][T19121] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 520.568746][T19168] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 520.710976][T19172] netlink: 'syz.3.3624': attribute type 1 has an invalid length. [ 520.789498][T19174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 520.822286][T19183] netlink: 'syz.0.3626': attribute type 1 has an invalid length. [ 520.832953][T19185] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3628'. [ 521.026673][T19196] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3632'. [ 521.051360][T19196] veth0_macvtap: left promiscuous mode [ 521.519762][T19213] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3637'. [ 521.541533][T19215] netlink: 'syz.3.3638': attribute type 4 has an invalid length. [ 521.599152][T19215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3638'. [ 521.616860][T19221] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 521.982540][T19244] tipc: Started in network mode [ 521.994444][T19244] tipc: Node identity 42a698a4cace, cluster identity 4711 [ 522.020373][T19244] tipc: Enabled bearer , priority 0 [ 522.112503][T19254] ipt_REJECT: TCP_RESET invalid for non-tcp [ 522.133361][T19250] tipc: Disabling bearer [ 522.170970][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3649'. [ 522.183012][T19252] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3649'. [ 522.289618][T19260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3650'. [ 522.312530][T19260] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3650'. [ 522.459576][T19266] netlink: 'syz.2.3655': attribute type 32 has an invalid length. [ 522.481228][T19266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3655'. [ 522.498716][T19269] netlink: 'syz.4.3653': attribute type 1 has an invalid length. [ 522.532281][T19266] bond1: option coupled_control: invalid value (52) [ 522.541549][T19266] bond1 (unregistering): Released all slaves [ 522.921531][T19294] syzkaller0: entered promiscuous mode [ 522.934127][T19294] syzkaller0: entered allmulticast mode [ 522.972263][T19294] netlink: 'syz.0.3662': attribute type 1 has an invalid length. [ 523.094942][T19309] netlink: 'syz.3.3668': attribute type 5 has an invalid length. [ 524.027139][T19367] netlink: 'syz.4.3687': attribute type 1 has an invalid length. [ 524.352197][T19392] netlink: 'syz.2.3695': attribute type 24 has an invalid length. [ 524.738232][T19426] __nla_validate_parse: 12 callbacks suppressed [ 524.738252][T19426] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3702'. [ 524.748398][ T49] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 524.897698][T19429] syzkaller1: entered promiscuous mode [ 524.903382][T19429] syzkaller1: entered allmulticast mode [ 525.439164][T19421] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.612376][T19459] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3707'. [ 525.648562][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 525.665239][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3706'. [ 525.759610][T19471] netlink: 'syz.0.3710': attribute type 1 has an invalid length. [ 525.768295][T19473] openvswitch: netlink: Unexpected mask (mask=2020040, allowed=2010048) [ 525.779767][T19471] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3710'. [ 525.792924][T19471] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3710'. [ 525.803833][T19471] netlink: 'syz.0.3710': attribute type 1 has an invalid length. [ 525.812076][T19471] netlink: 'syz.0.3710': attribute type 8 has an invalid length. [ 525.822048][T19471] netlink: 582 bytes leftover after parsing attributes in process `syz.0.3710'. [ 525.966510][T19482] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 525.973472][T19482] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 525.981852][T19482] netlink: 'syz.3.3714': attribute type 10 has an invalid length. [ 526.091349][T19482] batman_adv: batadv0: Adding interface: netdevsim0 [ 526.100336][T19482] batman_adv: batadv0: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.134612][T19482] batman_adv: batadv0: Not using interface netdevsim0 (retrying later): interface not active [ 526.331575][T19499] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3720'. [ 526.351977][T19499] netlink: 'syz.2.3720': attribute type 21 has an invalid length. [ 526.360864][T19499] IPv6: NLM_F_CREATE should be specified when creating new route [ 526.371299][T19499] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 526.378623][T19499] IPv6: NLM_F_CREATE should be set when creating new route [ 526.386552][T19499] IPv6: NLM_F_CREATE should be set when creating new route [ 526.393881][T19499] IPv6: NLM_F_CREATE should be set when creating new route [ 526.492090][T19511] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3724'. [ 526.516571][T19510] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3723'. [ 526.577641][T19510] netlink: 'syz.0.3723': attribute type 1 has an invalid length. [ 526.600729][T19519] openvswitch: netlink: Geneve opt len 2 is not a multiple of 4. [ 526.638811][T19521] netlink: 'syz.2.3728': attribute type 1 has an invalid length. [ 526.662723][T19521] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.960783][T19532] netlink: 'syz.2.3731': attribute type 10 has an invalid length. [ 526.972381][T19532] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 527.741127][T19531] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 528.914582][ T5834] Bluetooth: hci0: command 0x0c20 tx timeout [ 529.373811][T19503] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 529.677263][ T10] IPVS: starting estimator thread 0... [ 529.689401][T19543] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 529.770672][T19563] __nla_validate_parse: 3 callbacks suppressed [ 529.770693][T19563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3740'. [ 529.784915][T19553] IPVS: using max 31 ests per chain, 74400 per kthread [ 529.838200][T19566] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3740'. [ 529.902320][T19572] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3743'. [ 529.912511][T19572] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3743'. [ 529.926409][T19572] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 529.990319][T19575] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3742'. [ 530.135680][T19582] netlink: 'syz.1.3746': attribute type 10 has an invalid length. [ 530.169481][T19582] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.179738][T19582] bridge_slave_1: left allmulticast mode [ 530.191476][T19582] bridge_slave_1: left promiscuous mode [ 530.200830][T19582] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.217532][T19582] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 530.259531][T19588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3749'. [ 530.312603][T19590] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.396081][T19598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3752'. [ 530.423317][T19600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 530.789780][T19621] netlink: 'syz.3.3758': attribute type 14 has an invalid length. [ 530.940694][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3755'. [ 531.006683][T19631] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3759'. [ 531.289193][T19642] openvswitch: netlink: Missing valid actions attribute. [ 531.297454][T19642] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 531.443781][T19646] bridge0: port 3(syz_tun) entered blocking state [ 531.464675][T19646] bridge0: port 3(syz_tun) entered disabled state [ 531.484717][T19646] syz_tun: entered allmulticast mode [ 531.493346][T19646] syz_tun: entered promiscuous mode [ 531.519473][T19646] bridge0: port 3(syz_tun) entered blocking state [ 531.530758][T19646] bridge0: port 3(syz_tun) entered forwarding state [ 531.713210][T19660] syzkaller0: entered promiscuous mode [ 531.728885][T19660] syzkaller0: entered allmulticast mode [ 532.150379][T19683] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3772'. [ 532.577857][T19708] netlink: 'syz.3.3778': attribute type 1 has an invalid length. [ 532.651687][T19713] netlink: 'syz.1.3780': attribute type 2 has an invalid length. [ 532.664049][T19713] netlink: 'syz.1.3780': attribute type 5 has an invalid length. [ 533.096915][T19734] xt_ecn: cannot match TCP bits for non-tcp packets [ 533.137310][T19736] netlink: 'syz.1.3788': attribute type 1 has an invalid length. [ 533.293413][T19750] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 533.372853][T19750] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 533.443838][T19750] gretap1: entered promiscuous mode [ 533.470338][T19750] gretap1: entered allmulticast mode [ 533.727972][T19771] netlink: 'syz.3.3795': attribute type 1 has an invalid length. [ 533.748845][T19771] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 533.760559][T19771] team0: Port device batadv1 added [ 534.514403][ T5836] Bluetooth: hci4: command 0x0401 tx timeout [ 534.522899][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 534.630805][T19806] syzkaller0: entered promiscuous mode [ 534.637774][T19806] syzkaller0: entered allmulticast mode [ 534.651786][T19806] openvswitch: netlink: IP tunnel dst address not specified [ 534.837988][T19809] xt_CT: You must specify a L4 protocol and not use inversions on it [ 535.195771][T19825] netlink: 'syz.2.3810': attribute type 10 has an invalid length. [ 535.217821][T19825] team0: Device vxcan1 is of different type [ 535.278860][T19828] tipc: Started in network mode [ 535.304297][T19828] tipc: Node identity ba729113356e, cluster identity 4711 [ 535.330017][T19828] tipc: Enabled bearer , priority 0 [ 535.395980][T19837] netlink: 'syz.2.3814': attribute type 1 has an invalid length. [ 535.482279][T19834] syzkaller0: entered promiscuous mode [ 535.495218][T19834] syzkaller0: entered allmulticast mode [ 535.507272][T19834] tipc: Resetting bearer [ 535.517756][T19837] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 535.682885][T11212] tipc: Resetting bearer [ 535.713117][T19853] xt_connbytes: Forcing CT accounting to be enabled [ 535.728907][T19849] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 535.740094][T19834] tipc: Resetting bearer [ 536.258177][T11681] lec:lec_start_xmit: lec0:No lecd attached [ 538.377978][T19834] tipc: Disabling bearer [ 538.391050][T19855] __nla_validate_parse: 11 callbacks suppressed [ 538.391071][T19855] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3818'. [ 538.427062][ T24] tipc: Node number set to 2401014035 [ 538.644963][T19879] gtp0: entered promiscuous mode [ 538.662406][T19879] gtp0: entered allmulticast mode [ 538.873965][T19891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3828'. [ 538.930383][T19898] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3827'. [ 539.008577][T19910] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 539.042561][T19900] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 539.221735][T19923] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 539.746428][T19953] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3842'. [ 540.010940][T19973] netlink: 212356 bytes leftover after parsing attributes in process `syz.3.3848'. [ 540.345643][T19997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3854'. [ 540.584124][T20012] syzkaller0: entered promiscuous mode [ 540.592257][T20012] syzkaller0: entered allmulticast mode [ 540.679495][T20019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3858'. [ 540.690263][T20016] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3859'. [ 540.759232][T20023] Bluetooth: MGMT ver 1.23 [ 540.889270][T20030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3864'. [ 540.902644][T20030] netlink: 2 bytes leftover after parsing attributes in process `syz.0.3864'. [ 541.007748][T20041] ip6gre1: entered promiscuous mode [ 541.023662][T20041] ip6gre1: entered allmulticast mode [ 541.057955][T20044] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 541.089331][T20044] pim6reg527: entered allmulticast mode [ 541.099989][T20044] netlink: 'syz.0.3867': attribute type 1 has an invalid length. [ 541.274323][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 541.286154][ C1] lec:lec_tx_timeout: lec0 [ 541.530110][T20079] netlink: 'syz.0.3877': attribute type 10 has an invalid length. [ 541.576530][T20079] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 541.650795][T20085] bridge_slave_0: invalid flags given to default FDB implementation [ 542.142278][T20122] netlink: 'syz.4.3888': attribute type 1 has an invalid length. [ 542.154709][T20067] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 542.187138][T20122] netlink: 'syz.4.3888': attribute type 1 has an invalid length. [ 542.208357][T20122] netlink: 'syz.4.3888': attribute type 8 has an invalid length. [ 542.220694][T20128] netlink: 'syz.3.3892': attribute type 1 has an invalid length. [ 542.241406][T20128] netlink: 'syz.3.3892': attribute type 3 has an invalid length. [ 542.293101][T20128] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 542.441974][T20145] nbd: must specify at least one socket [ 542.761249][T20165] syzkaller0: entered promiscuous mode [ 542.768040][T20165] syzkaller0: entered allmulticast mode [ 543.033807][T20181] IPVS: Scheduler module ip_vs_sip not found [ 543.219414][T20195] netlink: 'syz.4.3915': attribute type 2 has an invalid length. [ 543.326967][T20201] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 543.394480][ T5834] Bluetooth: hci4: command 0x0401 tx timeout [ 543.456665][T20207] __nla_validate_parse: 20 callbacks suppressed [ 543.456686][T20207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3920'. [ 543.485530][T20202] veth5: entered allmulticast mode [ 543.548899][T20207] mac80211_hwsim hwsim56 wlan1: entered allmulticast mode [ 543.661564][T20222] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 543.714937][T20222] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 543.945228][ T5934] IPVS: starting estimator thread 0... [ 544.036742][T20242] IPVS: using max 36 ests per chain, 86400 per kthread [ 544.105723][T20248] team0: Device gtp1 is up. Set it down before adding it as a team port [ 544.188897][T20250] geneve3: entered promiscuous mode [ 544.209608][ T1044] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 38439 - 0 [ 544.227009][ T1044] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 38439 - 0 [ 544.247457][ T1044] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 38439 - 0 [ 544.259167][ T1044] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 38439 - 0 [ 544.378537][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3938'. [ 544.432826][T20266] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3938'. [ 544.551688][T20266] sctp: [Deprecated]: syz.3.3938 (pid 20266) Use of struct sctp_assoc_value in delayed_ack socket option. [ 544.551688][T20266] Use struct sctp_sack_info instead [ 544.616399][T20280] IPVS: set_ctl: invalid protocol: 178 255.255.255.255:20001 [ 544.686353][T20286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3943'. [ 544.743536][T20291] netlink: 'syz.0.3945': attribute type 29 has an invalid length. [ 544.764957][T20291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3945'. [ 544.831452][T20296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3947'. [ 544.895318][T20299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3949'. [ 544.975174][T20305] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3951'. [ 544.989240][ T5834] block nbd3: Receive control failed (result -107) [ 545.034337][T20301] nbd3: detected capacity change from 0 to 127 [ 545.068991][T17887] block nbd3: Dead connection, failed to find a fallback [ 545.081273][T20312] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 545.086846][T17887] block nbd3: shutting down sockets [ 545.090722][T20312] team0: Device macvlan2 is already an upper device of the team interface [ 545.109548][T17887] blk_print_req_error: 138 callbacks suppressed [ 545.109565][T17887] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.145231][T17887] buffer_io_error: 138 callbacks suppressed [ 545.145258][T17887] Buffer I/O error on dev nbd3, logical block 0, async page read [ 545.161390][T17887] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.172654][T17887] Buffer I/O error on dev nbd3, logical block 1, async page read [ 545.183077][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3955'. [ 545.187439][T17887] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.205658][T17887] Buffer I/O error on dev nbd3, logical block 2, async page read [ 545.214790][T17887] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.225231][T17887] Buffer I/O error on dev nbd3, logical block 3, async page read [ 545.226260][T20317] syzkaller0: entered promiscuous mode [ 545.233860][T17887] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.241352][T20317] syzkaller0: entered allmulticast mode [ 545.253808][T17887] Buffer I/O error on dev nbd3, logical block 0, async page read [ 545.267890][T17887] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.280418][T17887] Buffer I/O error on dev nbd3, logical block 1, async page read [ 545.293498][T17887] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.327937][T17887] Buffer I/O error on dev nbd3, logical block 2, async page read [ 545.337310][T17887] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.350345][T17887] Buffer I/O error on dev nbd3, logical block 3, async page read [ 545.388730][T17887] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.407206][T17887] Buffer I/O error on dev nbd3, logical block 0, async page read [ 545.415297][T20324] netlink: 'syz.1.3958': attribute type 10 has an invalid length. [ 545.418705][T17887] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 545.433735][T17887] Buffer I/O error on dev nbd3, logical block 1, async page read [ 545.441052][T20324] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3958'. [ 545.445543][T17887] ldm_validate_partition_table(): Disk read failed. [ 545.472831][T17887] Dev nbd3: unable to read RDB block 0 [ 545.489623][T17887] nbd3: unable to read partition table [ 545.510006][T17887] ldm_validate_partition_table(): Disk read failed. [ 545.517989][T17887] Dev nbd3: unable to read RDB block 0 [ 545.524703][T17887] nbd3: unable to read partition table [ 545.895323][T20354] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 545.990126][T20359] veth0: entered promiscuous mode [ 546.015431][T20358] veth0: left promiscuous mode [ 546.051854][T20362] Cannot find add_set index 2 as target [ 546.273656][T20386] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 547.357770][T20402] tipc: Failed to remove unknown binding: 66,0,0/2886997007:680823918/680823919 [ 547.367614][T20402] tipc: Failed to remove unknown binding: 66,0,0/2886997007:680823918/680823919 [ 547.666174][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ca2f000: rx timeout, send abort [ 548.166252][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ca2dc00: rx timeout, send abort [ 548.177607][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ca2f000: abort rx timeout. Force session deactivation [ 548.675268][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805ca2dc00: abort rx timeout. Force session deactivation [ 549.124669][T20371] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 549.297790][T20421] __nla_validate_parse: 3 callbacks suppressed [ 549.297810][T20421] netlink: 192 bytes leftover after parsing attributes in process `syz.2.3988'. [ 549.398189][T20435] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3987'. [ 549.484087][T20439] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3991'. [ 549.556733][T20439] ip6tnl0: entered allmulticast mode [ 549.725535][T20448] 8021q: VLANs not supported on sit0 [ 549.770144][T20456] netlink: 'syz.1.3995': attribute type 8 has an invalid length. [ 549.807109][T20450] can: request_module (can-proto-0) failed. [ 549.876794][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 549.903246][T20461] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3998'. [ 550.031410][T20473] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4002'. [ 550.622637][T20499] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4009'. [ 550.721048][T20503] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4011'. [ 550.733888][T20503] x_tables: unsorted underflow at hook 2 [ 552.945149][T20463] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 553.135868][T20518] erspan1: entered allmulticast mode [ 553.180857][T20522] netlink: 'syz.3.4018': attribute type 12 has an invalid length. [ 553.192304][T20521] syzkaller0: entered promiscuous mode [ 553.211589][T20521] syzkaller0: entered allmulticast mode [ 553.272045][T20522] bond19: option primary_reselect: invalid value (255) [ 553.288382][T20522] bond19 (unregistering): Released all slaves [ 553.443374][T20546] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4021'. [ 553.457071][T20546] netlink: 'syz.1.4021': attribute type 10 has an invalid length. [ 553.465312][T20546] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4021'. [ 553.490895][T20546] dummy0: entered promiscuous mode [ 553.521306][T20546] bridge0: port 2(dummy0) entered blocking state [ 553.544994][T20546] bridge0: port 2(dummy0) entered disabled state [ 553.556621][T20546] dummy0: entered allmulticast mode [ 553.615331][T20546] bridge0: port 2(dummy0) entered blocking state [ 553.623090][T20546] bridge0: port 2(dummy0) entered forwarding state [ 553.687355][T20554] netlink: 'syz.2.4024': attribute type 4 has an invalid length. [ 553.735531][T20556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4026'. [ 553.748174][T20557] netlink: 'syz.2.4024': attribute type 4 has an invalid length. [ 553.765087][T20550] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 553.812473][T20556] syz_tun: entered promiscuous mode [ 553.839002][T20556] syz_tun: refused to change device tx_queue_len [ 554.670183][T20588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4034'. [ 554.674424][T20589] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4034'. [ 554.701475][T20588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4034'. [ 555.679582][T20596] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.721668][T20598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4037'. [ 555.735703][T20598] netlink: 'syz.3.4037': attribute type 1 has an invalid length. [ 555.747076][T20598] netlink: 'syz.3.4037': attribute type 2 has an invalid length. [ 556.878508][T20565] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 557.074540][T20617] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 0, id = 0 [ 557.116812][T20607] lo speed is unknown, defaulting to 1000 [ 557.298372][T20629] netlink: 'syz.3.4047': attribute type 1 has an invalid length. [ 557.313826][T20629] netlink: 'syz.3.4047': attribute type 2 has an invalid length. [ 557.343898][T20629] netlink: 'syz.3.4047': attribute type 1 has an invalid length. [ 557.364488][T20629] netlink: 'syz.3.4047': attribute type 3 has an invalid length. [ 557.383739][T20629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4047'. [ 557.841212][T20665] netlink: 'syz.1.4055': attribute type 2 has an invalid length. [ 557.854878][T20665] netlink: 'syz.1.4055': attribute type 1 has an invalid length. [ 557.882896][T20607] ip6_vti0 speed is unknown, defaulting to 1000 [ 558.717526][T20676] pim6reg: entered allmulticast mode [ 560.566726][T20649] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.722379][T20693] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 560.789279][T20693] netlink: 'syz.0.4062': attribute type 39 has an invalid length. [ 560.989343][T20709] syzkaller1: entered promiscuous mode [ 561.004423][T20709] syzkaller1: entered allmulticast mode [ 561.224228][T20730] netlink: 'syz.2.4073': attribute type 11 has an invalid length. [ 561.244960][T20730] netlink: 'syz.2.4073': attribute type 4 has an invalid length. [ 561.277620][T20730] netlink: 'syz.2.4073': attribute type 5 has an invalid length. [ 561.293253][T20730] netlink: 'syz.2.4073': attribute type 6 has an invalid length. [ 561.301947][T20730] netlink: 199748 bytes leftover after parsing attributes in process `syz.2.4073'. [ 561.415946][T20741] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 561.622439][T20758] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4081'. [ 561.637006][T20759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4082'. [ 561.648254][T20757] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4081'. [ 561.692523][T20761] syzkaller0: entered promiscuous mode [ 561.700646][T20761] syzkaller0: entered allmulticast mode [ 561.813882][T20768] netlink: 'syz.1.4085': attribute type 1 has an invalid length. [ 561.964136][T20776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4089'. [ 562.034965][T20782] netlink: 1044 bytes leftover after parsing attributes in process `syz.4.4087'. [ 562.263404][T20800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4094'. [ 562.286831][T20800] netlink: 'syz.0.4094': attribute type 5 has an invalid length. [ 562.295161][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4094'. [ 562.380026][T20803] lo speed is unknown, defaulting to 1000 [ 562.705857][T20803] ip6_vti0 speed is unknown, defaulting to 1000 [ 563.069485][T20817] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.4097'. [ 563.169269][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 563.543023][T20820] netlink: 'syz.0.4098': attribute type 1 has an invalid length. [ 563.570915][T20820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4098'. [ 565.051635][T20785] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 565.172692][T20841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 565.242398][T20843] netlink: 'syz.4.4106': attribute type 12 has an invalid length. [ 565.273569][T20843] netlink: 'syz.4.4106': attribute type 12 has an invalid length. [ 565.274511][ T143] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.327835][ T143] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.356289][ T143] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.392423][ T143] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 565.605638][T20873] netlink: 'syz.0.4115': attribute type 10 has an invalid length. [ 565.719185][T20882] FAULT_INJECTION: forcing a failure. [ 565.719185][T20882] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.757574][T20882] CPU: 0 UID: 0 PID: 20882 Comm: syz.2.4117 Not tainted syzkaller #0 PREEMPT(full) [ 565.757599][T20882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 565.757621][T20882] Call Trace: [ 565.757628][T20882] [ 565.757636][T20882] dump_stack_lvl+0xe8/0x150 [ 565.757664][T20882] should_fail_ex+0x412/0x560 [ 565.757691][T20882] _copy_from_user+0x2d/0xb0 [ 565.757717][T20882] ___sys_sendmsg+0x1c6/0x360 [ 565.757738][T20882] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.757758][T20882] ? kstrtouint+0x6e/0xe0 [ 565.757800][T20882] ? __fget_files+0x2a/0x420 [ 565.757824][T20882] ? __fget_files+0x3a0/0x420 [ 565.757857][T20882] __sys_sendmmsg+0x27c/0x4e0 [ 565.757881][T20882] ? __pfx___sys_sendmmsg+0x10/0x10 [ 565.757896][T20882] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 565.757937][T20882] ? ksys_write+0x242/0x270 [ 565.757959][T20882] ? __pfx_ksys_write+0x10/0x10 [ 565.757984][T20882] __x64_sys_sendmmsg+0xa0/0xc0 [ 565.758002][T20882] do_syscall_64+0x14d/0xf80 [ 565.758017][T20882] ? trace_irq_disable+0x3b/0x150 [ 565.758040][T20882] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.758057][T20882] ? clear_bhb_loop+0x40/0x90 [ 565.758078][T20882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.758106][T20882] RIP: 0033:0x7f24bb79c799 [ 565.758123][T20882] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.758136][T20882] RSP: 002b:00007f24bc60f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 565.758155][T20882] RAX: ffffffffffffffda RBX: 00007f24bba16090 RCX: 00007f24bb79c799 [ 565.758167][T20882] RDX: 0000000000000002 RSI: 0000200000000740 RDI: 0000000000000003 [ 565.758179][T20882] RBP: 00007f24bc60f090 R08: 0000000000000000 R09: 0000000000000000 [ 565.758190][T20882] R10: 0000000000044083 R11: 0000000000000246 R12: 0000000000000001 [ 565.758201][T20882] R13: 00007f24bba16128 R14: 00007f24bba16090 R15: 00007ffe346a0e68 [ 565.758229][T20882] [ 565.770035][T20884] syzkaller0: entered promiscuous mode [ 565.987790][T20884] syzkaller0: entered allmulticast mode [ 566.248909][T20912] : renamed from team_slave_1 [ 566.332863][T20917] netlink: 'syz.0.4127': attribute type 10 has an invalid length. [ 566.379051][T20917] bond0: (slave bridge0): Enslaving as an active interface with a down link [ 566.465923][T20922] openvswitch: netlink: Flow key attr not present in new flow. [ 566.664904][T20930] __nla_validate_parse: 5 callbacks suppressed [ 566.664917][T20930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4132'. [ 566.758568][T20937] bridge7: entered promiscuous mode [ 566.764153][T20937] bridge7: entered allmulticast mode [ 566.779348][T20937] team0: Port device bridge7 added [ 566.936528][T20950] netlink: 'syz.3.4141': attribute type 11 has an invalid length. [ 566.950203][T20950] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4141'. [ 567.387022][ T8782] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.525127][T20985] syzkaller0: entered promiscuous mode [ 567.556649][T20985] syzkaller0: entered allmulticast mode [ 567.794837][T21001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4156'. [ 567.799633][T21003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.814848][T21001] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4156'. [ 567.898022][T21010] netlink: 'syz.1.4160': attribute type 10 has an invalid length. [ 567.918143][T21010] bridge0: port 2(dummy0) entered disabled state [ 567.924954][T21010] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.990218][T21010] bridge0: port 2(dummy0) entered blocking state [ 567.997142][T21010] bridge0: port 2(dummy0) entered forwarding state [ 568.004032][T21010] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.011716][T21010] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.039635][T21010] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 568.062215][T21015] netlink: 'syz.2.4163': attribute type 29 has an invalid length. [ 568.071758][T21025] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 568.097826][T21015] netlink: 'syz.2.4163': attribute type 29 has an invalid length. [ 568.137798][T21016] workqueue: Failed to create a rescuer kthread for wq "nfc4_nci_rx_wq": -EINTR [ 568.184235][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 568.201540][ C1] lec:lec_tx_timeout: lec0 [ 568.332491][T21040] netlink: 'syz.3.4168': attribute type 3 has an invalid length. [ 568.353923][T21040] nbd: couldn't find a device at index 0 [ 568.407269][T21044] netlink: 'syz.2.4170': attribute type 4 has an invalid length. [ 568.665454][T21061] tipc: Enabled bearer , priority 0 [ 568.677129][T21061] syzkaller0: entered promiscuous mode [ 568.683026][T21061] syzkaller0: entered allmulticast mode [ 568.721800][T21073] tipc: Resetting bearer [ 568.771907][T21060] tipc: Resetting bearer [ 568.819411][T21060] tipc: Disabling bearer [ 568.832184][T21077] netlink: 'syz.3.4179': attribute type 1 has an invalid length. [ 568.850640][T21077] netlink: 'syz.3.4179': attribute type 7 has an invalid length. [ 568.862261][T21077] netlink: 'syz.3.4179': attribute type 8 has an invalid length. [ 568.875069][T21063] syzkaller0: entered promiscuous mode [ 568.880671][T21063] syzkaller0: entered allmulticast mode [ 568.892997][T21063] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4180'. [ 568.923477][T21077] netlink: 208 bytes leftover after parsing attributes in process `syz.3.4179'. [ 568.939079][T21077] NCSI netlink: No device for ifindex 65584 [ 569.380943][T21098] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4185'. [ 569.447960][T21104] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4187'. [ 569.648385][T21113] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4190'. [ 569.867711][T21136] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4195'. [ 570.788454][T21178] "syz.4.4211" (21178) uses obsolete ecb(arc4) skcipher [ 571.163681][T21218] IPv6: NLM_F_CREATE should be specified when creating new route [ 571.204700][T21218] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 571.212405][T21218] IPv6: NLM_F_CREATE should be set when creating new route [ 571.219940][T21218] IPv6: NLM_F_CREATE should be set when creating new route [ 571.426530][T21237] validate_nla: 2 callbacks suppressed [ 571.426548][T21237] netlink: 'syz.0.4226': attribute type 21 has an invalid length. [ 571.449453][T21237] netlink: 'syz.0.4226': attribute type 21 has an invalid length. [ 571.979292][T21271] __nla_validate_parse: 8 callbacks suppressed [ 571.979309][T21271] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4236'. [ 571.999400][T21271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4236'. [ 572.108311][T21286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4240'. [ 572.121639][T21283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4240'. [ 572.201436][T21282] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4240'. [ 572.211259][T21291] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4238'. [ 572.359813][T21276] syzkaller0: entered promiscuous mode [ 572.368074][T21276] syzkaller0: entered allmulticast mode [ 572.380810][T21296] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4238'. [ 575.264008][T21367] syzkaller0: entered promiscuous mode [ 575.283143][T21367] syzkaller0: entered allmulticast mode [ 575.309878][T21364] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.323614][T21367] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4252'. [ 575.361934][T21366] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.380938][T21360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 575.543583][T21379] openvswitch: netlink: Flow key attr not present in new flow. [ 575.639637][T21383] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4258'. [ 575.788983][T21395] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.940950][T21409] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 576.000971][T21411] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 576.164578][T21421] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 576.603096][T21449] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4280'. [ 576.643449][T21449] bridge_slave_1: left allmulticast mode [ 576.651618][T21449] bridge_slave_1: left promiscuous mode [ 576.662592][T21449] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.673943][T21449] bridge_slave_0: left allmulticast mode [ 576.681342][T21449] bridge_slave_0: left promiscuous mode [ 576.688413][T21449] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.889877][T21464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 577.058805][T21473] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4288'. [ 577.192401][T21479] sch_tbf: burst 4 is lower than device syzkaller0 mtu (1500) ! [ 577.218840][T21479] syzkaller0: entered promiscuous mode [ 577.246064][T21479] syzkaller0: entered allmulticast mode [ 577.403728][T21479] team0 (unregistering): Port device team_slave_0 removed [ 577.470416][T21479] team0 (unregistering): Port device team_slave_1 removed [ 577.809556][T21515] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 577.810806][T21516] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 577.876333][T21530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4300'. [ 577.975787][T21532] tipc: Enabling of bearer rejected, failed to enable media [ 578.003627][T21532] lo: entered allmulticast mode [ 578.019041][T21522] tipc: Enabling of bearer rejected, failed to enable media [ 578.049537][T21532] lo: left allmulticast mode [ 578.072631][T21522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4300'. [ 578.152034][T21541] netlink: 64 bytes leftover after parsing attributes in process `syz.2.4305'. [ 578.277738][T21545] netlink: 7 bytes leftover after parsing attributes in process `syz.1.4307'. [ 578.357374][T21547] tipc: Enabling of bearer rejected, failed to enable media [ 578.803038][T21575] netlink: 'syz.4.4316': attribute type 1 has an invalid length. [ 578.884000][T21575] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4316'. [ 579.113253][T21586] bond4 (unregistering): Released all slaves [ 579.247308][T21598] syzkaller0: entered promiscuous mode [ 579.268006][T21598] syzkaller0: entered allmulticast mode [ 579.605621][T21631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4331'. [ 579.668920][T21631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4331'. [ 579.685823][T21631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4331'. [ 579.726251][T21631] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4331'. [ 579.811268][T21636] netlink: 'syz.3.4332': attribute type 3 has an invalid length. [ 579.836502][T21636] netlink: 'syz.3.4332': attribute type 2 has an invalid length. [ 579.945889][T21646] "syz.4.4334" (21646) uses obsolete ecb(arc4) skcipher [ 580.232648][T21663] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 580.786731][T21713] netlink: 'syz.3.4347': attribute type 9 has an invalid length. [ 581.017471][T21735] 8021q: VLANs not supported on ip_vti0 [ 581.180248][ T30] audit: type=1800 audit(1773268100.593:5): pid=21742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4357" name="memory.events" dev="tmpfs" ino=1427 res=0 errno=0 [ 581.460390][T21766] x_tables: duplicate underflow at hook 1 [ 581.518392][T21770] netlink: 'syz.0.4365': attribute type 1 has an invalid length. [ 581.618532][T21772] netlink: 'syz.1.4366': attribute type 61 has an invalid length. [ 581.789773][T21777] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist [ 581.938821][T21784] netlink: 'syz.0.4372': attribute type 21 has an invalid length. [ 581.989841][T21787] syzkaller0: entered promiscuous mode [ 582.015291][T21787] syzkaller0: entered allmulticast mode [ 582.032082][T21784] syzkaller0: entered promiscuous mode [ 582.038557][T21784] syzkaller0: entered allmulticast mode [ 582.050633][T21787] openvswitch: netlink: IP tunnel dst address not specified [ 582.258665][T21804] __nla_validate_parse: 16 callbacks suppressed [ 582.258684][T21804] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4377'. [ 582.501657][T21819] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 582.650981][T21821] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 582.661607][T21822] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 582.812500][T21837] pim6reg: entered allmulticast mode [ 582.821806][T21834] netlink: 'syz.0.4385': attribute type 9 has an invalid length. [ 582.823048][T21837] netlink: 'syz.3.4386': attribute type 1 has an invalid length. [ 582.882236][T21837] 8021q: adding VLAN 0 to HW filter on device bond19 [ 582.957944][T21842] 8021q: adding VLAN 0 to HW filter on device bond19 [ 583.016665][T21852] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4385'. [ 583.020533][T21842] bond19: (slave vxcan1): The slave device specified does not support setting the MAC address [ 583.042820][T21854] netlink: 'syz.2.4391': attribute type 3 has an invalid length. [ 583.045320][T21842] bond19: (slave vxcan1): Error -95 calling set_mac_address [ 583.130131][T21837] veth3: entered promiscuous mode [ 583.147248][T21837] bond19: (slave veth3): Enslaving as an active interface with a down link [ 583.181612][T21850] vlan4: entered allmulticast mode [ 583.191181][T21850] bond19: entered allmulticast mode [ 583.442664][T21866] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.470968][T21865] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 583.500930][T21872] bond5: Removing last ns target with arp_interval on [ 583.513866][ T30] audit: type=1107 audit(1773268102.913:6): pid=21876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='(fS<ӯ3>Ey+r_!O*†PqVI*QzXL}, _rJ^3/l¹J4-ˁa&IzڍE/zT [ 583.513866][ T30] !` SkΊc( 'sÇm]CImFҷ)OI^4}nT "@qqߐ}su HVαb]Q> [ 583.513866][ T30] cD+aw6_p{%D\*Pb E';,' [ 583.738089][T21855] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4390'. [ 583.918701][T21902] tipc: Enabled bearer , priority 0 [ 583.927874][T21902] syzkaller0: entered promiscuous mode [ 583.933562][T21902] syzkaller0: entered allmulticast mode [ 583.953074][T21901] tipc: Resetting bearer [ 583.980153][T21901] tipc: Disabling bearer [ 584.259112][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4407'. [ 584.269388][T21920] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4407'. [ 584.282914][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4407'. [ 584.296395][T21920] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4407'. [ 584.306065][T21920] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4407'. [ 584.739580][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4417'. [ 584.782541][T21947] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4417'. [ 585.973210][T21999] syzkaller0: entered promiscuous mode [ 585.984894][T21999] syzkaller0: entered allmulticast mode [ 588.577590][T22031] __nla_validate_parse: 7 callbacks suppressed [ 588.577608][T22031] netlink: 207952 bytes leftover after parsing attributes in process `syz.4.4441'. [ 588.612738][T22036] syzkaller0: entered promiscuous mode [ 588.626276][T22036] syzkaller0: entered allmulticast mode [ 588.655641][T22044] validate_nla: 2 callbacks suppressed [ 588.655662][T22044] netlink: 'syz.3.4444': attribute type 10 has an invalid length. [ 588.688059][T22044] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4444'. [ 588.704121][T22031] netlink: 'syz.4.4441': attribute type 9 has an invalid length. [ 588.716770][T22031] netlink: 'syz.4.4441': attribute type 11 has an invalid length. [ 588.732582][T22031] netlink: 'syz.4.4441': attribute type 12 has an invalid length. [ 588.751268][T22046] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4446'. [ 588.804484][T22031] netlink: 211404 bytes leftover after parsing attributes in process `syz.4.4441'. [ 588.873389][T22044] dummy0: entered promiscuous mode [ 588.881257][T22044] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 589.510502][T22085] syzkaller0: entered promiscuous mode [ 589.518386][T22085] syzkaller0: entered allmulticast mode [ 589.732154][T22097] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4461'. [ 589.746161][T22098] netlink: 'syz.0.4463': attribute type 10 has an invalid length. [ 589.797957][T22098] bond0: (slave ): Enslaving as an active interface with a down link [ 589.851180][T22105] netlink: 'syz.1.4464': attribute type 1 has an invalid length. [ 589.860015][T22105] netlink: 'syz.1.4464': attribute type 2 has an invalid length. [ 589.871319][T22105] netlink: 'syz.1.4464': attribute type 1 has an invalid length. [ 589.954604][T22105] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4464'. [ 589.965721][T22108] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4465'. [ 589.997462][T22111] netlink: 'syz.0.4467': attribute type 5 has an invalid length. [ 590.034662][T22115] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4466'. [ 590.093255][T22105] bond4: option xmit_hash_policy: invalid value (64) [ 590.107858][T22105] bond4 (unregistering): Released all slaves [ 590.208541][T22125] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4470'. [ 590.283506][T22130] netlink: get zone limit has 4 unknown bytes [ 590.317610][T22133] syzkaller0: entered promiscuous mode [ 590.346172][T22133] syzkaller0: entered allmulticast mode [ 590.881172][T22181] netlink: 'syz.1.4486': attribute type 23 has an invalid length. [ 591.002400][T22187] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4487'. [ 591.057031][T22193] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 591.099537][T22186] syzkaller0: entered promiscuous mode [ 591.110004][T22198] xt_ecn: cannot match TCP bits for non-tcp packets [ 591.111315][T22186] syzkaller0: entered allmulticast mode [ 591.863430][T22235] 8021q: VLANs not supported on ipvlan0 [ 591.968540][T22241] Cannot find add_set index 2 as target [ 592.072264][T22250] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 593.074441][ T5834] Bluetooth: hci0: command 0x0c20 tx timeout [ 594.055634][T22328] __nla_validate_parse: 7 callbacks suppressed [ 594.055654][T22328] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4531'. [ 594.178192][T22335] syzkaller1: entered promiscuous mode [ 594.193235][T22335] syzkaller1: entered allmulticast mode [ 594.275450][T22339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.372647][T22344] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4539'. [ 594.383852][T22342] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4539'. [ 594.440032][T22349] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4539'. [ 594.458617][T22349] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4539'. [ 594.522394][T22357] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4541'. [ 594.988993][T22383] xt_l2tp: v2 tid > 0xffff: 1114244 [ 594.992766][T22391] validate_nla: 5 callbacks suppressed [ 594.992784][T22391] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 595.063360][T22392] gretap2: entered promiscuous mode [ 595.092480][T22391] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 595.157840][ T5834] Bluetooth: hci0: command 0x0c20 tx timeout [ 595.158460][T22395] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4553'. [ 595.175791][T22401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4554'. [ 595.195012][T22401] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4554'. [ 595.265803][T22406] xt_nat: multiple ranges no longer supported [ 595.300301][T22401] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4554'. [ 595.350573][T22409] netlink: 'syz.3.4557': attribute type 2 has an invalid length. [ 595.492775][T22418] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 595.653549][T22432] netlink: 'syz.3.4568': attribute type 16 has an invalid length. [ 595.665703][T22432] netlink: 'syz.3.4568': attribute type 3 has an invalid length. [ 595.814923][T22443] vlan4: entered allmulticast mode [ 595.821328][T22443] veth1_to_hsr: entered allmulticast mode [ 596.193535][T21667] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.217235][T21667] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.248366][T21667] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 596.970652][ T5934] IPVS: starting estimator thread 0... [ 597.085602][T22520] IPVS: using max 41 ests per chain, 98400 per kthread [ 597.416817][T22534] syzkaller0: entered promiscuous mode [ 597.422542][T22534] syzkaller0: entered allmulticast mode [ 599.835268][T11681] lec:lec_start_xmit: lec0:No lecd attached [ 600.558879][T22604] __nla_validate_parse: 9 callbacks suppressed [ 600.558898][T22604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4612'. [ 600.627563][T22604] 0 (unregistering): left promiscuous mode [ 600.663215][T22614] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4615'. [ 600.674120][T22615] syzkaller0: entered promiscuous mode [ 600.684969][T22615] syzkaller0: entered allmulticast mode [ 600.782078][T22614] vxcan0: entered allmulticast mode [ 600.869611][T22624] tipc: Enabled bearer , priority 10 [ 601.010129][T22634] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4620'. [ 601.122451][T22640] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4624'. [ 601.166052][T22649] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.252511][T22649] bridge_slave_0 (unregistering): left allmulticast mode [ 601.261945][T22649] bridge_slave_0 (unregistering): left promiscuous mode [ 601.271356][T22649] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.885020][ T10] tipc: Node number set to 2288556196 [ 604.062606][T22640] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 604.286838][T22689] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4638'. [ 604.305723][T22691] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4641'. [ 604.348858][T22693] lo speed is unknown, defaulting to 1000 [ 604.543910][T22709] tipc: Enabled bearer , priority 0 [ 604.557571][T22709] syzkaller0: entered promiscuous mode [ 604.564718][T22709] syzkaller0: entered allmulticast mode [ 604.607269][T22716] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4645'. [ 604.639993][T22709] tipc: Resetting bearer [ 604.671350][T22708] tipc: Resetting bearer [ 604.750193][T22708] tipc: Disabling bearer [ 604.790067][T22720] tipc: Started in network mode [ 604.795489][T22720] tipc: Node identity e0000001, cluster identity 4711 [ 604.805947][T22720] tipc: Enabling of bearer rejected, failed to enable media [ 604.831354][T22723] netlink: 'syz.1.4650': attribute type 1 has an invalid length. [ 604.849016][T22720] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4649'. [ 604.862146][T22720] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4649'. [ 604.880666][T22723] 8021q: adding VLAN 0 to HW filter on device bond4 [ 604.907574][T22723] vlan1: entered promiscuous mode [ 604.917198][T22723] bond4: entered promiscuous mode [ 604.926867][T22723] vlan1: entered allmulticast mode [ 604.940790][T22723] bond4: entered allmulticast mode [ 604.989537][T22725] bond4: (slave bridge9): making interface the new active one [ 605.000265][T22725] bridge9: entered promiscuous mode [ 605.011104][T22725] bridge9: entered allmulticast mode [ 605.021135][T22725] bond4: (slave bridge9): Enslaving as an active interface with an up link [ 605.074641][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5250 ms [ 605.084279][ C1] lec:lec_tx_timeout: lec0 [ 605.107419][T22733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4653'. [ 605.169345][T22733] hsr_slave_0 (unregistering): left promiscuous mode [ 605.337733][T22693] ip6_vti0 speed is unknown, defaulting to 1000 [ 605.602884][T22759] netlink: 'syz.1.4661': attribute type 1 has an invalid length. [ 605.637134][T22759] bond5: entered promiscuous mode [ 605.643081][T22759] 8021q: adding VLAN 0 to HW filter on device bond5 [ 605.746660][T22769] bond5: (slave bridge10): making interface the new active one [ 605.764997][T22769] bridge10: entered promiscuous mode [ 605.772121][T22769] bond5: (slave bridge10): Enslaving as an active interface with an up link [ 605.972680][T22777] __nla_validate_parse: 1 callbacks suppressed [ 605.972701][T22777] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.4662'. [ 606.637405][T22795] netlink: 14544 bytes leftover after parsing attributes in process `syz.1.4670'. [ 606.697110][T22795] netlink: 'syz.1.4670': attribute type 14 has an invalid length. [ 606.751385][T22801] netlink: 'syz.3.4673': attribute type 1 has an invalid length. [ 606.778187][T22801] netlink: 'syz.3.4673': attribute type 1 has an invalid length. [ 606.792231][T22797] syzkaller0: entered promiscuous mode [ 606.798420][T22797] syzkaller0: entered allmulticast mode [ 606.824971][T22797] 0: reclassify loop, rule prio 0, protocol 800 [ 606.941669][T22806] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4675'. [ 606.952960][T22806] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4675'. [ 607.362528][T22826] sctp: [Deprecated]: syz.0.4680 (pid 22826) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.362528][T22826] Use struct sctp_sack_info instead [ 607.376627][T22829] netlink: 'syz.4.4678': attribute type 10 has an invalid length. [ 607.414932][T22829] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4678'. [ 607.423615][T22827] sctp: [Deprecated]: syz.0.4680 (pid 22827) Use of struct sctp_assoc_value in delayed_ack socket option. [ 607.423615][T22827] Use struct sctp_sack_info instead [ 607.560084][T22846] netlink: 'syz.3.4683': attribute type 23 has an invalid length. [ 609.913804][T22829] dummy0: entered promiscuous mode [ 609.921795][T22829] bridge0: port 1(dummy0) entered blocking state [ 609.928487][T22829] bridge0: port 1(dummy0) entered disabled state [ 609.935298][T22829] dummy0: entered allmulticast mode [ 609.942188][T22829] bridge0: port 1(dummy0) entered blocking state [ 609.948865][T22829] bridge0: port 1(dummy0) entered forwarding state [ 610.180838][T22871] netlink: 'syz.2.4688': attribute type 1 has an invalid length. [ 610.352919][T22881] netlink: 'syz.4.4693': attribute type 1 has an invalid length. [ 610.437311][T22862] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4685'. [ 610.611362][T22892] ip6t_rpfilter: unknown options [ 610.618753][T22892] xt_hashlimit: overflow, try lower: 3/0 [ 610.792108][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4700'. [ 610.947165][T22921] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4706'. [ 610.973083][T22920] sctp: [Deprecated]: syz.0.4704 (pid 22920) Use of struct sctp_assoc_value in delayed_ack socket option. [ 610.973083][T22920] Use struct sctp_sack_info instead [ 611.028932][T22923] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4708'. [ 611.035668][T22925] sctp: [Deprecated]: syz.3.4710 (pid 22925) Use of struct sctp_assoc_value in delayed_ack socket option. [ 611.035668][T22925] Use struct sctp_sack_info instead [ 611.111853][T22926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4710'. [ 611.235639][T22938] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4712'. [ 611.268072][T22940] openvswitch: netlink: ct_state flags 010000e0 unsupported [ 611.292430][T22943] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4713'. [ 611.371504][T22943] bond20: entered promiscuous mode [ 611.407798][T22943] 8021q: adding VLAN 0 to HW filter on device bond20 [ 611.538277][T22963] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 611.625888][T22969] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4720'. [ 611.787024][T22975] x_tables: unsorted underflow at hook 3 [ 611.851873][T22978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4724'. [ 611.861742][T22978] netlink: 'syz.0.4724': attribute type 30 has an invalid length. [ 611.879722][T22981] 8021q: VLANs not supported on xfrm0 [ 611.903235][T22984] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4724'. [ 611.965171][T22984] netlink: 'syz.0.4724': attribute type 30 has an invalid length. [ 611.976757][T21672] netdevsim netdevsim0 : set [0, 0] type 1 family 0 port 8472 - 0 [ 611.985936][T21672] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.022242][T22985] pim6reg1: entered promiscuous mode [ 612.028176][T22985] pim6reg1: entered allmulticast mode [ 612.137422][T21672] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.160242][T21672] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.169565][T23002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4728'. [ 612.281624][T23010] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4731'. [ 612.390378][T23017] xt_hashlimit: size too large, truncated to 1048576 [ 612.822751][T23032] veth7: entered allmulticast mode [ 613.107471][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4745'. [ 613.141369][T23058] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 613.199945][T23058] veth0_to_team: entered promiscuous mode [ 613.214609][T23058] veth0_to_team: left promiscuous mode [ 613.260806][T23062] lo speed is unknown, defaulting to 1000 [ 613.644071][T23062] ip6_vti0 speed is unknown, defaulting to 1000 [ 613.949189][T23088] 8021q: adding VLAN 0 to HW filter on device bond2 [ 616.141343][T23063] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 616.441849][T23122] __nla_validate_parse: 8 callbacks suppressed [ 616.441866][T23122] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4760'. [ 616.494977][T23124] IPv6: sit1: Disabled Multicast RS [ 616.502689][T23124] sit1: entered allmulticast mode [ 616.613842][T23128] netlink: 212 bytes leftover after parsing attributes in process `syz.4.4763'. [ 616.648225][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4763'. [ 616.725792][T23128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4763'. [ 617.117965][T23169] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4776'. [ 617.352758][T23184] netlink: 'syz.2.4781': attribute type 39 has an invalid length. [ 617.620508][T23205] netlink: 'syz.1.4790': attribute type 2 has an invalid length. [ 617.631675][T23208] netlink: 'syz.4.4788': attribute type 1 has an invalid length. [ 617.645415][T23208] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4788'. [ 617.672435][T23205] netlink: 'syz.1.4790': attribute type 11 has an invalid length. [ 617.698216][T23205] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4790'. [ 617.837001][T23217] netlink: 'syz.4.4792': attribute type 75 has an invalid length. [ 617.982092][T23224] FAULT_INJECTION: forcing a failure. [ 617.982092][T23224] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 618.012132][T23224] CPU: 1 UID: 0 PID: 23224 Comm: syz.1.4795 Not tainted syzkaller #0 PREEMPT(full) [ 618.012158][T23224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 618.012167][T23224] Call Trace: [ 618.012174][T23224] [ 618.012182][T23224] dump_stack_lvl+0xe8/0x150 [ 618.012209][T23224] should_fail_ex+0x412/0x560 [ 618.012232][T23224] _copy_from_user+0x2d/0xb0 [ 618.012259][T23224] __sys_sendto+0x2b0/0x710 [ 618.012285][T23224] ? __pfx___sys_sendto+0x10/0x10 [ 618.012307][T23224] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 618.012331][T23224] ? __fget_files+0x3a0/0x420 [ 618.012364][T23224] ? ksys_write+0x242/0x270 [ 618.012385][T23224] ? __pfx_ksys_write+0x10/0x10 [ 618.012407][T23224] __x64_sys_sendto+0xde/0x100 [ 618.012431][T23224] do_syscall_64+0x14d/0xf80 [ 618.012445][T23224] ? trace_irq_disable+0x3b/0x150 [ 618.012469][T23224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.012486][T23224] ? clear_bhb_loop+0x40/0x90 [ 618.012506][T23224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.012534][T23224] RIP: 0033:0x7f4a7b59c799 [ 618.012551][T23224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.012566][T23224] RSP: 002b:00007f4a7c471028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 618.012584][T23224] RAX: ffffffffffffffda RBX: 00007f4a7b815fa0 RCX: 00007f4a7b59c799 [ 618.012596][T23224] RDX: 000000000000ffe0 RSI: 0000200000000100 RDI: 0000000000000004 [ 618.012606][T23224] RBP: 00007f4a7c471090 R08: 0000200000000140 R09: 000000000000001c [ 618.012617][T23224] R10: 000000002000c851 R11: 0000000000000246 R12: 0000000000000001 [ 618.012627][T23224] R13: 00007f4a7b816038 R14: 00007f4a7b815fa0 R15: 00007fffdf65a8c8 [ 618.012652][T23224] [ 618.367966][T23236] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4799'. [ 618.391029][T23241] netlink: 'syz.1.4800': attribute type 14 has an invalid length. [ 618.399269][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4800'. [ 618.423297][T23241] netlink: 'syz.1.4800': attribute type 14 has an invalid length. [ 618.439638][T23241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4800'. [ 618.520684][T23247] syzkaller0: entered promiscuous mode [ 618.526890][T23249] netlink: zone id is out of range [ 618.526907][T23249] netlink: zone id is out of range [ 618.526915][T23249] netlink: zone id is out of range [ 618.526923][T23249] netlink: zone id is out of range [ 618.526933][T23249] netlink: zone id is out of range [ 618.526941][T23249] netlink: zone id is out of range [ 618.526949][T23249] netlink: zone id is out of range [ 618.526957][T23249] netlink: zone id is out of range [ 618.526967][T23249] netlink: zone id is out of range [ 618.526977][T23249] netlink: zone id is out of range [ 618.590877][T23247] syzkaller0: entered allmulticast mode [ 618.599151][ T5834] block nbd4: Receive control failed (result -32) [ 618.812077][T23258] syzkaller0: entered promiscuous mode [ 618.823406][T23258] syzkaller0: entered allmulticast mode [ 619.257019][T23291] netlink: 'syz.1.4815': attribute type 7 has an invalid length. [ 619.325609][T23291] netlink: 'syz.1.4815': attribute type 7 has an invalid length. [ 619.385572][T23280] bond6: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 619.430760][T23280] bond6: (slave lo): Enslaving as an active interface with an up link [ 619.843049][T23325] tipc: Enabling of bearer rejected, failed to enable media [ 620.497487][T23343] netlink: 'syz.3.4832': attribute type 4 has an invalid length. [ 620.855383][T23368] 8021q: VLANs not supported on lo [ 620.928601][T23375] xt_hashlimit: size too large, truncated to 1048576 [ 621.021442][T23380] 8021q: adding VLAN 0 to HW filter on device bond7 [ 624.600954][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 630.114257][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5510 ms [ 630.122660][ C1] lec:lec_tx_timeout: lec0 [ 644.589818][T23399] x_tables: duplicate underflow at hook 1 [ 644.608226][T23395] FAULT_INJECTION: forcing a failure. [ 644.608226][T23395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.622489][T23395] CPU: 1 UID: 0 PID: 23395 Comm: syz.1.4842 Not tainted syzkaller #0 PREEMPT(full) [ 644.622510][T23395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/27/2026 [ 644.622520][T23395] Call Trace: [ 644.622527][T23395] [ 644.622534][T23395] dump_stack_lvl+0xe8/0x150 [ 644.622560][T23395] should_fail_ex+0x412/0x560 [ 644.622585][T23395] _copy_from_user+0x2d/0xb0 [ 644.622612][T23395] ___sys_sendmsg+0x1c6/0x360 [ 644.622634][T23395] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.622682][T23395] ? __fget_files+0x2a/0x420 [ 644.622706][T23395] ? __fget_files+0x3a0/0x420 [ 644.622738][T23395] __x64_sys_sendmsg+0x1bd/0x2a0 [ 644.622757][T23395] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.622783][T23395] ? __pfx_ksys_write+0x10/0x10 [ 644.622812][T23395] do_syscall_64+0x14d/0xf80 [ 644.622828][T23395] ? trace_irq_disable+0x3b/0x150 [ 644.622851][T23395] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.622868][T23395] ? clear_bhb_loop+0x40/0x90 [ 644.622889][T23395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.622905][T23395] RIP: 0033:0x7f4a7b59c799 [ 644.622932][T23395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.622946][T23395] RSP: 002b:00007f4a7c471028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.622964][T23395] RAX: ffffffffffffffda RBX: 00007f4a7b815fa0 RCX: 00007f4a7b59c799 [ 644.622976][T23395] RDX: 0000000000000840 RSI: 0000200000000200 RDI: 0000000000000005 [ 644.622987][T23395] RBP: 00007f4a7c471090 R08: 0000000000000000 R09: 0000000000000000 [ 644.622997][T23395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.623007][T23395] R13: 00007f4a7b816038 R14: 00007f4a7b815fa0 R15: 00007fffdf65a8c8 [ 644.623035][T23395] [ 644.897182][T23412] validate_nla: 2 callbacks suppressed [ 644.897196][T23412] netlink: 'syz.4.4846': attribute type 4 has an invalid length. [ 644.898430][T23411] netlink: 'syz.4.4846': attribute type 4 has an invalid length. [ 645.045565][T23416] net_ratelimit: 134 callbacks suppressed [ 645.045585][T23416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 645.090834][T23421] syzkaller0: entered promiscuous mode [ 645.098036][T23421] syzkaller0: entered allmulticast mode [ 645.116426][T23419] __nla_validate_parse: 8 callbacks suppressed [ 645.116445][T23419] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4849'. [ 645.145857][T23426] netlink: 'syz.4.4850': attribute type 1 has an invalid length. [ 645.217074][T23427] bond6: (slave vcan1): The slave device specified does not support setting the MAC address [ 645.234431][T23427] bond6: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 645.276834][T23427] bond6: (slave vcan1): making interface the new active one [ 645.289936][T23438] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4852'. [ 645.291780][T23427] bond6: (slave vcan1): Enslaving as an active interface with an up link [ 645.311599][T23432] bridge0: port 4(veth0_to_bridge) entered blocking state [ 645.319859][T23432] bridge0: port 4(veth0_to_bridge) entered disabled state [ 645.345797][T23432] veth0_to_bridge: entered allmulticast mode [ 645.386951][T23432] veth0_to_bridge: entered promiscuous mode [ 645.403934][T23432] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 645.436732][T23432] bridge0: port 4(veth0_to_bridge) entered blocking state [ 645.444169][T23432] bridge0: port 4(veth0_to_bridge) entered forwarding state [ 645.776451][T23458] syzkaller0: entered promiscuous mode [ 645.782179][T23458] syzkaller0: entered allmulticast mode [ 647.235571][ T5837] Bluetooth: hci3: command 0x0406 tx timeout [ 648.361173][T23471] netlink: 'syz.1.4858': attribute type 29 has an invalid length. [ 648.548669][T23491] syzkaller0: entered promiscuous mode [ 648.558540][T23493] netlink: 'syz.4.4863': attribute type 1 has an invalid length. [ 648.577990][T23495] IPv6: NLM_F_CREATE should be specified when creating new route [ 648.589361][T23495] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 648.594446][T23491] syzkaller0: entered allmulticast mode [ 648.598174][T23495] IPv6: NLM_F_CREATE should be set when creating new route [ 648.605120][T23493] netlink: 2108 bytes leftover after parsing attributes in process `syz.4.4863'. [ 648.929356][T23507] netlink: 'syz.4.4871': attribute type 1 has an invalid length. [ 648.950463][T23511] netlink: 'syz.2.4872': attribute type 1 has an invalid length. [ 649.126887][T23511] bond4: entered promiscuous mode [ 649.132861][T23511] 8021q: adding VLAN 0 to HW filter on device bond4 [ 649.148543][T23524] ipvlan2: entered allmulticast mode [ 649.161070][T23524] bond4: entered allmulticast mode [ 649.188611][T23531] bond4: (slave bridge2): making interface the new active one [ 649.196496][T23531] bridge2: entered promiscuous mode [ 649.214758][T23511] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4872'. [ 649.253812][T23531] bridge2: entered allmulticast mode [ 649.266229][T23531] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 649.336215][T23511] hsr_slave_0 (unregistering): left promiscuous mode [ 649.349155][T23524] bridge0: entered allmulticast mode [ 649.391976][T23541] bond7: option packets_per_slave: invalid value (18446744073709551615) [ 649.405461][T23541] bond7: option packets_per_slave: allowed values 0 - 65535 [ 649.416174][T23552] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4881'. [ 649.428329][T23541] bond7 (unregistering): Released all slaves [ 649.608298][T23559] netlink: 'syz.0.4885': attribute type 1 has an invalid length. [ 649.663483][T23559] bond3: entered promiscuous mode [ 649.678857][T23559] 8021q: adding VLAN 0 to HW filter on device bond3 [ 649.707273][T23563] xt_hashlimit: overflow, rate too high: 0 [ 649.761903][T23563] bridge0: port 1(dummy0) entered disabled state [ 650.466789][T23594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4896'. [ 650.475636][T23602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.479509][T23603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 650.508800][T23604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4900'. [ 650.529449][T23604] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4900'. [ 650.829185][T23623] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4905'. [ 650.860748][T23624] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4907'. [ 650.898029][T23624] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4907'. [ 650.930273][T23624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4907'. [ 650.955395][T23630] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 651.011806][T23637] netlink: 92 bytes leftover after parsing attributes in process `syz.0.4910'. [ 651.195669][T23624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.204392][T23624] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.217682][T23642] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4912'. [ 651.229769][T23624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.237953][T23624] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.246983][T23624] batman_adv: batadv0: Removing interface: netdevsim0 [ 651.300956][T21672] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.323775][T21672] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.351571][T21672] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.375648][T21672] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.387049][T21672] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.398420][T21672] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.428434][T21672] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 651.442453][T21672] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 651.507806][T23653] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4915'. [ 651.735336][T23672] sctp: [Deprecated]: syz.0.4921 (pid 23672) Use of int in max_burst socket option. [ 651.735336][T23672] Use struct sctp_assoc_value instead [ 652.268892][T23717] netlink: 'syz.1.4933': attribute type 5 has an invalid length. [ 652.433140][T23731] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 652.542428][T23731] lo speed is unknown, defaulting to 1000 [ 653.256035][T23769] openvswitch: netlink: Missing valid actions attribute. [ 653.286938][T23769] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 653.288972][T23771] 8021q: VLANs not supported on ip_vti0 [ 653.316668][T23773] netlink: 'syz.3.4948': attribute type 1 has an invalid length. [ 653.439474][T23777] bond22: (slave gretap2): making interface the new active one [ 653.490100][T23777] bond22: (slave gretap2): Enslaving as an active interface with an up link [ 653.870543][T23805] netlink: 'syz.3.4955': attribute type 1 has an invalid length. [ 654.031115][T23805] 8021q: adding VLAN 0 to HW filter on device bond23 [ 654.073031][T23731] ip6_vti0 speed is unknown, defaulting to 1000 [ 654.183429][T23814] syzkaller0: entered promiscuous mode [ 654.202409][T23814] syzkaller0: entered allmulticast mode [ 654.222033][T23815] 0: reclassify loop, rule prio 0, protocol 800 [ 655.269917][T23874] netlink: 'syz.3.4973': attribute type 1 has an invalid length. [ 655.298693][ T30] audit: type=1107 audit(1773268174.713:7): pid=23875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='[->zKek{?J|8h~|zg^ [ 655.298693][ T30] ^ǕV cTY4MҘ'0;n71[WO-گ4(;>[oAb^h /.WB*{{ [ 655.298693][ T30] % Jc' [ 655.425878][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 655.439083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 655.451753][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 655.464893][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 655.478201][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 655.491497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 655.504562][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 655.525013][T23871] syzkaller1: entered promiscuous mode [ 655.540410][T23871] syzkaller1: entered allmulticast mode [ 655.618476][T23888] netlink: 'syz.0.4976': attribute type 1 has an invalid length. [ 655.715567][T23888] __nla_validate_parse: 15 callbacks suppressed [ 655.715584][T23888] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4976'. [ 655.818831][T23889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4976'. [ 656.109572][T23897] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4979'. [ 656.177870][T23897] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4979'. [ 657.076260][T23902] xt_CONNSECMARK: invalid mode: 0 [ 658.264234][ C0] net_ratelimit: 9713 callbacks suppressed [ 658.264254][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 658.264447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 658.270996][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 658.284271][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 658.298976][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 658.311892][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 658.324590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 658.336852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 658.349032][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 658.361565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 662.742347][ C1] sched: DL replenish lagged too much [ 663.274421][ C1] net_ratelimit: 19767 callbacks suppressed [ 663.274443][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 663.274575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 663.281101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 663.294556][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 663.307317][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 663.319716][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 663.332037][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 663.344363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 663.358222][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 663.370028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.284261][ C1] net_ratelimit: 19941 callbacks suppressed [ 668.284291][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.284571][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.290865][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.303924][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.315746][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.327930][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.340090][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.353350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.365839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 668.378024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.294210][ C0] net_ratelimit: 20096 callbacks suppressed [ 673.294230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.294286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.300883][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.313279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.325305][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.337352][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.349867][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.362139][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.374353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 673.386695][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.304441][ C1] net_ratelimit: 20071 callbacks suppressed [ 678.304461][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.304570][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.311152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.324197][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.336487][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.348498][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.360854][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.373426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.386398][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 678.398649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.314368][ C1] net_ratelimit: 19493 callbacks suppressed [ 683.314389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.314508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.321326][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.333776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.345801][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.358488][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.370954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.383703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.396386][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 683.409709][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.324412][ C0] net_ratelimit: 20174 callbacks suppressed [ 688.324434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.324478][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.331208][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.343305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.356729][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.367677][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.380821][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.393391][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.405598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 688.417903][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 692.244536][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 693.334157][ C1] net_ratelimit: 20125 callbacks suppressed [ 693.334178][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 693.334524][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 693.340806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 693.353193][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 693.365173][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 693.378894][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 693.389986][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 693.402802][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 693.415238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 693.427749][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 697.255233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 697.264076][ C1] lec:lec_tx_timeout: lec0 [ 698.344259][ C1] net_ratelimit: 20035 callbacks suppressed [ 698.344279][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 698.344508][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 698.350931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 698.363028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 698.375839][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 698.388466][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 698.400885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 698.413066][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 698.425288][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 698.437652][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.354424][ C0] net_ratelimit: 19937 callbacks suppressed [ 703.354434][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.354444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.354844][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.361054][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.376296][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.391004][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.404230][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.417331][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.429725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 703.442213][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.364239][ C1] net_ratelimit: 20055 callbacks suppressed [ 708.364260][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.364442][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.370690][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.383456][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.395713][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.407908][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.419973][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.432683][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.444706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 708.457510][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.374451][ C1] net_ratelimit: 20227 callbacks suppressed [ 713.374471][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.374515][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.381369][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.394027][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.406603][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.418896][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.431083][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.444337][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.456247][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 713.469204][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.384383][ C1] net_ratelimit: 20076 callbacks suppressed [ 718.384403][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.384482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.390943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.404845][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.416706][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.428717][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.441452][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.454087][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.466525][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 718.480728][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.394357][ C0] net_ratelimit: 19278 callbacks suppressed [ 723.394378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.394423][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.401201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.414898][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.427760][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.440433][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.452680][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.468134][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.481848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 723.495597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.404390][ C1] net_ratelimit: 20195 callbacks suppressed [ 728.404411][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.404467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.411417][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.423835][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.436243][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.448968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.461650][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.474613][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.488261][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 728.499655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 733.414156][ C0] net_ratelimit: 20180 callbacks suppressed [ 733.414177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 733.414441][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 733.421622][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 733.434576][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 733.446687][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 733.459915][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 733.473589][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 733.489152][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 733.501689][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 733.514537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 734.007536][T11681] lec:lec_start_xmit: lec0:No lecd attached [ 738.424255][ C1] net_ratelimit: 18597 callbacks suppressed [ 738.424276][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 738.424552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 738.430966][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 738.443677][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 738.455760][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 738.469704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 738.482590][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 738.495573][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 738.507984][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 738.520616][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 739.080907][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 739.089225][ C1] lec:lec_tx_timeout: lec0 [ 743.434384][ C1] net_ratelimit: 15469 callbacks suppressed [ 743.434404][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 743.434478][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 743.440869][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 743.453740][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 743.466091][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 743.480587][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 743.491565][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 743.504663][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 743.518332][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 743.531129][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.444177][ C0] net_ratelimit: 15657 callbacks suppressed [ 748.444197][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.444488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 748.451795][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 748.463497][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 748.477278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 748.489335][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 748.502532][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 748.514972][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 748.529282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 748.539748][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 750.015904][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 753.454187][ C0] net_ratelimit: 15773 callbacks suppressed [ 753.454208][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.454422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 753.462279][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 753.473684][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 753.486382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 753.499347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 753.511988][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 753.525393][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 753.540123][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 753.551674][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 755.080206][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 755.088666][ C1] lec:lec_tx_timeout: lec0 [ 758.464334][ C1] net_ratelimit: 15484 callbacks suppressed [ 758.464354][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 758.464444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 758.471017][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 758.483482][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 758.495750][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 758.508057][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.521079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 758.534725][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 758.545470][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 758.557916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 763.474187][ C0] net_ratelimit: 15260 callbacks suppressed [ 763.474207][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 763.475419][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 763.481078][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 763.495939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 763.508348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.521881][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 763.536583][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 763.547820][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 763.559877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 763.572140][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 768.484399][ C1] net_ratelimit: 14996 callbacks suppressed [ 768.484422][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 768.484838][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 768.491711][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 768.503936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 768.519447][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 768.533606][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.546382][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 768.560877][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 768.574164][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 768.589468][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 773.494345][ C1] net_ratelimit: 15384 callbacks suppressed [ 773.494349][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 773.494365][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 773.501773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.514745][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 773.530065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 773.542494][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 773.556091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 773.568992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 773.582329][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.595286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 778.504484][ C1] net_ratelimit: 15207 callbacks suppressed [ 778.504506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 778.505363][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 778.511218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 778.523995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 778.536462][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 778.549380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.562129][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 778.576262][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.589937][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 778.607365][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 780.384100][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 780.392147][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P23731/1:b..l [ 780.403929][ C1] rcu: (detected by 1, t=10503 jiffies, g=100113, q=2460 ncpus=2) [ 780.414318][ C1] task:syz.1.4936 state:R running task stack:22656 pid:23731 tgid:23730 ppid:17225 task_flags:0x400140 flags:0x00080002 [ 780.433901][ C1] Call Trace: [ 780.439045][ C1] [ 780.442488][ C1] __schedule+0x15dd/0x52d0 [ 780.448550][ C1] ? stack_trace_save+0xa9/0x100 [ 780.454664][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 780.461645][ C1] ? kasan_save_stack+0x4d/0x60 [ 780.468134][ C1] ? kasan_save_stack+0x3e/0x60 [ 780.477153][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 780.484667][ C1] ? call_rcu+0xee/0x890 [ 780.490086][ C1] ? kernfs_put+0x18e/0x470 [ 780.496690][ C1] ? __pfx___schedule+0x10/0x10 [ 780.503180][ C1] ? ib_free_port_attrs+0xc5/0x3b0 [ 780.509686][ C1] ? copy_net_ns+0x50e/0x730 [ 780.515962][ C1] ? create_new_namespaces+0x3e7/0x6a0 [ 780.522724][ C1] ? unshare_nsproxy_namespaces+0x11a/0x160 [ 780.531161][ C1] ? ksys_unshare+0x51d/0x930 [ 780.539436][ C1] ? __x64_sys_unshare+0x38/0x50 [ 780.545622][ C1] preempt_schedule_irq+0x4d/0xa0 [ 780.553032][ C1] irqentry_exit+0x599/0x620 [ 780.559402][ C1] ? trace_irq_disable+0x3b/0x150 [ 780.564577][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 780.571588][ C1] RIP: 0010:lock_acquire+0xa4/0x2e0 [ 780.577165][ C1] Code: 3d 00 47 70 0e 00 0f 84 c1 00 00 00 65 8b 05 e3 b1 7a 11 85 c0 0f 85 b2 00 00 00 65 48 8b 05 2b 6c 7a 11 83 b8 54 0b 00 00 00 <0f> 85 9d 00 00 00 9c 5b fa 48 c7 c7 ff d2 f0 8d e8 c7 69 0c 0a 65 [ 780.602702][ C1] RSP: 0018:ffffc900064f7808 EFLAGS: 00000246 [ 780.609167][ C1] RAX: ffff888029241e80 RBX: ffffffff826f248c RCX: 0000000080000001 [ 780.619518][ C1] RDX: 0000000000000000 RSI: ffffffff826f24a8 RDI: 1ffffffff1cec05c [ 780.631233][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 780.641620][ C1] R10: dffffc0000000000 R11: ffffed1012371969 R12: 0000000000000002 [ 780.653545][ C1] R13: ffffffff8e7602e0 R14: 0000000000000000 R15: 0000000000000000 [ 780.663274][ C1] ? kernfs_root+0x1c/0x230 [ 780.669546][ C1] ? kernfs_root+0x38/0x230 [ 780.675310][ C1] ? lock_acquire+0x79/0x2e0 [ 780.681186][ C1] ? kernfs_root+0x1c/0x230 [ 780.686576][ C1] kernfs_root+0x38/0x230 [ 780.693589][ C1] ? kernfs_root+0x1c/0x230 [ 780.700241][ C1] kernfs_next_descendant_post+0x4e/0x310 [ 780.707699][ C1] __kernfs_remove+0x1f0/0x660 [ 780.713238][ C1] kernfs_remove_by_name_ns+0xaf/0x130 [ 780.720062][ C1] sysfs_remove_group+0xfc/0x2e0 [ 780.726602][ C1] sysfs_remove_groups+0x54/0xb0 [ 780.732616][ C1] ib_free_port_attrs+0xc5/0x3b0 [ 780.738746][ C1] rdma_dev_exit_net+0x1de/0x350 [ 780.744904][ C1] ? __pfx_netdev_run_todo+0x10/0x10 [ 780.751183][ C1] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 780.758790][ C1] ? rtnl_is_locked+0x15/0x20 [ 780.764045][ C1] ops_undo_list+0x49f/0x940 [ 780.769509][ C1] ? __pfx_ops_undo_list+0x10/0x10 [ 780.775593][ C1] ? ops_init+0x469/0x5c0 [ 780.781347][ C1] setup_net+0x2f0/0x340 [ 780.787502][ C1] ? __pfx_setup_net+0x10/0x10 [ 780.795952][ C1] ? preinit_net+0x47d/0x780 [ 780.802709][ C1] copy_net_ns+0x50e/0x730 [ 780.809615][ C1] create_new_namespaces+0x3e7/0x6a0 [ 780.816670][ C1] ? security_capable+0x7e/0x2c0 [ 780.822535][ C1] unshare_nsproxy_namespaces+0x11a/0x160 [ 780.830940][ C1] ksys_unshare+0x51d/0x930 [ 780.838177][ C1] ? __pfx_ksys_unshare+0x10/0x10 [ 780.845596][ C1] ? rcu_is_watching+0x15/0xb0 [ 780.851520][ C1] __x64_sys_unshare+0x38/0x50 [ 780.857654][ C1] do_syscall_64+0x14d/0xf80 [ 780.863897][ C1] ? trace_irq_disable+0x3b/0x150 [ 780.871087][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.878843][ C1] ? clear_bhb_loop+0x40/0x90 [ 780.884345][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.892458][ C1] RIP: 0033:0x7f4a7b59c799 [ 780.899690][ C1] RSP: 002b:00007f4a7c471028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 780.910869][ C1] RAX: ffffffffffffffda RBX: 00007f4a7b815fa0 RCX: 00007f4a7b59c799 [ 780.920897][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 780.930299][ C1] RBP: 00007f4a7b632c99 R08: 0000000000000000 R09: 0000000000000000 [ 780.939480][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.948409][ C1] R13: 00007f4a7b816038 R14: 00007f4a7b815fa0 R15: 00007fffdf65a8c8 [ 780.956894][ C1] [ 783.514527][ C0] net_ratelimit: 14026 callbacks suppressed [ 783.514550][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 783.514637][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 783.521350][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 783.534840][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 783.547633][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.560982][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 783.573568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.587028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 783.602696][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.615266][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 788.524502][ C1] net_ratelimit: 16607 callbacks suppressed [ 788.524522][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 788.524854][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 788.531101][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 788.543250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 788.556076][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 788.568773][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 788.581437][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 788.597267][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 788.612396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:c6:cc:ce:09:2a:fa, vlan:0) [ 788.625870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)