last executing test programs: 53.417379484s ago: executing program 0 (id=7134): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x880, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80100, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0x1, 0xb}, {0xd, 0x5}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0x5}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8021}, 0x4008000) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="850000002200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/ipc\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x0, 0xcc0, 0xfffffffffffffde6, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3}, {0x34, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x6}]}) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) 53.09800708s ago: executing program 0 (id=7140): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000080)={0xffffffff, 0x3, 0xfffffff9, 0x9224}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r7, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) (async) sendmsg$FOU_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002cbd7000fcdbdf2503000000060001004e200000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008001}, 0x840) (async, rerun: 64) socket(0x11, 0x800000003, 0x9) (rerun: 64) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) bind$packet(r4, &(0x7f0000000d00)={0x11, 0x5, r3, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETVNETHDRSZ(r9, 0x400454d8, &(0x7f0000000140)=0x90) (async) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000000)="64a465e8c8b19b44ba4dea57970686c91b493ce03f82124b84ddbf2653a98ea3217f2b957cf30e84d68a03b3c29dc13fba42c25d98a3974d4bd7d1302be820437b", 0x41) (async) write$tun(r9, &(0x7f0000000040)=ANY=[@ANYRESDEC], 0xfdef) (async) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000000440)={'tunl0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @private}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x700, 0x7800, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x68, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}}}) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x68, r7, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x6c}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_IFINDEX={0x8, 0xb, r12}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x34}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_PEER_V6={0x14, 0x9, @remote}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x40cc044}, 0x40884) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 52.971174619s ago: executing program 2 (id=7141): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r1, 0x4}, 0x8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}]}}}]}, 0x40}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (async) setsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r1, 0x4}, 0x8) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000200)=0x8) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={r4, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc}]}}}]}, 0x40}}, 0x0) (async) 52.541090671s ago: executing program 2 (id=7142): r0 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x5, @mcast2, 0x40}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1000000000000000290000000b0000000000000301000000"], 0x10}}], 0x1, 0x4008800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@report={0x4c, 0x20, 0x105, 0x70bd2d, 0x25dfdbff, {0x0, {@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, @in=@remote, 0x4e22, 0x6, 0x4e24, 0x9a78, 0x2, 0xa0, 0xc0, 0x5c}}}, 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x80) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbde, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x3c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xd, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40006}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0x1, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x3}]}}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@deltclass={0x4c, 0x29, 0x800, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xfd17fd8fc8b5fe2f, 0x10}, {0x8, 0x8}, {0x0, 0xf}}, [@tclass_kind_options=@c_clsact={0xb}, @TCA_RATE={0x6, 0x5, {0x6, 0x1}}, @TCA_RATE={0x6, 0x5, {0xd, 0x3}}, @tclass_kind_options=@c_skbprio={0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc051}, 0x14) sendmsg$BATADV_CMD_SET_HARDIF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf251000000008003a000100000008000300", @ANYRES32=r2], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r8, 0x890b, &(0x7f00000002c0)={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, 0x1, 0x6, 0x0, 0x100, 0x4, 0x500000, r9}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r10, 0x890b, &(0x7f0000000200)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x9, 0x6, 0x0, 0x100, 0x6, 0x4180107, r9}) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@newqdisc={0x54, 0x24, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x1, 0xf}, {0xe, 0xf}, {0x3, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xf, 0x2}}, @TCA_RATE={0x6, 0x5, {0x7, 0x9}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffff6c90}, @TCA_RATE={0x6, 0x5, {0x3, 0x2c}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20004000}, 0x8001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) 49.398732937s ago: executing program 2 (id=7143): r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x2) ioctl$F2FS_IOC_GARBAGE_COLLECT(r2, 0x4004f506, &(0x7f0000000080)=0x1) sendmsg$nl_generic(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000036005d082bfd700403dcdf25040000000800040002000000040005"], 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000080) ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000400)={'bridge0\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0x1d, "dea1d8981aa3a9c188aaf2269615123ca0a2894d756ec481f02e868817"}}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)) 49.364853647s ago: executing program 4 (id=7144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="180000000000000000000000000000007110210000000000663ea383f646d9da"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)=ANY=[@ANYBLOB="20010000410007012cbd7000fddbdf25037c00000400c28008010180040110801400080000000000000000000000000000000001ec000f"], 0x120}, 0x1, 0x0, 0x0, 0x4c084}, 0xc000) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x14}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@filter={'filter\x00', 0x42, 0x4, 0x2c8, 0xffffffff, 0x198, 0x198, 0x0, 0xffffffff, 0xffffffff, 0x230, 0x230, 0x230, 0xffffffff, 0x4, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'syz_tun\x00', 'syzkaller1\x00', {}, {}, 0x6, 0x1, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ip={@multicast2, @remote, 0x0, 0x0, 'veth1_macvtap\x00', 'tunl0\x00'}, 0x0, 0xa0, 0x100, 0x0, {0x60010000}, [@common=@ah={{0x30}, {[0x1]}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @empty, 0x0, 0x9, [0x16, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x100]}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3, 0x3d}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x328) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="e81c78140000003000010000000000000000000000000a44000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001708000340000100381400000010000100"/108], 0x6c}}, 0x0) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r9, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r9, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r9, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000340)="b9cd14", 0x3}, {0x0}], 0x2}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f0000000080)=@gcm_256={{0xa82a02e4010a08bd}, "1a01c783a8bc563d", "e9a0bd986e338531d1157bc12d1fc3646835db1378286228000400", "bd69dbc7", "1d7265a045a85572"}, 0x38) 49.159393871s ago: executing program 3 (id=7146): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'bond0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000300)={r2, &(0x7f0000000600), &(0x7f0000000700)=""/127}, 0x20) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 49.022521927s ago: executing program 2 (id=7147): syz_emit_ethernet(0x6e, &(0x7f0000000280)={@local, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x38, 0x3a, 0x0, @local, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0x2, 0x6, "bfe431", 0x3f6f, 0xff, 0x0, @mcast1, @loopback, [@fragment={0x84, 0x0, 0xa, 0x0, 0x0, 0x7, 0x65}]}}}}}}}, 0x0) r0 = syz_init_net_socket$nfc_raw(0x27, 0x4, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000180)={r0, &(0x7f0000000040)='GPL\x00', 0x48200, &(0x7f00000000c0)={@align=0x9, {0x8001, 0x0, 0x1, 0x8000}}, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x8}) bind$unix(r1, &(0x7f00000001c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) unshare(0x20000400) r2 = socket$can_j1939(0x1d, 0x2, 0x7) connect$can_j1939(r2, 0x0, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000440), 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000640)="98", 0x1}], 0x1) r5 = accept4$unix(r3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000240)={0x10000000}) recvmmsg(r5, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)=""/70, 0x46}], 0x1}, 0x4c2103a0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r11 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2002, {0x0, 0x0, 0x0, r12, {0xb, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7f, 0xffffffffffffffff, 0xc9d, 0xd155}, 0x5f}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) close(r10) socket(0x40000000015, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 49.009133977s ago: executing program 3 (id=7148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x800, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff1, 0xd}, {0xd, 0xc}, {0x3, 0x16}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x80000000}, @TCA_CAKE_FWMARK={0x0, 0x12, 0x3}]}}]}, 0x26}, 0x1, 0x0, 0x0, 0x44045}, 0x804) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 48.699825776s ago: executing program 3 (id=7150): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x14, 0x26, 0x301, 0x270bd1d, 0x25dfdbfa, {0x1}}, 0x14}}, 0x0) recvmsg(r2, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) sendto$packet(r3, &(0x7f0000000180)="7c0ad199ef434e43c75f57bb7f31295b705831bd1741e17475f9c111a078b8b72109004c4418987e990b5206dc420a0034e6c5b0f9b6a2b5307af8c3ccc0482b901b724aa23ca5ecb2aed5a78906b99787f1efc5aca6fa19c4224ce1603baaedca70c63336e021096245c48eb72d9baaebf863a3ae0c93e0e9621c1fc445e04b1abc94fecf6a846c0a8b74dc3c519a055f252ab1b37a38ad5033682704e7072580e0a0bc28961107fe51c2c4354d35a24304b05ead6e9f0b011ec59f43f5351aa73b43dd998a3f68debc5c99dd4962da6f819ab9fe31ae34c55b0b365bece4260d78c19a628fde49f3bd59807a0f3db13021b5136e", 0xf5, 0x10, &(0x7f0000000280)={0x11, 0x18, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_create1(0x80000) syz_emit_ethernet(0x7c, &(0x7f0000000000)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0xc, 0x6, "9d2218", 0x46, 0x2f, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558, 0x0, 0x2}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "e2f3"}, {0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x1, 0x1, 0x6, 0x3, 0x0, 0x2, 0x4, 0x5}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x3, {{0x5, 0x2, 0x3, 0x3, 0x1, 0x3, 0x0, 0x7}, 0x2, {0x0, 0x0, 0x3, 0xa, 0x1, 0x1, 0x3}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) pwritev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)="8e", 0x1}], 0x1, 0x8001, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r6, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r6, 0x89f4, &(0x7f0000000000)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001380)={r5, &(0x7f00000004c0)}, 0x20) sendfile(r4, r3, 0x0, 0xf03a0005) setsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000080)=0x1, 0x4) 48.563125367s ago: executing program 1 (id=7151): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) syz_emit_ethernet(0x66, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaa8aaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000fe8000000000000000000000000000000004000000000000071800000000040000d604"], 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x48}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000001300), 0x4) connect$inet6(r5, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r6, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x3, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}], 0x1, 0x4000090) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r6, 0x84, 0x1a, &(0x7f0000000000), &(0x7f0000001080)=0x8) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x1404, 0x20, 0x70bd27, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8dbaa3dd34b8b300}, 0x40000) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r7}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c5508007df77a0b00000a8070905f8e323c11a2849588d8fd5be2c527af38"], 0x2c}}, 0x0) 48.191842118s ago: executing program 4 (id=7152): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "dce02de9d7bd466b", "72e64b3892cb7025848c9f40363cf916", "cfff3c66", "e2b768b4bb9e0d9b"}, 0x28) (async) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) (async) r1 = socket(0x10, 0x80000, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5c, 0x2, {{0x1, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x11, &(0x7f0000000800)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @generic={0x1a, 0x4, 0x5, 0xff, 0x7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @exit, @map_fd={0x18, 0xb, 0x1, 0x0, 0x1}], &(0x7f00000008c0)='GPL\x00', 0x4, 0xcd, &(0x7f0000000900)=""/205, 0x41100, 0x5, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0x83, 0x5}, 0x8, 0x10, &(0x7f0000000a40)={0x2, 0x6, 0x0, 0x2}, 0x10, 0x0, 0x0, 0xa, &(0x7f0000000a80)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1, r0], &(0x7f0000000ac0)=[{0x5, 0x4, 0x1, 0x8}, {0x5, 0x4, 0x4, 0x9}, {0x3, 0x1, 0xe, 0x9}, {0x4, 0x4, 0x10, 0xb}, {0x3, 0x1, 0x2, 0x1}, {0x4, 0x1, 0x4, 0x8}, {0x0, 0x4, 0x6, 0xa}, {0x2, 0x2, 0x7, 0x7}, {0x0, 0x5, 0xf, 0xb}, {0x3, 0x2, 0x3, 0x1}], 0x10, 0x64df}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{}, &(0x7f0000000700), &(0x7f0000000680)=r5}, 0x20) (async) shutdown(r4, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) (async) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000000)={r8, @in={{0x2, 0x0, @empty}}, 0x27c3}, 0x90) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x85, &(0x7f0000000400)={r8, @in6={{0xa, 0x4e20, 0xffffffff, @private2, 0xffffffff}}}, 0x90) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000580)=ANY=[], 0x12) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) close(r0) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdb803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c00018008000100050000000800028004000180a23fa51b0ebe1343d63d1188e2ac9ae8d6afc5bb42ac"], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x40) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) connect$llc(r1, &(0x7f0000000100)={0x1a, 0x104, 0xf, 0x80, 0x1, 0xa, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000f80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000fc0)=ANY=[@ANYRES64=r9, @ANYRESOCT=r1, @ANYRES16=r6, @ANYRESDEC=r9], 0x72c}, 0x1, 0x0, 0x0, 0x40804}, 0x8084) 48.107144507s ago: executing program 4 (id=7153): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x2, 0x81, 0x1fd, 0x1, 0x1}, 0x1c) (async) recvmsg$unix(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/254, 0xfe}], 0x1}, 0x20) (async) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close(0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000002c0)="3c75fd4dc586f2ae9206277f0443ec773ee63a8c6df14fe0183749000000000000", 0x21) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x23, 0x80805, 0x0) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000005b34490c5815a0e5000000000000005fb05bc303435a527df8402bbc43ff20e5f512c3eda55ef7c6", @ANYRES32=0x0, @ANYRES8, @ANYBLOB='\x00'/28], 0x48) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x27}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@gettaction={0xa8, 0x32, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5000000}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x3, 0x3, 0x6}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3ff}}, {0x14, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0xa8}, 0x1, 0x0, 0x0, 0x240008d3}, 0x20084084) pipe(&(0x7f0000000140)) ioctl$XFS_IOC_START_COMMIT(r2, 0x80585882, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$PPPIOCGIDLE64(r8, 0x8010743f, &(0x7f0000000380)) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000bf8986e70080f7f5281f000d00000000000000310600591bdba36671acb516f74aa78a647a0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018400000030000000000000000000000950000000000000018120000", @ANYRES16=0x0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7d2}, 0x94) (async, rerun: 64) recvfrom$l2tp6(r1, &(0x7f0000000280)=""/57, 0x39, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @local}, 0x20) (async, rerun: 64) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4a21, @multicast1}, 0x10) (async) shutdown(0xffffffffffffffff, 0x1) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x3, &(0x7f0000000040), 0x4) 46.620829144s ago: executing program 0 (id=7154): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xa3}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000005c0)={&(0x7f0000000140), 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xe8, 0x0, 0x20, 0x70bd2c, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @private=0xa010102}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbe9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}]}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x0, 0x1242f}, {}, {0xb, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448d0}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xf}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44840}, 0x80) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd2, 0xd2, 0xa, [@decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x5}, @var={0xe, 0x0, 0x0, 0xe, 0x3}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x44, 0x0, 0x25, 0x6}, @fwd={0x6}, @enum={0x0, 0x9, 0x0, 0x6, 0x4, [{0xe, 0xba}, {0x0, 0x80}, {0x6, 0x2a4d}, {0x5}, {0xc, 0x9}, {0x3, 0x2}, {0x5, 0x5}, {0x6, 0x3c0}, {0x5, 0x7}]}, @func={0x5, 0x0, 0x0, 0xc, 0x2}, @var={0xf, 0x0, 0x0, 0xe, 0x4, 0x1}, @datasec={0x8, 0x1, 0x0, 0xf, 0x2, [{0x3, 0x9, 0x2}], '!S'}, @restrict={0x4, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x30, 0x0, 0xbe, 0x2e, 0x2e, 0x5f, 0x5f]}}, &(0x7f0000000340)=""/105, 0xf6, 0x69, 0x1, 0xfffffffb}, 0x28) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xffff454f, '\x00', 0x0, r6, 0x4, 0x4, 0x2}, 0x50) 46.416833439s ago: executing program 3 (id=7155): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x10000}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24008081}, 0xe0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEAUTHENTICATE(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, r1, 0x900, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="40f445932cd8"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_SSID={0x7, 0x34, @random="1ce723"}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000004) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x48804) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000003c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'netpci0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000480)=0x14) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, r3, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @remote}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_LINK={0x8, 0x1, r5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000080}, 0x4c004) socket$alg(0x26, 0x5, 0x0) recvmsg(r0, &(0x7f00000008c0)={&(0x7f00000005c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000640)=""/238, 0xee}, {&(0x7f0000000740)=""/87, 0x57}], 0x2, &(0x7f0000000800)=""/145, 0x91}, 0x140) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c880}, 0x20048011) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000a40), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000a80)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x3c, r6, 0x800, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LBT_ENABLED={0x5, 0x22, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x6}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x40}, @IEEE802154_ATTR_TXPOWER={0x5, 0x21, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004001}, 0xdfa568281046bf76) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r8, 0x4, 0x70bd27, 0x25dfdbfd, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket(0x1f, 0x2, 0x7fff) sendmsg$TIPC_NL_LINK_RESET_STATS(r9, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x14800200}, 0xc, &(0x7f0000000f00)={&(0x7f0000000d00)={0x1c8, 0x0, 0x800, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x8c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6e4a5598}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x24}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x31117e2b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_LINK={0x108, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffa}]}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}]}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x20008041}, 0x8010) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r10, 0x890c, &(0x7f0000000f80)={@private0={0xfc, 0x0, '\x00', 0x1}, @empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xffffff80, 0xd, 0x7fff, 0x100, 0xffffffffffff8001, 0x80010, r4}) r11 = socket$inet(0x2, 0x3, 0xa6) accept4(r11, &(0x7f0000001000)=@isdn, &(0x7f0000001080)=0x80, 0x80000) pipe(&(0x7f00000010c0)) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x78, r6, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x78}, 0x1, 0x0, 0x0, 0x4000050}, 0x801) r12 = syz_genetlink_get_family_id$devlink(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000001340)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x38, r12, 0x2, 0x70bd2b, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4040800) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r13, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x4210004}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x4c, r6, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x42}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x7}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x37}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040054}, 0x0) 46.412925753s ago: executing program 1 (id=7156): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000140), 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r1, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x2c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 46.411366643s ago: executing program 2 (id=7157): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet(0x2, 0x802, 0x1) write(r1, &(0x7f0000000080)="08008edf773c8000", 0xfd) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r3, r4, 0x25, 0x0, @val=@iter={0x0}}, 0x20) (async) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x20, r4, 0x2}, 0xa) (async) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="850000003c000000791000000000000063000000001000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010429bd7000fddbdf250900000008000300", @ANYRES32=r9, @ANYBLOB], 0x24}, 0x1, 0x0, 0x0, 0x400d000}, 0x814) r10 = socket$inet6(0xa, 0x3, 0x88) (async) r11 = socket$key(0xf, 0x3, 0x2) r12 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r12, 0x8983, &(0x7f0000000140)={0x3, 'macvlan1\x00', {0xc}, 0x4f}) (async) sendmsg$key(r11, &(0x7f00000000c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYRESHEX=0x0], 0x10}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, &(0x7f0000000340)='syzkaller\x00'}, 0x94) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@local, @in=@empty, 0x0, 0x56, 0x4e23, 0x0, 0x2, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x100000002, 0xfffffffffffffff6, 0x2000000, 0x7b8d, 0x8}, {0x7, 0x0, 0x4, 0x40}, 0x932, 0x0, 0x0, 0x0, 0x3}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d4, 0x6c}, 0x2, @in6=@rand_addr=' \x01\x00', 0x2, 0x4, 0x0, 0x0, 0xfffffffc, 0x8, 0x4}}, 0xe8) (async) accept4$inet6(r10, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c, 0x800) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20000020, 0x0) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xff}}}, 0x1c) 46.109518886s ago: executing program 1 (id=7158): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000006440)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="300000001100010000000000000000000400000008"], 0x30}], 0x1}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 64) r2 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x48, 0x2, [@TCA_CGROUP_EMATCHES={0x44, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x34, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x6}, @TCA_EM_IPT_MATCH_NAME={0x9}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}]}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x40010) sendmsg$IPSET_CMD_GET_BYINDEX(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x4c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008045}, 0x71b83cf5e49b29f0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async, rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (rerun: 64) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 46.057002859s ago: executing program 2 (id=7159): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) (async) r0 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) close(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb40018"], 0x0, 0x4a}, 0x20) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0xe, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x0, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="45fe9934cad40069f1713ce09cbeb01bcea1b65a0e160d0110da42504ddade521a61b004f9208fad6d696477706ac383f7eb302efcc119f606a21499e621d13d926e03d864b41c86e1a15227eb68b17f04ebb480f8fdb2729c07aecf8099a9db99053a655f63d1aa857c67b5a9f2dcc81bbbea33adfda7ec20739efee9bd9f42c7055685e33a506ad1a14f8bf0b13c1f6359c3bd2fcdff2a304de7a3cdf0f198dac6aeb6b6caf03e298f067c36bc7149b6a3a01b073395cd24b44a9604d181b208aec7a2c3dde57f11ee679fda9a3ef1bfc1e0ceede01bc09e5f175753c8ac39da02151d851da40092cc24", @ANYRESDEC=r10, @ANYRES32=r10, @ANYRESHEX=r10], 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000040) 45.797410316s ago: executing program 0 (id=7160): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xf1, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x4}]}}]}, 0x38}}, 0x0) accept$alg(r0, 0x0, 0x0) 45.586335161s ago: executing program 3 (id=7161): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01032757c38d085641a7260000000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0x20040005}, 0x48d4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000400)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x3, 0xb4, {{0x6, 0x4, 0x1, 0x3, 0x18, 0x65, 0x0, 0x9, 0x6, 0x0, @multicast2, @local, {[@ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000440)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f00000005c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x60, r3, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x60}}, 0x14480) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800ff03000000000000000430000000020000000000000001000084ffffffff0000000003000000040000080000000000000002000000000000000000000010020000000000"], 0x0, 0x4a, 0x0, 0x0, 0x61f2, 0x10000}, 0x28) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@delchain={0x48, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x9, 0x1b}}, [@filter_kind_options=@f_flower={{0x16}, {0x18, 0x2, [@TCA_FLOWER_KEY_CT_STATE_MASK={0x0, 0x5c, 0xb0c0}, @TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @multicast}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) 45.52272741s ago: executing program 4 (id=7162): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x94) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000100)=""/207, &(0x7f0000000280)=0xa4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$BTRFS_IOC_TREE_SEARCH(r3, 0x890b, &(0x7f0000001480)={{0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0xf00, 0x0, 0x3, 0x0, 0x0, 0x6, 0x1, 0x3}}) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000700)=@mangle={'mangle\x00', 0x1f, 0x6, 0x418, 0xa0, 0xa0, 0x1d8, 0xa0, 0x138, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x3, 0x7, @multicast1, 0x4e22}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x4, 0x2}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x36}, @loopback, 0x1fffffffe, 0xff, 'pimreg1\x00', 'dummy0\x00', {0xff}, {}, 0x2, 0x1, 0x40}, 0x0, 0x70, 0x270}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x4, @remote, 0x4e21}}}, {{@ip={@remote, @multicast1, 0xff, 0x0, 'virt_wifi0\x00', 'team_slave_0\x00', {0xff}, {0xff}, 0x6c, 0x2, 0x59}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x3, 0x2}, {0x3, 0x0, 0x4}}}}, {{@ip={@local, @remote, 0xffffff00, 0xff, 'gretap0\x00', 'batadv0\x00', {}, {}, 0x84, 0x1, 0x5}, 0x0, 0xa0, 0x110, 0x0, {}, [@common=@ah={{0x30}, {[0x3, 0x5112], 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x1, 0x0, 0x46c5, 0x0, 0x0, "2b4e84400af0c61fe4b77d62d90d10d33fce7dc71425d4209d84f086ee827a4b064c417320a5f57e2dcc64d51dd574bd8c47cabfe9f21364d0c1a47f3240e300"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e21, 0x2a2, @remote, 0x8}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) 45.24558066s ago: executing program 0 (id=7163): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000700)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab190c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@qdisc_kind_options=@q_mq={0x7}, @TCA_RATE={0x6, 0x5, {0x1, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c81c) ioctl$PPPIOCGIDLE32(r2, 0x8008743f, &(0x7f0000000000)) 45.244282437s ago: executing program 3 (id=7164): r0 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r6, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r6, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) sendmmsg$inet(r6, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f00000006c0)="fa6d", 0x2}], 0x1}}], 0x1, 0x24008057) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f00000003c0), &(0x7f0000000400)=0x4) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000180)={0x84, @remote, 0x0, 0x0, 'lblc\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_DEL(r7, 0x0, 0x484, &(0x7f0000001280)={0x20000000000084, @remote, 0x0, 0x0, 'rr\x00'}, 0x2c) write$tun(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 45.224981409s ago: executing program 1 (id=7165): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r1, 0x0) connect$unix(r0, &(0x7f00000002c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_FLUSH_PMKSA(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="20f6ff00cdfa761a6e5fd597d2bd5159d261a7d97454a53ae700188db68254cf8e5fc30b2e262365830aa63b850d06e7f8a0f4fb74fc20b9e6b5c63dae95c5b8ed8cbbed256320938a3f63ad7538177664248de2078999e371340d272ca76427d70ba29433ebdde26861601b4fc0f798cb67a2bc9cb2cda9971df07cd95d914aa5a0f2ee1f6f077905bd00000000", @ANYRES16=r2, @ANYBLOB="20002bbd7000fcdbdf25360000000c0099000600000080000000"], 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x81) r3 = socket$inet(0x2, 0x802, 0x1) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f00000000c0)=0x27, 0x11) write(r3, &(0x7f0000000080)="08008edf773c8000", 0xfd) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x25, 0x0}}], 0x3f, 0x0, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, r1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 45.190781713s ago: executing program 4 (id=7166): socket(0x10, 0x80002, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086", 0x17}], 0x1}, 0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) 44.813132237s ago: executing program 4 (id=7167): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYRESDEC, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e21, @multicast2}, 0x10) socket$kcm(0x2, 0x5, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x2, 0xb025) socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000001a000100ba5e589f816529500a000000", @ANYRES32=0x0, @ANYBLOB="00000000080002"], 0x24}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3fc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x10000000}) r4 = socket$kcm(0x29, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000000840)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000a00)='(', 0x1}], 0x1}}], 0x1, 0x4880) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r2}, 0x8) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000900)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0xa, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {@in=@multicast1, 0x0, 0x6c}, @in=@empty, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x9, 0x4}, {}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @algo_aead={0x4c, 0x12, {{'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x0, 0x80}}]}, 0x184}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="85000000bc00000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) sendfile(r4, r5, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x5, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES8=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000006201000019000000bca9000000000000350901000000000095000000000000560800000000000007000000b7000000000000009500000000000000000002e623ca97beadc41c3a3d5c8e0669f3dab34e2e34acd348e825732e5a6ecf68e056f334e12a0b227b2bd475f933c32d6cd19eacdbe812b8850a8e2012ff4f2c234abd798a4eecb7b59e5450a089d73f46a66d6525e217d96b3478ac96c7130691ef603892b8699d89cf00000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 44.805113645s ago: executing program 1 (id=7168): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x14) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001580)=@ipv6_newaddrlabel={0x38, 0x48, 0x3, 0x0, 0x0, {}, [@IFAL_LABEL={0x8}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x38}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xfffffffd}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r2, 0x0, 0xe, 0x0, &(0x7f00000002c0)="69d387051eaf71a0486e5c660000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 38.458988935s ago: executing program 1 (id=7169): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="b40800000000000073110e00000000008510000002000000b7000000000000009500c200000000009500001200000000830345f5b3f42590c416b734596006d9dec99bdcb359ce8c"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x70) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000006201000019000000bca900000000000035090100000000009500000000000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 34.442034156s ago: executing program 0 (id=7170): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a3201000000a4000000060a010400000000000000000100000008000b40000000007c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000440001800c0001006269747769736500340002800800034000000004080001400000001408000240000000120c0005800800010088634d580c000480080001006eee7e000900010073797a30"], 0x118}}, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r4 = socket$unix(0x1, 0x2, 0x0) bind$unix(r4, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$unix(0x1, 0x2, 0x0) (async) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) (async) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c0002800500010004000000060022"], 0x4c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x7, 0x22d4c000, 0xfffffffffffffffb}) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000200)=0x4) (async) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000200)=0x4) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="2d72646d617604eb74d47401703fc7feb40c202b637075202b6e6574202b70696473202b637075202d706572665f6576656e7420757062a7a003f564e4a8cdaa97"], 0x27) (async) write$cgroup_subtree(r8, &(0x7f0000000180)=ANY=[@ANYBLOB="2d72646d617604eb74d47401703fc7feb40c202b637075202b6e6574202b70696473202b637075202d706572665f6576656e7420757062a7a003f564e4a8cdaa97"], 0x27) 0s ago: executing program 32 (id=7159): recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)}, 0x10000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4044005}, 0x814) (async) r0 = socket$kcm(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4a, &(0x7f0000000040), 0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r1 = socket$inet6(0xa, 0x3, 0x9) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000140)={0x21, {{0x29, 0x0, 0x2000000, @private2}}}, 0x88) close(0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9febb40018"], 0x0, 0x4a}, 0x20) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r2, 0x215eb000) (async) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, 0x0, 0x0) (async) socket(0x10, 0x3, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x8000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0xe, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20044081) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0xff}}, [@tmpl={0x184, 0x5, [{{@in6=@mcast1, 0x4d2, 0x33}, 0xa, @in6=@empty, 0x3501, 0x1, 0x0, 0x3b, 0x83, 0x5, 0x7}, {{@in6=@local, 0x4d6, 0x3c}, 0xa, @in6=@private1, 0x3502, 0x2, 0x0, 0x7, 0x7f, 0x0, 0x4}, {{@in=@multicast1, 0x4d5, 0x6c}, 0x2, @in6=@empty, 0x3507, 0x4, 0x0, 0x3, 0x4, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x3c}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x2, 0xfffffffa, 0x401, 0x81}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d3, 0x6c}, 0x2, @in=@private=0xa010100, 0x3502, 0x5, 0x0, 0xd1, 0xe, 0x47b, 0x3}, {{@in=@broadcast, 0x4d5, 0x33}, 0x2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x34ff, 0x3, 0x0, 0x6, 0x5, 0x4, 0x7f}]}]}, 0x23c}}, 0x4000) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$kcm(0x2d, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000040)={0x2d, 0x3, 0xfffffffe}, 0xc) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x5c, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x4, 0x2, 0x2cf, 0x6, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098) (async) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32=r10, @ANYRES32=r10, @ANYBLOB="45fe9934cad40069f1713ce09cbeb01bcea1b65a0e160d0110da42504ddade521a61b004f9208fad6d696477706ac383f7eb302efcc119f606a21499e621d13d926e03d864b41c86e1a15227eb68b17f04ebb480f8fdb2729c07aecf8099a9db99053a655f63d1aa857c67b5a9f2dcc81bbbea33adfda7ec20739efee9bd9f42c7055685e33a506ad1a14f8bf0b13c1f6359c3bd2fcdff2a304de7a3cdf0f198dac6aeb6b6caf03e298f067c36bc7149b6a3a01b073395cd24b44a9604d181b208aec7a2c3dde57f11ee679fda9a3ef1bfc1e0ceede01bc09e5f175753c8ac39da02151d851da40092cc24", @ANYRESDEC=r10, @ANYRES32=r10, @ANYRESHEX=r10], 0x3c}, 0x1, 0x0, 0x0, 0xc4}, 0x4000040) kernel console output (not intermixed with test programs): trollers" dev="tmpfs" ino=2907 res=1 errno=0 [ 923.229516][ T30] audit: type=1800 audit(1784594640.899:16): pid=29245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6104" name="cgroup.controllers" dev="tmpfs" ino=2907 res=0 errno=0 [ 923.316651][T28658] veth0_vlan: entered promiscuous mode [ 923.354628][T28658] veth1_vlan: entered promiscuous mode [ 923.406220][T28658] veth0_macvtap: entered promiscuous mode [ 923.423939][T28658] veth1_macvtap: entered promiscuous mode [ 923.455927][T28658] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 923.475200][T28658] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 923.495388][T12279] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.514109][T12279] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.524176][T12279] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.555432][T12279] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 923.961392][T12287] IPVS: stop unused estimator thread 0... [ 924.653768][T29203] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 924.834706][T12268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 924.868472][T12268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 924.982889][T29273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6109'. [ 924.997654][T29273] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6109'. [ 925.032067][T29276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6108'. [ 925.042178][T12271] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 925.052654][T12271] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 925.065630][T29276] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6108'. [ 925.072786][T29273] gretap0: entered promiscuous mode [ 925.082632][T29273] gretap0: left promiscuous mode [ 925.159386][T29277] netlink: 'syz.1.6107': attribute type 10 has an invalid length. [ 925.167273][T29277] openvswitch: netlink: Flow key attr not present in new flow. [ 925.191451][T29279] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6108'. [ 925.201180][T29277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6107'. [ 925.724989][T29309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6118'. [ 926.317489][T29331] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 926.671539][T29342] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 926.920387][T29349] syzkaller0: entered promiscuous mode [ 926.925926][T29349] syzkaller0: entered allmulticast mode [ 927.058001][T29354] netlink: 72 bytes leftover after parsing attributes in process `syz.2.6128'. [ 927.281477][T29361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6129'. [ 927.291806][T29366] syzkaller0: entered promiscuous mode [ 927.297328][T29366] syzkaller0: entered allmulticast mode [ 927.303347][T29361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6129'. [ 927.320531][T29361] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6129'. [ 927.346874][T29366] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6130'. [ 927.349619][T29361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6129'. [ 927.397825][T29371] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6133'. [ 927.432155][T29372] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6133'. [ 927.466302][T29375] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6133'. [ 927.726686][T29383] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6136'. [ 927.745837][T29383] netlink: 'syz.0.6136': attribute type 10 has an invalid length. [ 927.771134][T29383] geneve2: entered promiscuous mode [ 927.776565][T29383] geneve2: entered allmulticast mode [ 927.785071][T29389] ipt_ECN: cannot use operation on non-tcp rule [ 928.519680][T29420] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:20001 [ 928.603425][T29432] ip6t_srh: unknown srh match flags 5F28 [ 929.056788][T29449] openvswitch: netlink: Key type 153 is out of range max 32 [ 929.067616][T29453] openvswitch: netlink: Key type 153 is out of range max 32 [ 929.106008][T29452] batadv_slave_0: entered promiscuous mode [ 929.140678][T29451] batadv_slave_0: left promiscuous mode [ 929.436894][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 929.457528][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 929.466804][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 929.487360][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 929.495776][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 929.619467][T29472] 8021q: adding VLAN 0 to HW filter on device bond8 [ 929.627283][T29478] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 3647 [ 929.696620][T29472] bond8 (unregistering): Released all slaves [ 929.787725][T17945] bond1: (slave syz_tun): Removing an active aggregator [ 929.795882][T17945] bond1: (slave syz_tun): Releasing backup interface [ 929.886020][T29482] tipc: Enabling of bearer rejected, failed to enable media [ 929.932296][T29482] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 929.965763][T29491] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 930.178442][T29496] syzkaller0: entered promiscuous mode [ 930.183988][T29496] syzkaller0: entered allmulticast mode [ 930.461646][T29512] netlink: 'syz.0.6176': attribute type 30 has an invalid length. [ 930.613311][T29460] lo speed is unknown, defaulting to 1000 [ 930.620452][T29514] syzkaller0: entered promiscuous mode [ 930.626064][T29514] syzkaller0: entered allmulticast mode [ 930.636879][T29460] wlan1 speed is unknown, defaulting to 1000 [ 931.126103][T29549] geneve3: entered promiscuous mode [ 931.127692][T25280] IPVS: starting estimator thread 0... [ 931.295754][T29561] netlink: 'syz.1.6187': attribute type 1 has an invalid length. [ 931.387416][T29561] 8021q: adding VLAN 0 to HW filter on device bond1 [ 931.434326][T29554] IPVS: using max 26 ests per chain, 62400 per kthread [ 931.521489][T29568] ip6t_srh: unknown srh match flags 4000 [ 931.557530][T29564] syzkaller1: entered promiscuous mode [ 931.566744][T29564] syzkaller1: entered allmulticast mode [ 931.650918][ T50] Bluetooth: hci2: command tx timeout [ 932.016787][T29460] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.043748][T29460] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.079617][T29460] bridge_slave_0: entered allmulticast mode [ 932.102371][T29460] bridge_slave_0: entered promiscuous mode [ 932.256025][T29460] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.275578][T29460] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.282939][T29460] bridge_slave_1: entered allmulticast mode [ 932.290840][T29460] bridge_slave_1: entered promiscuous mode [ 932.315895][T12278] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.334725][T12278] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.368679][T29460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 932.435731][T12278] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.464908][T29460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.518416][T12287] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 932.653901][T12279] gretap0: left allmulticast mode [ 932.661325][T12279] bridge0: port 3(gretap0) entered disabled state [ 932.672396][T12279] bridge_slave_1: left promiscuous mode [ 932.678204][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 932.723930][T12279] bridge_slave_0: left allmulticast mode [ 932.731582][T12279] bridge_slave_0: left promiscuous mode [ 932.742562][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 932.813513][T12279] batman_adv: batadv0: Interface deactivated: bond0 [ 933.231770][T12279] team0: Port device geneve1 removed [ 933.344563][T12279] bond4 (unregistering): (slave bridge5): Releasing backup interface [ 933.356055][T12279] bridge5 (unregistering): left promiscuous mode [ 933.406704][T12279] bond5 (unregistering): (slave bridge8): Releasing backup interface [ 933.420877][T12279] bridge8 (unregistering): left promiscuous mode [ 933.448683][T12279] bond6 (unregistering): (slave bridge12): Releasing backup interface [ 933.472113][T12279] batman_adv: batadv0: Removing interface: bond0 [ 933.519684][T12279] bond0 (unregistering): (slave bond2): Releasing active interface [ 933.530917][T12279] bond0 (unregistering): Released all slaves [ 933.552637][T12279] bond1 (unregistering): Released all slaves [ 933.573564][T12279] bond2 (unregistering): Released all slaves [ 933.605529][T12279] bond3 (unregistering): Released all slaves [ 933.642194][T12279] bond4 (unregistering): Released all slaves [ 933.660752][ T50] Bluetooth: hci2: command tx timeout [ 933.675918][T12279] bond5 (unregistering): Released all slaves [ 933.690427][T12279] bond6 (unregistering): Released all slaves [ 933.737344][T29633] netlink: 'syz.0.6201': attribute type 2 has an invalid length. [ 933.751056][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 933.912086][T29460] team0: Port device team_slave_0 added [ 933.934699][T29460] team0: Port device team_slave_1 added [ 934.008193][T29646] tipc: Enabling of bearer rejected, media not registered [ 934.029338][T12279] : left promiscuous mode [ 934.209329][T29460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 934.268415][T29460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.328070][T29660] sctp: [Deprecated]: syz.4.6207 (pid 29660) Use of int in maxseg socket option. [ 934.328070][T29660] Use struct sctp_assoc_value instead [ 934.378090][T29460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 934.400730][T29460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 934.407724][T29460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 934.434404][T29667] __nla_validate_parse: 7 callbacks suppressed [ 934.434425][T29667] netlink: 252 bytes leftover after parsing attributes in process `syz.3.6208'. [ 934.474530][T29460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 934.493134][T29656] netdevsim netdevsim1 : renamed from netdevsim0 [ 935.032298][T29687] bond9 (unregistering): Released all slaves [ 935.110162][T29460] hsr_slave_0: entered promiscuous mode [ 935.117636][T29460] hsr_slave_1: entered promiscuous mode [ 935.151580][T29460] debugfs: 'hsr0' already exists in 'hsr' [ 935.162819][T29460] Cannot create hsr debugfs directory [ 935.301225][T29696] xt_hashlimit: Unknown mode mask 2000, kernel too old? [ 935.361973][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 935.787843][ T50] Bluetooth: hci2: command tx timeout [ 935.928759][T29460] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.158152][T29737] netlink: 108 bytes leftover after parsing attributes in process `syz.4.6222'. [ 936.291692][T29747] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6225'. [ 936.371357][ T5288] 8021q: adding VLAN 0 to HW filter on device eth3 [ 936.575225][T29460] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.684612][T29766] mac80211_hwsim hwsim33 ÿ: renamed from wlan1 [ 936.841457][T12279] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 936.868541][T12279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 937.041128][T29777] netlink: 'syz.0.6232': attribute type 39 has an invalid length. [ 937.059181][T29775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6231'. [ 937.708458][T12279] team0 (unregistering): Port device team_slave_1 removed [ 937.734379][T12279] team0 (unregistering): Port device team_slave_0 removed [ 937.819577][ T50] Bluetooth: hci2: command tx timeout [ 937.985897][T29777] team0: Port device syz_tun removed [ 938.043545][T29775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6231'. [ 938.330429][T29460] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.703940][T29460] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.797776][T29827] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6240'. [ 939.343689][T29836] bridge1: entered promiscuous mode [ 939.352242][T29836] bridge1: entered allmulticast mode [ 939.443573][T29853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6247'. [ 939.452501][T29853] netlink: 50 bytes leftover after parsing attributes in process `syz.3.6247'. [ 939.502973][T29853] netlink: 50 bytes leftover after parsing attributes in process `syz.3.6247'. [ 939.566888][T29460] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 939.571393][T29857] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6247'. [ 939.617526][T29460] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 939.626096][T29460] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 939.644847][T29460] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 939.652339][T29862] veth1_to_bond: entered allmulticast mode [ 939.688690][T12279] IPVS: stop unused estimator thread 0... [ 939.705031][T29460] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 939.765087][T29460] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 939.773532][T29460] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 939.792118][T29460] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 939.807373][T29862] veth1_to_bond: left allmulticast mode [ 940.226554][T29885] netlink: 'syz.0.6254': attribute type 83 has an invalid length. [ 940.298833][T29893] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6255'. [ 940.411709][T29893] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6255'. [ 940.421134][T29856] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 940.427079][T29856] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 940.436719][T29896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6254'. [ 940.445379][T29460] 8021q: adding VLAN 0 to HW filter on device bond0 [ 940.639946][T29856] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 940.676729][T29856] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 940.713941][T29460] 8021q: adding VLAN 0 to HW filter on device team0 [ 940.774883][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 940.782147][T12278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 940.872991][T12279] bridge_slave_1: left allmulticast mode [ 940.880339][T12279] bridge_slave_1: left promiscuous mode [ 940.902723][T12279] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.922268][T12279] bridge_slave_0: left allmulticast mode [ 940.931244][T12279] bridge_slave_0: left promiscuous mode [ 940.961462][T12279] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.328471][T12279] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 941.336746][T12279] ip6gre2 (unregistering): left promiscuous mode [ 941.578235][T12279] bridge0 (unregistering): left allmulticast mode [ 941.627878][T12279]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 941.656655][T12279]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 941.674445][T12279]  (unregistering): (slave batadv0): Releasing backup interface [ 941.684941][T12279]  (unregistering): Released all slaves [ 941.700302][T12279] bond1 (unregistering): Released all slaves [ 941.729255][T12279] bond2 (unregistering): Released all slaves [ 941.763241][T12279] bond0 (unregistering): (slave bond5): Releasing backup interface [ 941.772459][T12279] bond0 (unregistering): Released all slaves [ 941.795359][T12279] bond3 (unregistering): Released all slaves [ 941.822163][T12279] bond4 (unregistering): Released all slaves [ 941.847808][T12279] bond5 (unregistering): Released all slaves [ 941.875529][T12279] bond6 (unregistering): Released all slaves [ 941.895149][T12279] bond7 (unregistering): Released all slaves [ 941.957010][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 941.967256][T12278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 941.996760][T29914] tipc: Enabling of bearer rejected, failed to enable media [ 942.191556][T12279] tipc: Disabling bearer [ 942.238292][T12279] tipc: Disabling bearer [ 942.305187][T12279] tipc: Left network mode [ 942.408539][T29942] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6262'. [ 942.487195][T29944] netlink: 'syz.0.6264': attribute type 1 has an invalid length. [ 942.520702][T29944] netlink: 15894 bytes leftover after parsing attributes in process `syz.0.6264'. [ 942.547755][T29947] xt_hashlimit: size too large, truncated to 1048576 [ 943.071887][T29973] netlink: 'syz.4.6268': attribute type 1 has an invalid length. [ 943.082973][T29973] netlink: 192 bytes leftover after parsing attributes in process `syz.4.6268'. [ 943.121259][T29973] netlink: 'syz.4.6268': attribute type 1 has an invalid length. [ 943.216748][T29975] syzkaller0: entered promiscuous mode [ 943.226932][T29975] syzkaller0: entered allmulticast mode [ 943.322807][T12279] hsr_slave_0: left promiscuous mode [ 943.347596][T12279] hsr_slave_1: left promiscuous mode [ 943.364183][T12279] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 943.403939][T12279] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.209683][ T50] block nbd4: Receive control failed (result -32) [ 944.965884][T12287] smbdirect: ib_dev[syú2] removed [ 945.024131][T25273] lo speed is unknown, defaulting to 1000 [ 945.039267][T25273] infiniband syú2: ib_query_port failed (-19) [ 945.202908][T30044] __nla_validate_parse: 2 callbacks suppressed [ 945.202928][T30044] netlink: 6212 bytes leftover after parsing attributes in process `syz.0.6281'. [ 945.322421][T30044] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6281'. [ 945.361318][T29460] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 945.523523][T29460] veth0_vlan: entered promiscuous mode [ 945.562425][T29460] veth1_vlan: entered promiscuous mode [ 945.651446][T29460] veth0_macvtap: entered promiscuous mode [ 945.672917][T29460] veth1_macvtap: entered promiscuous mode [ 945.682355][T30069] IPVS: set_ctl: invalid protocol: 11 224.0.0.2:20003 [ 945.709457][T29460] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 945.723014][T29460] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 945.829220][T12286] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.840793][T30073] netlink: 'syz.1.6286': attribute type 1 has an invalid length. [ 946.097016][T12268] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.105964][T12268] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.178601][T30079] bond2: (slave geneve2): making interface the new active one [ 946.217006][T30079] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 946.228505][T12268] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.238881][T12268] netdevsim netdevsim1 : set [1, 1] type 2 family 0 port 20004 - 0 [ 946.284534][T12268] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 946.337684][T12268] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 946.348552][T12268] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 946.359238][T30078] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 946.371666][T12268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.416058][T12268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.430608][T30083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6289'. [ 946.543170][T12286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 946.551049][T12286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 946.574992][T30087] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6290'. [ 946.951495][T30104] ip6t_srh: unknown srh invflags 4000 [ 946.965088][T30104] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6160'. [ 947.044304][T30104] 8021q: VLANs not supported on ip6_vti0 [ 947.251596][T30115] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6295'. [ 947.260706][T30115] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6295'. [ 947.467921][T30119] syzkaller0: entered promiscuous mode [ 947.473465][T30119] syzkaller0: entered allmulticast mode [ 947.542272][ T5635] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 947.573532][ T5635] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 947.583868][ T5635] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 947.592387][T30119] netlink: 232 bytes leftover after parsing attributes in process `syz.4.6300'. [ 947.602610][ T5635] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 947.611599][ T5635] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 947.995589][T30145] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6304'. [ 948.278790][T12286] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.567106][T30166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6309'. [ 948.718362][T12286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 948.731527][T12286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.913436][T30166] bond1: option xmit_hash_policy: invalid value (64) [ 948.928670][T30166] bond1 (unregistering): Released all slaves [ 948.993971][T30173] bond0: entered promiscuous mode [ 948.999074][T30173] bond_slave_0: entered promiscuous mode [ 949.039960][T30173] bond_slave_1: entered promiscuous mode [ 949.048626][T30173] batadv0: entered promiscuous mode [ 949.101656][T30173] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 949.122054][T30173] bond0: left promiscuous mode [ 949.126899][T30173] bond_slave_0: left promiscuous mode [ 949.193772][T30173] bond_slave_1: left promiscuous mode [ 949.205495][T30173] batadv0: left promiscuous mode [ 949.368012][T12286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.379784][T12286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.500171][T30126] ÿ speed is unknown, defaulting to 1000 [ 949.683956][T12286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 949.694898][T12286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.712483][T30212] syzkaller0: entered promiscuous mode [ 949.718106][T30212] syzkaller0: entered allmulticast mode [ 949.758208][ T50] Bluetooth: hci4: command tx timeout [ 950.130485][T12288] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.204463][T30248] netlink: 'syz.4.6330': attribute type 1 has an invalid length. [ 950.245926][T12288] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.254203][T12288] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.365984][T30248] 8021q: adding VLAN 0 to HW filter on device bond12 [ 950.429453][T30255] bond12: (slave veth5): Enslaving as an active interface with a down link [ 950.466184][T30257] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 950.476267][T30257] bond12: (slave batadv2): making interface the new active one [ 950.485396][T30257] batadv2: entered promiscuous mode [ 950.491119][T30257] bond12: (slave batadv2): Enslaving as an active interface with an up link [ 950.563127][T12268] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.588411][T30265] __nla_validate_parse: 2 callbacks suppressed [ 950.588430][T30265] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6333'. [ 950.699512][T12286] geneve0: left allmulticast mode [ 950.705489][T12286] geneve0: left promiscuous mode [ 950.715711][T12286] bridge0: port 3(geneve0) entered disabled state [ 950.733761][T12286] bridge_slave_1: left allmulticast mode [ 950.749531][T12286] bridge_slave_1: left promiscuous mode [ 950.761193][T12286] bridge0: port 2(bridge_slave_1) entered disabled state [ 950.829724][T12286] bridge_slave_0: left allmulticast mode [ 950.836773][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033df7400: rx timeout, send abort [ 950.860547][T12286] bridge_slave_0: left promiscuous mode [ 950.880213][T12286] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.055197][T30289] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6336'. [ 951.166932][T30297] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6337'. [ 951.234439][T30303] netlink: 268 bytes leftover after parsing attributes in process `syz.1.6337'. [ 951.336951][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880497fe400: rx timeout, send abort [ 951.345832][ C0] vcan0: j1939_tp_rxtimer: 0xffff888033df7400: abort rx timeout. Force session deactivation [ 951.844609][ T50] Bluetooth: hci4: command tx timeout [ 951.850335][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880497fe400: abort rx timeout. Force session deactivation [ 952.075595][T12286] bond6 (unregistering): (slave ip6gre2): Releasing backup interface [ 952.085339][T12286] ip6gre2 (unregistering): left promiscuous mode [ 952.392051][T12286] bond1 (unregistering): Released all slaves [ 952.406200][T12286] bond2 (unregistering): Released all slaves [ 952.421031][T12286] bond3 (unregistering): (slave lo): Releasing backup interface [ 952.429970][T12286] bond3 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 952.461492][T12286] bond3 (unregistering): Released all slaves [ 952.475806][T12286] bond4 (unregistering): Released all slaves [ 952.489803][T12286] bond5 (unregistering): Released all slaves [ 952.504055][T12286] bond6 (unregistering): Released all slaves [ 952.518111][T12286] bond0 (unregistering): Released all slaves [ 952.532342][T12286] bond7 (unregistering): Released all slaves [ 952.547389][T12286] bond8 (unregistering): Released all slaves [ 952.617847][ T5288] 8021q: adding VLAN 0 to HW filter on device eth1 [ 952.893193][T12286] tipc: Disabling bearer [ 952.904697][T30325] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6342'. [ 952.916992][T30325] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6342'. [ 952.928618][T12286] tipc: Left network mode [ 952.988253][T30126] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.007023][T30126] bridge0: port 1(bridge_slave_0) entered disabled state [ 953.015661][T30126] bridge_slave_0: entered allmulticast mode [ 953.089567][T30126] bridge_slave_0: entered promiscuous mode [ 953.101629][T30335] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6344'. [ 953.147118][T30126] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.161523][T30126] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.195907][T30126] bridge_slave_1: entered allmulticast mode [ 953.252499][T30126] bridge_slave_1: entered promiscuous mode [ 953.353764][T30126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.358708][T30347] netlink: 'syz.4.6345': attribute type 3 has an invalid length. [ 953.404231][T30347] netlink: 224 bytes leftover after parsing attributes in process `syz.4.6345'. [ 953.416787][T30347] netlink: 72 bytes leftover after parsing attributes in process `syz.4.6345'. [ 953.558701][T30126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.899752][ T50] Bluetooth: hci4: command tx timeout [ 953.912100][T30126] team0: Port device team_slave_0 added [ 954.062061][T30126] team0: Port device team_slave_1 added [ 954.106109][T30126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 954.113121][T30126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.139119][T30126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 954.177826][T30366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6351'. [ 954.251225][T30126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 954.258229][T30126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 954.307646][T30126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 954.372060][T30126] hsr_slave_0: entered promiscuous mode [ 954.379066][T30126] hsr_slave_1: entered promiscuous mode [ 954.385636][T30126] debugfs: 'hsr0' already exists in 'hsr' [ 954.394598][T30126] Cannot create hsr debugfs directory [ 954.406922][T30374] bridge_slave_1: default FDB implementation only supports local addresses [ 954.486829][ T5288] 8021q: adding VLAN 0 to HW filter on device eth2 [ 954.920847][T30402] netlink: 'syz.1.6360': attribute type 2 has an invalid length. [ 954.986911][T30402] syzkaller0: entered promiscuous mode [ 954.992451][T30402] syzkaller0: entered allmulticast mode [ 955.052748][T30406] netlink: 'syz.4.6361': attribute type 1 has an invalid length. [ 955.217119][T30126] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.322530][T12278] smbdirect: ib_dev[syz1] removed [ 955.524863][T30126] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 955.594753][T30424] __nla_validate_parse: 2 callbacks suppressed [ 955.594772][T30424] netlink: 256 bytes leftover after parsing attributes in process `syz.2.6366'. [ 955.979700][ T50] Bluetooth: hci4: command tx timeout [ 956.026100][T30449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6370'. [ 956.055372][T30447] openvswitch: netlink: IPv4 tunnel dst address is zero [ 956.085293][T30447] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.189222][T30126] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 956.345981][T30458] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6373'. [ 956.358048][T12286] hsr_slave_0: left promiscuous mode [ 956.379148][T12286] hsr_slave_1: left promiscuous mode [ 956.385334][T12286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 956.392947][T12286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.419377][T12286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 956.426841][T12286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.444467][T12286] veth1_vlan: left promiscuous mode [ 956.449804][T12286] veth0_vlan: left promiscuous mode [ 956.834566][T30481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6377'. [ 956.923137][T30486] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6378'. [ 957.249136][T12286] team0 (unregistering): Port device team_slave_1 removed [ 957.706226][T30505] netlink: 'syz.4.6379': attribute type 21 has an invalid length. [ 957.757400][T30511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6379'. [ 957.805636][T30126] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 957.918001][T30520] netlink: 'syz.1.6381': attribute type 9 has an invalid length. [ 957.918001][T30505] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6379'. [ 958.236898][T30534] IPVS: set_ctl: invalid protocol: 94 0.0.0.0:20002 [ 958.374860][T30126] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 958.389721][T30126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 958.397926][T30126] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 958.456614][T30126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 958.466182][T30126] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 958.507154][T30126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 958.552618][T30126] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 958.571081][T30126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 958.669819][T30553] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6389'. [ 958.828038][T30541] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6387'. [ 959.088658][T30126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 959.186723][T30126] 8021q: adding VLAN 0 to HW filter on device team0 [ 959.220631][T12278] bridge0: port 1(bridge_slave_0) entered blocking state [ 959.227905][T12278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 959.270510][T30581] xt_hashlimit: max too large, truncated to 1048576 [ 959.278882][T30581] No such timeout policy "syz1" [ 959.281019][T12278] bridge0: port 2(bridge_slave_1) entered blocking state [ 959.291064][T12278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 959.408056][T30126] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 959.593769][T12286] IPVS: stop unused estimator thread 0... [ 959.612004][T30602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 959.665879][T30604] tipc: Enabling of bearer rejected, failed to enable media [ 959.720899][T30606] netlink: 'syz.2.6402': attribute type 1 has an invalid length. [ 959.811921][T30617] IPVS: Unknown mcast interface: netpci0 [ 959.825916][T30610] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6403'. [ 960.774800][T30664] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6412'. [ 960.850501][T30126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 960.893022][T30673] syzkaller0: entered promiscuous mode [ 960.898569][T30673] syzkaller0: entered allmulticast mode [ 961.045025][T30680] sctp: [Deprecated]: syz.3.6416 (pid 30680) Use of int in max_burst socket option. [ 961.045025][T30680] Use struct sctp_assoc_value instead [ 961.051368][T30126] veth0_vlan: entered promiscuous mode [ 961.123340][T30126] veth1_vlan: entered promiscuous mode [ 961.212851][T30126] veth0_macvtap: entered promiscuous mode [ 961.270765][T30126] veth1_macvtap: entered promiscuous mode [ 961.294717][T30689] netlink: 'syz.1.6418': attribute type 9 has an invalid length. [ 961.304011][T30691] netlink: 'syz.3.6419': attribute type 1 has an invalid length. [ 961.308311][T30683] netlink: 'syz.4.6415': attribute type 6 has an invalid length. [ 961.373644][T30691] 8021q: adding VLAN 0 to HW filter on device bond1 [ 961.483315][T30698] netlink: 'syz.2.6420': attribute type 1 has an invalid length. [ 961.496006][T30691] veth3: entered allmulticast mode [ 961.531175][T30691] bond1: (slave veth3): Enslaving as an active interface with a down link [ 961.568089][T30126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 961.601619][T30694] bond1: (slave veth0_to_bond): making interface the new active one [ 961.640329][T30694] veth0_to_bond: entered promiscuous mode [ 961.646673][T30694] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 961.687143][T30126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.710924][T30691] bond1: entered promiscuous mode [ 961.716233][T30691] bond1: entered allmulticast mode [ 961.721401][T30691] veth0_to_bond: entered allmulticast mode [ 961.861644][T12274] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.887343][T12274] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.896136][T12274] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.904883][T12274] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.998941][T30718] syzkaller0: entered promiscuous mode [ 962.004477][T30718] syzkaller0: entered allmulticast mode [ 962.024630][T30725] netlink: 'syz.3.6429': attribute type 1 has an invalid length. [ 962.131950][T30729] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6429'. [ 962.134090][T30725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 962.243655][T30725] bond1: (slave veth0_to_bond): Releasing active interface [ 962.251130][T30725] veth0_to_bond: left allmulticast mode [ 962.256697][T30725] veth0_to_bond: left promiscuous mode [ 962.267251][T30725] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 962.281027][T12286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.291524][T12286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.306732][T30725] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6429'. [ 962.317175][T30725] netlink: 2 bytes leftover after parsing attributes in process `syz.3.6429'. [ 962.396369][T12286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.406252][T12286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.546912][T30744] netlink: 'syz.0.6294': attribute type 1 has an invalid length. [ 962.560849][T30744] netlink: 240 bytes leftover after parsing attributes in process `syz.0.6294'. [ 962.578177][T30744] netlink: 'syz.0.6294': attribute type 1 has an invalid length. [ 962.740923][T30760] veth1_macvtap: left promiscuous mode [ 962.781061][T30760] macsec0: entered promiscuous mode [ 962.789210][T30760] macsec0: entered allmulticast mode [ 962.807177][T30766] macsec0: left allmulticast mode [ 962.958041][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 962.962487][T30775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6442'. [ 962.966153][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 963.001471][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 963.032543][T30775] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6442'. [ 963.291473][T30786] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6445'. [ 963.480525][T30793] bridge0: port 1(syz_tun) entered blocking state [ 963.497985][T30793] bridge0: port 1(syz_tun) entered disabled state [ 963.513487][T30793] syz_tun: entered allmulticast mode [ 963.536650][T30793] syz_tun: entered promiscuous mode [ 963.575454][T30773] infiniband syz2: set active [ 963.580247][T25284] vxcan1 speed is unknown, defaulting to 1000 [ 963.586417][T30773] infiniband syz2: added vxcan1 [ 963.635537][T30773] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 963.658494][T30773] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 963.677279][T30773] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 963.783294][T30773] RDS/IB: syz2: added [ 963.787404][T30773] smc: adding ib device syz2 with port count 1 [ 963.793684][T30773] smc: ib device syz2 port 1 has no pnetid [ 963.805613][T25287] vxcan1 speed is unknown, defaulting to 1000 [ 963.859436][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 964.044202][T30819] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6453'. [ 964.207750][T30825] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6454'. [ 964.261741][T30819] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 964.287453][T30819] bond3: (slave vti0): Error -95 calling set_mac_address [ 965.876276][T30823] macvtap1: entered allmulticast mode [ 965.895222][T30826] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 965.932809][T30826] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.977055][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 965.985089][T12287] batadv2: left promiscuous mode [ 966.038485][T30830] netlink: 'syz.4.6456': attribute type 7 has an invalid length. [ 966.116484][T30832] syzkaller0: entered promiscuous mode [ 966.139401][T30832] syzkaller0: entered allmulticast mode [ 966.147652][T30832] __nla_validate_parse: 2 callbacks suppressed [ 966.147673][T30832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6457'. [ 966.162825][T30832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6457'. [ 966.213103][T30838] IPVS: length: 44 != 8 [ 966.432597][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 966.935754][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 967.432544][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 967.478766][T30855] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 967.509462][ T5635] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 967.527900][ T5635] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 967.537869][ T5635] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 967.547098][ T5635] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 967.601863][ T5635] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 967.989520][T19200] syz_tun (unregistering): left allmulticast mode [ 968.009580][T19200] syz_tun (unregistering): left promiscuous mode [ 968.020717][T19200] bridge0: port 1(syz_tun) entered disabled state [ 968.094995][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 968.294050][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'. [ 968.338007][T30875] team0 (unregistering): Port device team_slave_0 removed [ 968.387922][T30875] team0 (unregistering): Port device team_slave_1 removed [ 968.464507][T30884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6471'. [ 968.510551][T30858] vxcan1 speed is unknown, defaulting to 1000 [ 968.520788][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'. [ 968.530222][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'. [ 968.552321][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'. [ 968.561798][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'. [ 968.571350][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'. [ 968.587168][T30875] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6469'. [ 968.647638][T30888] openvswitch: netlink: IP tunnel attribute has 1 unknown bytes. [ 968.808711][T30898] netlink: 'syz.1.6474': attribute type 2 has an invalid length. [ 968.889830][T30773] vxcan1 speed is unknown, defaulting to 1000 [ 969.122198][T30909] netlink: 'syz.1.6476': attribute type 2 has an invalid length. [ 969.139663][T30909] : entered promiscuous mode [ 969.664619][T30858] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.672173][T30858] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.678889][ T50] Bluetooth: hci3: command tx timeout [ 969.681739][T30858] bridge_slave_0: entered allmulticast mode [ 969.696225][T30858] bridge_slave_0: entered promiscuous mode [ 969.707007][T30858] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.714513][T30858] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.722730][T30858] bridge_slave_1: entered allmulticast mode [ 969.739860][T30858] bridge_slave_1: entered promiscuous mode [ 969.756212][T30941] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.763892][T30941] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.811100][T30858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 969.823510][T30938] syzkaller0: entered promiscuous mode [ 969.829653][T30938] syzkaller0: entered allmulticast mode [ 969.840563][T30858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.996074][T30953] bond0: Error: CAN devices cannot be enslaved [ 970.006642][T30858] team0: Port device team_slave_0 added [ 970.024170][T30858] team0: Port device team_slave_1 added [ 970.127713][T30858] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 970.135883][T30858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.171001][T30858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 970.187690][T30858] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 970.194679][T30858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 970.233123][T30858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 970.272253][T12274] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.312024][T12274] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.408262][T12274] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.422927][T12274] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 970.444497][T30858] hsr_slave_0: entered promiscuous mode [ 970.467026][T30858] hsr_slave_1: entered promiscuous mode [ 970.484625][T30980] x_tables: duplicate underflow at hook 1 [ 971.199722][T30996] xt_hashlimit: size too large, truncated to 1048576 [ 971.271596][T31001] __nla_validate_parse: 63 callbacks suppressed [ 971.271617][T31001] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6502'. [ 971.365311][T31001] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6502'. [ 971.374392][T31001] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6502'. [ 971.383379][T31001] netlink: 'syz.2.6502': attribute type 3 has an invalid length. [ 971.391199][T31001] netlink: 'syz.2.6502': attribute type 2 has an invalid length. [ 971.398951][T31001] netlink: 31 bytes leftover after parsing attributes in process `syz.2.6502'. [ 971.417444][T30858] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.519935][T30858] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.601523][T31009] netlink: 'syz.0.6503': attribute type 30 has an invalid length. [ 971.639389][T31011] netlink: 'syz.2.6504': attribute type 1 has an invalid length. [ 971.691180][T31009] bond1: entered promiscuous mode [ 971.808475][ T50] Bluetooth: hci3: command tx timeout [ 971.814885][T31011] bond1: entered promiscuous mode [ 971.820494][T31011] 8021q: adding VLAN 0 to HW filter on device bond1 [ 971.889389][T31011] netlink: 'syz.2.6504': attribute type 1 has an invalid length. [ 971.897542][T31014] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 971.910162][T31014] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 971.920431][T31014] bond1: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 972.246610][T31013] bond1: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 972.259026][T31013] bond1: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 972.303034][T31027] netlink: 240 bytes leftover after parsing attributes in process `syz.3.6509'. [ 972.371829][T31011] netlink: 'syz.2.6504': attribute type 1 has an invalid length. [ 972.510379][T30858] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 972.537624][T30858] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.034465][T31048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6517'. [ 973.065720][T30858] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 973.076006][T30858] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.157308][T31054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6513'. [ 973.164388][T31048] team1: entered promiscuous mode [ 973.184333][T31048] team1: entered allmulticast mode [ 973.287259][T31060] netlink: 144 bytes leftover after parsing attributes in process `syz.2.6520'. [ 973.318971][T31053] syzkaller0: entered promiscuous mode [ 973.337949][T31053] syzkaller0: entered allmulticast mode [ 973.754392][T31079] xt_cgroup: xt_cgroup: no path or classid specified [ 973.762297][T31079] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6524'. [ 973.907235][ T50] Bluetooth: hci3: command tx timeout [ 976.015426][ T50] Bluetooth: hci3: command tx timeout [ 976.607182][T30858] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 976.630887][T30858] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 976.933272][T31094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6529'. [ 977.103362][T31100] netlink: 'syz.2.6530': attribute type 1 has an invalid length. [ 977.308746][T30858] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 977.340982][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 977.357075][T30858] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 977.384229][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 977.393990][T30858] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 977.409877][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 977.428745][T30858] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 977.442807][T30858] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 977.632516][T31120] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6534'. [ 977.826193][T31134] syzkaller0: entered promiscuous mode [ 977.831717][T31134] syzkaller0: entered allmulticast mode [ 977.878682][T31113] nbd3: detected capacity change from 0 to 63 [ 977.896933][T31121] block nbd3: NBD_DISCONNECT [ 977.920342][T31121] block nbd3: Disconnected due to user request. [ 977.932461][T31121] block nbd3: shutting down sockets [ 978.000481][T31143] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6540'. [ 978.044359][ C1] blk_print_req_error: 101 callbacks suppressed [ 978.044384][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.060005][ C1] buffer_io_error: 138 callbacks suppressed [ 978.060026][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 978.073702][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.082907][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 978.090664][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.100026][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 978.107786][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.116941][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 978.129496][ T1184] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.138864][ T1184] Buffer I/O error on dev nbd3, logical block 0, async page read [ 978.147376][ T1184] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.156752][ T1184] Buffer I/O error on dev nbd3, logical block 1, async page read [ 978.164946][ T1184] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.179191][ T1184] Buffer I/O error on dev nbd3, logical block 2, async page read [ 978.189385][ T1184] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.198588][ T1184] Buffer I/O error on dev nbd3, logical block 3, async page read [ 978.210649][ T1184] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.220380][ T1184] Buffer I/O error on dev nbd3, logical block 0, async page read [ 978.228553][ T1184] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 978.238182][ T1184] Buffer I/O error on dev nbd3, logical block 1, async page read [ 978.258130][T31093] ldm_validate_partition_table(): Disk read failed. [ 978.273842][T31093] Dev nbd3: unable to read RDB block 0 [ 978.283473][T31093] nbd3: unable to read partition table [ 978.302548][T31093] ldm_validate_partition_table(): Disk read failed. [ 978.306747][T30858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.312686][T31093] Dev nbd3: unable to read RDB block 0 [ 978.357471][T31093] nbd3: unable to read partition table [ 978.463423][T30858] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.525624][T31154] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6543'. [ 978.553134][T12286] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.560350][T12286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.615252][T12286] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.622547][T12286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.866505][T31167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6546'. [ 979.059469][T31175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6549'. [ 979.068572][T31175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6549'. [ 979.089255][T31175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6549'. [ 979.110639][T31175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6549'. [ 979.119664][T31175] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6549'. [ 979.662833][T30858] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.717674][T31215] syzkaller0: entered promiscuous mode [ 979.736992][T31215] syzkaller0: entered allmulticast mode [ 979.861496][T31215] tipc: Started in network mode [ 979.866532][T31215] tipc: Node identity c236a9364e25, cluster identity 4711 [ 979.884078][T31215] tipc: Enabled bearer , priority 0 [ 979.995611][T31212] tipc: Resetting bearer [ 980.049434][T31212] tipc: Disabling bearer [ 980.093455][T31233] netlink: 'syz.1.6562': attribute type 24 has an invalid length. [ 980.319317][T31253] veth0: entered promiscuous mode [ 980.398852][T31249] netlink: 'syz.0.6565': attribute type 2 has an invalid length. [ 980.417087][T31246] veth0: left promiscuous mode [ 980.476836][T31257] netlink: 'syz.3.6568': attribute type 12 has an invalid length. [ 980.500196][T30858] veth0_vlan: entered promiscuous mode [ 980.524790][T30858] veth1_vlan: entered promiscuous mode [ 980.602806][T30858] veth0_macvtap: entered promiscuous mode [ 980.635763][T30858] veth1_macvtap: entered promiscuous mode [ 980.695323][T30858] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 980.733325][T31269] netlink: 'syz.2.6572': attribute type 1 has an invalid length. [ 980.751795][T31269] netlink: 'syz.2.6572': attribute type 1 has an invalid length. [ 980.771743][T30858] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 980.776427][T31272] netlink: 'syz.3.6574': attribute type 1 has an invalid length. [ 980.865696][T31272] 8021q: adding VLAN 0 to HW filter on device bond4 [ 980.893660][T12279] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.907308][T12279] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.948189][T12279] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.956979][T12279] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 981.079593][T31286] netlink: 'syz.3.6576': attribute type 4 has an invalid length. [ 981.095847][T12279] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.115701][T12279] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.118396][T31288] netlink: 'syz.3.6576': attribute type 4 has an invalid length. [ 981.163571][T12279] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.173939][T12279] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 981.341008][T12268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.360860][T12268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.471839][T12274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 981.542476][T12274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 981.863219][T31319] sctp: [Deprecated]: syz.1.6583 (pid 31319) Use of int in maxseg socket option. [ 981.863219][T31319] Use struct sctp_assoc_value instead [ 981.902918][ T30] audit: type=1107 audit(1784594699.639:17): pid=31315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 981.961335][T31325] __nla_validate_parse: 7 callbacks suppressed [ 981.961357][T31325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6585'. [ 982.103437][T31321] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6584'. [ 982.137062][T31327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6586'. [ 982.335574][T31340] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6591'. [ 982.360012][T31340] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6591'. [ 982.528840][T31356] bond0: option miimon: invalid value (18446744073709551615) [ 982.536384][T31356] bond0: option miimon: allowed values 0 - 2147483647 [ 982.582704][T31361] netlink: 40 bytes leftover after parsing attributes in process `syz.0.6596'. [ 982.595097][T31362] netlink: 'syz.1.6597': attribute type 32 has an invalid length. [ 982.615963][T31362] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6597'. [ 982.666419][T31362] bond3: option coupled_control: invalid value (192) [ 982.692255][T31362] bond3 (unregistering): Released all slaves [ 982.800525][T31377] bond0: entered promiscuous mode [ 982.805794][T31377] bond_slave_0: entered promiscuous mode [ 982.820589][T31377] bond_slave_1: entered promiscuous mode [ 982.836947][T31377] batadv0: entered promiscuous mode [ 982.887140][T31377] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 982.923174][T31377] bond0: left promiscuous mode [ 982.928228][T31377] bond_slave_0: left promiscuous mode [ 982.934474][T31377] bond_slave_1: left promiscuous mode [ 982.968482][T31377] batadv0: left promiscuous mode [ 983.086604][T31393] vlan2: entered promiscuous mode [ 983.097088][T31393] bridge0: entered promiscuous mode [ 983.212714][T31397] batman_adv: batadv0: Adding interface: dummy0 [ 983.219456][T31397] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.246924][T31397] batman_adv: batadv0: Interface activated: dummy0 [ 983.254851][T31400] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6607'. [ 983.271291][T31398] batadv0: mtu less than device minimum [ 983.304233][T31398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 983.319242][T31398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 983.331382][T31398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 983.343469][T31398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 983.349700][T31403] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6608'. [ 983.355296][T31398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 983.374066][T31398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 983.386150][T31398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 983.392773][T31404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6607'. [ 983.398050][T31398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 983.417214][T31398] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 983.507377][T31404] veth0_macvtap: left promiscuous mode [ 984.325162][T31437] netlink: 'syz.4.6609': attribute type 1 has an invalid length. [ 984.566118][T31438] syzkaller0: entered promiscuous mode [ 984.571684][T31438] syzkaller0: entered allmulticast mode [ 988.977561][T31478] __nla_validate_parse: 5 callbacks suppressed [ 988.977584][T31478] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6624'. [ 989.026457][T31478] netlink: 76 bytes leftover after parsing attributes in process `syz.3.6624'. [ 989.165317][T31488] netlink: 'syz.2.6628': attribute type 49 has an invalid length. [ 989.194349][T31487] netlink: 'syz.1.6626': attribute type 4 has an invalid length. [ 989.291988][T31499] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6630'. [ 989.330594][T31503] netlink: 'syz.4.6631': attribute type 11 has an invalid length. [ 989.338865][T31503] x_tables: duplicate underflow at hook 3 [ 989.399340][T31507] netlink: 56 bytes leftover after parsing attributes in process `syz.3.6632'. [ 989.409256][T31488] ip6gretap0: entered promiscuous mode [ 989.414776][T31488] ip6gretap0: entered allmulticast mode [ 989.647135][T31502] 8021q: adding VLAN 0 to HW filter on device bond5 [ 989.960851][T12287] nci: nci_rx_work: unknown MT 0x4 [ 990.073981][T31538] netlink: 'syz.4.6640': attribute type 29 has an invalid length. [ 990.111029][T31542] netlink: 'syz.0.6642': attribute type 12 has an invalid length. [ 990.231281][T31550] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6641'. [ 990.356242][T31554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6644'. [ 990.477181][T31519] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.891029][T31564] veth0: entered promiscuous mode [ 990.902950][T31564] veth0: entered allmulticast mode [ 991.387625][T31590] netlink: 96 bytes leftover after parsing attributes in process `syz.0.6652'. [ 991.441556][T31593] syzkaller0: entered promiscuous mode [ 991.465320][T31593] syzkaller0: entered allmulticast mode [ 991.524059][T31595] net_ratelimit: 10 callbacks suppressed [ 991.524081][T31595] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 991.538189][T31595] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 991.573016][T31595] netlink: 'syz.4.6653': attribute type 4 has an invalid length. [ 991.602879][T31595] netlink: 17 bytes leftover after parsing attributes in process `syz.4.6653'. [ 992.347563][T31606] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6655'. [ 992.971487][T31630] IPv6: sit1: Disabled Multicast RS [ 993.033068][T31641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6665'. [ 993.521269][T31656] netlink: 'syz.4.6667': attribute type 4 has an invalid length. [ 993.619107][T31656] syz.4.6667 (31656) used obsolete PPPIOCDETACH ioctl [ 993.799850][T31665] syzkaller0: entered promiscuous mode [ 993.816886][T31665] syzkaller0: entered allmulticast mode [ 993.914990][T31673] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 993.921599][T31673] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 993.966234][T31673] hsr_slave_0: left promiscuous mode [ 993.972809][T31673] hsr_slave_1: left promiscuous mode [ 994.442537][T31694] xt_hashlimit: size too large, truncated to 1048576 [ 994.530819][T31700] nbd: must specify a size in bytes for the device [ 994.799079][T31717] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 994.838141][T31721] __nla_validate_parse: 11 callbacks suppressed [ 994.838163][T31721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6682'. [ 995.502517][T31745] netlink: 'syz.0.6691': attribute type 3 has an invalid length. [ 995.540234][T31747] erspan0: entered promiscuous mode [ 995.545523][T31747] erspan0: entered allmulticast mode [ 995.566085][T31751] netlink: get zone limit has 4 unknown bytes [ 995.783457][T31755] netlink: 156 bytes leftover after parsing attributes in process `syz.4.6699'. [ 995.968670][T31773] netlink: 'syz.4.6702': attribute type 34 has an invalid length. [ 995.977348][T31753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6697'. [ 995.989220][T31773] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6702'. [ 995.998200][T31753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6697'. [ 996.064811][T31753] netlink: 'syz.2.6697': attribute type 1 has an invalid length. [ 996.517311][T31800] IPVS: set_ctl: invalid protocol: 43 172.20.20.55:20001 [ 996.518523][T31794] bond3 (unregistering): Released all slaves [ 996.747750][T31809] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 996.866935][T31814] »»»»»»: renamed from vxcan1 (while UP) [ 997.054370][T31830] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6722'. [ 997.160627][T31836] netlink: 164 bytes leftover after parsing attributes in process `syz.3.6721'. [ 997.197908][T31836] netlink: 'syz.3.6721': attribute type 1 has an invalid length. [ 997.273639][T31836] netlink: 'syz.3.6721': attribute type 11 has an invalid length. [ 997.308011][T31836] netlink: 224 bytes leftover after parsing attributes in process `syz.3.6721'. [ 997.388243][T31849] netlink: 76 bytes leftover after parsing attributes in process `syz.4.6726'. [ 997.559073][T31862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6729'. [ 997.568103][T31862] block nbd3: Unsupported socket: should be TCP or UNIX. [ 997.976009][T31893] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 997.989097][ T30] audit: type=1804 audit(1784594715.719:18): pid=31891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.6737" name="/newroot/143/cgroup.controllers" dev="tmpfs" ino=747 res=1 errno=0 [ 997.989161][ T30] audit: type=1800 audit(1784594715.719:19): pid=31891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.6737" name="cgroup.controllers" dev="tmpfs" ino=747 res=0 errno=0 [ 998.070381][T31893] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.082640][T31893] bond0 (unregistering): Released all slaves [ 998.101040][T31904] netlink: 'syz.1.6742': attribute type 1 has an invalid length. [ 998.135595][T31898] bond2: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 998.148145][T31898] bond2 (unregistering): Released all slaves [ 998.221313][T31906] veth3: entered promiscuous mode [ 998.252965][T31906] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 998.305936][T31904] 8021q: adding VLAN 0 to HW filter on device bond3 [ 998.602292][T31925] netlink: 'syz.0.6747': attribute type 5 has an invalid length. [ 998.606527][T31927] sctp: [Deprecated]: syz.1.6748 (pid 31927) Use of int in maxseg socket option. [ 998.606527][T31927] Use struct sctp_assoc_value instead [ 998.729056][T31929] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 998.967376][T31942] openvswitch: netlink: Flow key attr not present in new flow. [ 999.059414][T31949] netlink: 'syz.4.6752': attribute type 1 has an invalid length. [ 999.094840][T31949] netlink: 'syz.4.6752': attribute type 1 has an invalid length. [ 999.102631][T31949] netlink: 'syz.4.6752': attribute type 2 has an invalid length. [ 999.323435][ T30] audit: type=1107 audit(1784594717.069:20): pid=31967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='£CjXtTˆá{‚åÄ®4÷¨ÍÛŒaãyõÕx–ìä°N6û¦4ˆìÈJâT Zõo¢ªàcÀø“«ÙË&­’†ï;‹´ •ÿÐ hM?7óî¶÷ôªþG?°tùr' [ 999.391825][ T30] audit: type=1804 audit(1784594717.139:21): pid=31973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.6761" name="/newroot/57/cgroup.controllers" dev="tmpfs" ino=307 res=1 errno=0 [ 999.416187][ T30] audit: type=1800 audit(1784594717.139:22): pid=31973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6761" name="cgroup.controllers" dev="tmpfs" ino=307 res=0 errno=0 [ 999.465614][T31977] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 999.907708][T32002] syzkaller0: entered promiscuous mode [ 999.913214][T32002] syzkaller0: entered allmulticast mode [ 1000.097364][T32005] __nla_validate_parse: 11 callbacks suppressed [ 1000.097385][T32005] netlink: 32 bytes leftover after parsing attributes in process `syz.0.6774'. [ 1000.389662][T32025] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6778'. [ 1000.442798][T32028] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1000.663515][T32042] syzkaller0: entered promiscuous mode [ 1000.669058][T32042] syzkaller0: entered allmulticast mode [ 1000.754341][T32044] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1000.997917][T32052] netlink: 'syz.3.6786': attribute type 3 has an invalid length. [ 1001.125595][T32060] netlink: zone id is out of range [ 1001.131251][T32057] veth1_macvtap: left promiscuous mode [ 1001.140219][T32060] netlink: set zone limit has 4 unknown bytes [ 1001.187485][T32057] veth1_macvtap: entered promiscuous mode [ 1001.218470][T32056] tc_dump_action: action bad kind [ 1001.672525][T32080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1001.677822][T32087] netlink: 'syz.4.6799': attribute type 2 has an invalid length. [ 1001.688191][T32079] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1001.690310][T32087] netlink: 'syz.4.6799': attribute type 1 has an invalid length. [ 1001.699527][T32080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1001.716113][T32079] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1001.728271][T32079] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1001.740268][T32080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1001.755374][T32080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1001.756567][T12274] nci: nci_rsp_packet: unknown rsp opcode 0x116 [ 1001.764689][T32080] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6797'. [ 1001.876718][T32095] netlink: 'syz.0.6798': attribute type 30 has an invalid length. [ 1002.186944][T32109] unsupported nla_type 7424 [ 1002.506627][T32082] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1002.844465][T32143] veth1_macvtap: left promiscuous mode [ 1002.850106][T32143] macsec0: entered promiscuous mode [ 1003.444211][T32163] IPVS: Scheduler module ip_vs_sip not found [ 1003.966687][T32196] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.116690][T32220] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0 [ 1004.320894][T32228] xt_l2tp: unknown flags: 10 [ 1004.546372][T32241] bond5: Invalid ad_actor_system MAC address. [ 1004.559454][T32236] nbd: nbd0 already in use [ 1004.569039][T32241] bond5: option ad_actor_system: invalid value (1) [ 1004.569324][T32237] nbd: nbd0 already in use [ 1004.587063][T32241] bond5 (unregistering): Released all slaves [ 1005.157747][T32270] netlink: 'syz.1.6846': attribute type 12 has an invalid length. [ 1005.173996][T32271] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1005.311600][T32278] __nla_validate_parse: 71 callbacks suppressed [ 1005.311621][T32278] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6850'. [ 1005.422517][T32283] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6851'. [ 1005.563955][T32292] netlink: 'syz.0.6854': attribute type 16 has an invalid length. [ 1005.571845][T32292] netlink: 'syz.0.6854': attribute type 17 has an invalid length. [ 1005.614261][T32295] netlink: 'syz.2.6855': attribute type 10 has an invalid length. [ 1005.644073][T32295] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6855'. [ 1005.782163][T32292] bond1: left promiscuous mode [ 1005.787583][T32292] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1005.796620][T32292] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1005.808595][T32295] team0: entered allmulticast mode [ 1005.815582][T32295] team_slave_0: entered allmulticast mode [ 1005.823160][T32295] team_slave_1: entered allmulticast mode [ 1005.829684][T32295] bridge0: port 3(team0) entered blocking state [ 1005.866604][T32295] bridge0: port 3(team0) entered disabled state [ 1005.885339][T32295] team0: entered promiscuous mode [ 1005.890454][T32295] team_slave_0: entered promiscuous mode [ 1005.906898][T32295] team_slave_1: entered promiscuous mode [ 1005.920287][T32295] bridge0: port 3(team0) entered blocking state [ 1005.926886][T32295] bridge0: port 3(team0) entered forwarding state [ 1005.937028][T32311] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6856'. [ 1005.977725][T32299] netlink: 81 bytes leftover after parsing attributes in process `syz.2.6855'. [ 1006.050393][T32315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6858'. [ 1006.217894][T32319] netlink: 'syz.1.6859': attribute type 14 has an invalid length. [ 1006.259341][T32319] netlink: 'syz.1.6859': attribute type 14 has an invalid length. [ 1006.285573][T32319] netlink: 'syz.1.6859': attribute type 14 has an invalid length. [ 1006.334779][T32319] netlink: 'syz.1.6859': attribute type 14 has an invalid length. [ 1006.349041][T32319] netlink: 'syz.1.6859': attribute type 14 has an invalid length. [ 1006.671926][T32345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6865'. [ 1006.748906][T32345] netlink: 'syz.4.6865': attribute type 5 has an invalid length. [ 1006.822119][T32339] ip6gre1: entered allmulticast mode [ 1006.849254][T32355] gre0: Master is either lo or non-ether device [ 1006.913901][T32357] netlink: 36 bytes leftover after parsing attributes in process `syz.4.6867'. [ 1007.432111][T32383] syzkaller0: entered promiscuous mode [ 1007.441725][T32383] syzkaller0: entered allmulticast mode [ 1007.581364][T32396] netlink: 20 bytes leftover after parsing attributes in process `syz.2.6878'. [ 1007.584499][T32400] syzkaller1: entered promiscuous mode [ 1007.597192][T32400] syzkaller1: entered allmulticast mode [ 1007.664716][T32403] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1007.728883][T32411] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1008.641198][T32463] netlink: 'syz.3.6896': attribute type 2 has an invalid length. [ 1008.895549][T32468] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20004 [ 1009.547041][T32507] Bluetooth: MGMT ver 1.23 [ 1009.801150][T32527] xt_hashlimit: size too large, truncated to 1048576 [ 1012.217082][T32488] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1012.493363][T32561] __nla_validate_parse: 8 callbacks suppressed [ 1012.493384][T32561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6915'. [ 1012.520378][T32564] netlink: 32 bytes leftover after parsing attributes in process `syz.3.6917'. [ 1012.550520][T32560] netlink: 48 bytes leftover after parsing attributes in process `syz.0.6916'. [ 1012.792924][T32574] syzkaller0: entered promiscuous mode [ 1012.799008][T32572] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 1012.815403][T32574] syzkaller0: entered allmulticast mode [ 1012.972263][T32587] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6925'. [ 1013.193608][T32595] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6926'. [ 1013.244466][T32595] netlink: 9 bytes leftover after parsing attributes in process `syz.3.6926'. [ 1013.685856][T32611] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6927'. [ 1013.791924][T32614] netlink: 'syz.2.6934': attribute type 1 has an invalid length. [ 1013.813944][T32610] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6933'. [ 1013.939107][T32624] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6937'. [ 1014.060725][T32629] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6938'. [ 1014.224742][T32636] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1014.489042][T32657] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1014.756701][T32671] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.773154][T32671] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.921487][T32687] netlink: 'syz.1.6954': attribute type 49 has an invalid length. [ 1015.253194][T32699] netlink: 'syz.1.6958': attribute type 16 has an invalid length. [ 1015.261076][T32699] netlink: 'syz.1.6958': attribute type 3 has an invalid length. [ 1015.279676][T32701] batadv0: entered promiscuous mode [ 1015.582464][T32678] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1016.310869][T32760] nbd: must specify a size in bytes for the device [ 1016.320118][T32753] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1016.603438][ T308] macvlan0: entered promiscuous mode [ 1016.979272][ T321] hsr_slave_1 (unregistering): left promiscuous mode [ 1017.840650][ T368] __nla_validate_parse: 10 callbacks suppressed [ 1017.840691][ T368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7000'. [ 1017.863917][ T368] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7000'. [ 1017.882502][ T370] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7000'. [ 1017.895612][ T372] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7000'. [ 1017.908158][ T371] lo: entered promiscuous mode [ 1017.960943][ T371] tunl0: entered promiscuous mode [ 1018.002806][ T371] gre0: entered promiscuous mode [ 1018.071533][ T371] gretap0: entered promiscuous mode [ 1018.082913][ T371] erspan0: left allmulticast mode [ 1018.088850][ T371] ip_vti0: entered promiscuous mode [ 1018.128840][ T376] syzkaller0: entered promiscuous mode [ 1018.151764][ T376] syzkaller0: entered allmulticast mode [ 1018.492592][ T387] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1018.570186][ T392] gre1: entered promiscuous mode [ 1018.748848][ T408] netlink: 'syz.3.7011': attribute type 1 has an invalid length. [ 1018.775068][ T409] netlink: 'syz.4.7010': attribute type 1 has an invalid length. [ 1018.808931][ T409] netlink: 224 bytes leftover after parsing attributes in process `syz.4.7010'. [ 1018.829684][ T411] xt_TCPMSS: Only works on TCP SYN packets [ 1019.370459][ T425] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 1019.408255][ T427] netlink: 104 bytes leftover after parsing attributes in process `syz.4.7017'. [ 1019.729136][ T448] netlink: 'syz.2.7024': attribute type 21 has an invalid length. [ 1019.739322][ T445] xt_hashlimit: size too large, truncated to 1048576 [ 1019.746296][ T448] netlink: 156 bytes leftover after parsing attributes in process `syz.2.7024'. [ 1019.802695][ T449] syzkaller0: entered promiscuous mode [ 1019.834617][ T449] syzkaller0: entered allmulticast mode [ 1022.028040][ T501] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7036'. [ 1023.434063][ T465] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1023.659040][ T509] bond3: option arp_all_targets: invalid value (18446744073709551613) [ 1023.671225][ T509] bond3 (unregistering): Released all slaves [ 1023.694641][ T513] netlink: 'syz.0.7039': attribute type 1 has an invalid length. [ 1023.707414][ T513] netlink: 'syz.0.7039': attribute type 2 has an invalid length. [ 1024.095803][ T532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7047'. [ 1024.104926][ T532] netlink: 'syz.1.7047': attribute type 18 has an invalid length. [ 1024.112784][ T532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7047'. [ 1024.157040][T12274] netdevsim netdevsim1 : set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.178938][ T532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7047'. [ 1024.187872][ T532] netlink: 'syz.1.7047': attribute type 18 has an invalid length. [ 1024.195728][ T532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7047'. [ 1024.205256][T12274] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.214566][T12274] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.224452][T12274] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1024.496435][ T545] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 1024.529335][ T547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7051'. [ 1025.393371][ T577] mac80211_hwsim hwsim43 wlan0: entered promiscuous mode [ 1025.642018][ T584] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7060'. [ 1025.654339][ T584] netlink: 'syz.1.7060': attribute type 1 has an invalid length. [ 1027.155464][ T536] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1027.444098][ T594] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7062'. [ 1027.504139][ T605] netlink: 'syz.0.7064': attribute type 1 has an invalid length. [ 1027.815260][ T616] netlink: 40 bytes leftover after parsing attributes in process `syz.0.7071'. [ 1027.839456][ T620] x_tables: duplicate underflow at hook 2 [ 1027.950545][ T623] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7070'. [ 1028.130640][ T642] xt_hashlimit: invalid rate [ 1028.506712][ T658] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7082'. [ 1028.649705][ T667] xt_l2tp: invalid flags combination: 8 [ 1028.950069][ T687] netlink: 'syz.4.7092': attribute type 10 has an invalid length. [ 1029.071667][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1032.424004][ T687] team0: entered allmulticast mode [ 1032.453113][ T687] team_slave_0: entered allmulticast mode [ 1032.459945][ T687] team_slave_1: entered allmulticast mode [ 1032.466121][ T687] bridge0: port 3(team0) entered blocking state [ 1032.472634][ T687] bridge0: port 3(team0) entered disabled state [ 1032.481925][ T687] team0: entered promiscuous mode [ 1032.487008][ T687] team_slave_0: entered promiscuous mode [ 1032.492907][ T687] team_slave_1: entered promiscuous mode [ 1032.499539][ T687] bridge0: port 3(team0) entered blocking state [ 1032.505936][ T687] bridge0: port 3(team0) entered forwarding state [ 1032.516316][ T692] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1032.673219][ T706] erspan0: entered promiscuous mode [ 1032.732968][ T706] __nla_validate_parse: 5 callbacks suppressed [ 1032.732989][ T706] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7095'. [ 1032.762930][ T707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7095'. [ 1032.782362][ T716] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1032.794342][ T713] netlink: 'syz.3.7097': attribute type 22 has an invalid length. [ 1032.803680][ T713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7097'. [ 1032.842035][ T711] netlink: 240 bytes leftover after parsing attributes in process `syz.1.7098'. [ 1032.851627][ T713] netlink: 'syz.3.7097': attribute type 22 has an invalid length. [ 1032.864676][T12288] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.870550][ T713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7097'. [ 1032.873808][T12288] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.908069][T12288] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.919144][T12288] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1032.919352][ T718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7100'. [ 1032.928098][ T720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7100'. [ 1032.974682][ T720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1033.052227][ T727] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7103'. [ 1033.061331][ T727] netlink: 256 bytes leftover after parsing attributes in process `syz.1.7103'. [ 1033.071792][ T727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7103'. [ 1033.080880][ T720] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1033.394574][ T743] syzkaller0: entered promiscuous mode [ 1033.400128][ T743] syzkaller0: entered allmulticast mode [ 1033.435208][ T745] syzkaller0: entered promiscuous mode [ 1033.441128][ T745] syzkaller0: entered allmulticast mode [ 1033.893577][ T755] bond6: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1033.944364][ T755] bond6 (unregistering): Released all slaves [ 1034.021905][ T763] xt_hashlimit: size too large, truncated to 1048576 [ 1034.318546][T25273] »»»»»» speed is unknown, defaulting to 1000 [ 1034.565023][ T784] netlink: 'syz.3.7126': attribute type 1 has an invalid length. [ 1034.572918][ T784] netlink: 'syz.3.7126': attribute type 2 has an invalid length. [ 1034.667039][ T789] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1034.679794][ T789] bond3 (unregistering): Released all slaves [ 1034.721932][ T785] netlink: 'syz.3.7126': attribute type 1 has an invalid length. [ 1034.729739][ T785] netlink: 'syz.3.7126': attribute type 2 has an invalid length. [ 1034.758122][T12286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1034.770617][T12286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.879639][ T805] netlink: 'syz.4.7130': attribute type 9 has an invalid length. [ 1035.212406][ T823] macvlan0: entered promiscuous mode [ 1039.219301][ T852] bridge0: port 4(veth1_to_bridge) entered blocking state [ 1039.239902][ T852] bridge0: port 4(veth1_to_bridge) entered disabled state [ 1039.253197][ T852] veth1_to_bridge: entered allmulticast mode [ 1039.328295][ T852] veth1_to_bridge: entered promiscuous mode [ 1039.344983][ T852] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1039.377634][ T855] openvswitch: netlink: Multiple metadata blocks provided [ 1039.397647][ T855] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1039.404484][ T852] bridge0: port 4(veth1_to_bridge) entered blocking state [ 1039.404638][ T852] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 1039.447409][ T860] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1039.603133][ T864] __nla_validate_parse: 8 callbacks suppressed [ 1039.603154][ T864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1039.638831][ T864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1039.648783][ T864] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1039.685508][ T864] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7148'. [ 1039.783594][ T866] syzkaller0: entered promiscuous mode [ 1039.804122][ T866] syzkaller0: entered allmulticast mode [ 1040.050969][ T875] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0xc9 [ 1040.062664][ T876] sctp: [Deprecated]: syz.1.7151 (pid 876) Use of int in max_burst socket option deprecated. [ 1040.062664][ T876] Use struct sctp_assoc_value instead [ 1042.604471][ T914] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7158'. [ 1043.058373][ T927] netlink: 'syz.0.7160': attribute type 3 has an invalid length. [ 1043.477610][ T940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7164'. [ 1043.514081][ T945] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7166'. [ 1043.539803][ T940] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7164'. [ 1043.781981][T25287] IPVS: starting estimator thread 0... [ 1046.905075][ T954] IPVS: using max 28 ests per chain, 67200 per kthread [ 1050.847438][ C0] sched: DL replenish lagged too much [ 1059.781404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.794997][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.808120][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.821059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.834023][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.847017][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.860546][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.873608][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.886571][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1059.899465][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.797400][ C0] net_ratelimit: 5541 callbacks suppressed [ 1064.797426][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.816268][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.829099][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.842062][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.855404][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.868333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.881141][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.894016][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.906809][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1064.919637][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.823558][ C0] net_ratelimit: 2224 callbacks suppressed [ 1069.823584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.843716][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.858213][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.872528][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.886863][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.901174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.915546][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.929768][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.944788][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1069.959168][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.840558][ C0] net_ratelimit: 4406 callbacks suppressed [ 1074.840585][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.858991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.871917][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.885726][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.898225][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.911138][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.924870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.937358][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1074.950224][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1074.964028][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.875152][ C0] net_ratelimit: 4445 callbacks suppressed [ 1079.875178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.893548][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.906441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1079.920324][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.932906][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.946314][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1079.960073][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.972601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1079.985656][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1079.999857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.904853][ C0] net_ratelimit: 4563 callbacks suppressed [ 1084.904879][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.923719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1084.937602][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.950145][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.963072][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1084.976916][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1084.989553][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1085.002449][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1085.016200][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1085.028679][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1087.637838][ T5635] Bluetooth: hci4: command 0x0406 tx timeout [ 1089.926162][ C0] net_ratelimit: 3066 callbacks suppressed [ 1089.926205][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1089.945945][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.958458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.972609][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1089.986368][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1089.998918][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1090.013095][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1090.026878][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1090.039414][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1090.053512][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1094.952413][ C0] net_ratelimit: 2918 callbacks suppressed [ 1094.952440][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1094.972315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1094.984837][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1094.999064][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.013174][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1095.027011][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.039617][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1095.053943][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1095.071412][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1095.085259][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1099.982272][ C0] net_ratelimit: 3225 callbacks suppressed [ 1099.982299][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.002186][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1100.015851][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.028300][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1100.041984][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.055967][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1100.069666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.082138][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1100.097892][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1100.112024][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1105.008390][ C0] net_ratelimit: 3051 callbacks suppressed [ 1105.008416][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1105.028069][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.040762][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1105.054682][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.069360][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1105.083223][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.096178][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1105.110082][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1105.124208][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1105.137927][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.009052][ C0] net_ratelimit: 3107 callbacks suppressed [ 1110.009077][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.027443][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1110.041293][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.055407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1110.069525][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.082012][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1110.095849][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.109986][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1110.123675][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1110.136384][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1115.021309][ C0] net_ratelimit: 3258 callbacks suppressed [ 1115.021334][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.039785][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1115.055618][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.069709][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1115.083464][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.096051][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1115.109903][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.124088][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1115.137765][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1115.150261][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1120.029437][ C0] net_ratelimit: 3240 callbacks suppressed [ 1120.029462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.049633][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1120.064004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.076593][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1120.090593][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.104716][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1120.118529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.131136][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1120.144958][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1120.159077][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1125.040724][ C0] net_ratelimit: 3211 callbacks suppressed [ 1125.040748][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.060961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1125.074942][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.087526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1125.101485][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.115923][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1125.129883][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.142432][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1125.156472][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1125.181190][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1130.049629][ C0] net_ratelimit: 3108 callbacks suppressed [ 1130.049654][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.068101][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1130.082133][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.096313][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1130.112124][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.125850][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1130.140126][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.154396][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1130.168280][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1130.180878][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1135.065844][ C0] net_ratelimit: 3102 callbacks suppressed [ 1135.065870][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.084403][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1135.098458][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.112828][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1135.126753][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.139442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1135.153495][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.167847][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1135.181670][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1135.194312][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1140.089356][ C0] net_ratelimit: 3023 callbacks suppressed [ 1140.089397][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1140.109159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.123243][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1140.137214][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.149827][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1140.163681][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.177775][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1140.191445][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1140.204100][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1140.217985][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.103543][ C0] net_ratelimit: 3190 callbacks suppressed [ 1145.103569][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1145.123949][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.138086][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1145.151930][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.164522][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1145.178435][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.192550][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1145.206327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1145.218854][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1145.232639][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1150.129310][ C0] net_ratelimit: 3034 callbacks suppressed [ 1150.129335][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1150.152020][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1150.166648][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1150.180802][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1150.193868][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1150.207795][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1150.222182][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1150.236407][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1150.249022][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1150.263053][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.141104][ C0] net_ratelimit: 3155 callbacks suppressed [ 1155.141129][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.161535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1155.175428][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.187977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1155.202220][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.216333][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1155.230215][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.242783][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1155.256665][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1155.270894][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1160.160751][ C0] net_ratelimit: 3231 callbacks suppressed [ 1160.160776][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1160.180400][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.192939][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1160.207139][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.221270][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1160.235033][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.247783][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1160.261595][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1160.275724][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1160.289519][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.185719][ C0] net_ratelimit: 3105 callbacks suppressed [ 1165.185745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.206012][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1165.220060][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.232661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1165.247146][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.261779][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1165.275853][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.288549][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1165.302670][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1165.317004][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1170.209138][ C0] net_ratelimit: 3085 callbacks suppressed [ 1170.209163][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1170.229073][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.243429][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1170.257223][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.269736][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1170.283735][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.298185][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1170.311989][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1170.324717][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1170.338601][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.224061][ C0] net_ratelimit: 3199 callbacks suppressed [ 1175.224087][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.244198][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1175.257961][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.270571][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1175.284394][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.298535][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1175.313441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.325966][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1175.339777][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1175.354505][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1180.238917][ C0] net_ratelimit: 3118 callbacks suppressed [ 1180.238942][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.259266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1180.273255][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.285891][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1180.299853][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.314316][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1180.328249][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.340894][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1180.354945][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1180.369427][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1185.268149][ C0] net_ratelimit: 2796 callbacks suppressed [ 1185.268176][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.286568][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1185.300489][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.315884][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1185.329678][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.342219][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1185.356425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.371842][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1185.386238][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1185.398730][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1190.321321][ C0] net_ratelimit: 2823 callbacks suppressed [ 1190.321347][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1190.341141][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.353710][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1190.367661][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.380366][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1190.396125][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1190.410121][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.422719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1190.436977][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1190.449605][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1193.640509][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1193.647555][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P30126/1:b..l [ 1193.656248][ C1] rcu: (detected by 1, t=10504 jiffies, g=182177, q=425994 ncpus=2) [ 1193.664347][ C1] task:syz-executor state:R running task stack:22416 pid:30126 tgid:30126 ppid:30108 task_flags:0x400140 flags:0x00080000 [ 1193.679422][ C1] Call Trace: [ 1193.682753][ C1] [ 1193.685742][ C1] __schedule+0x17d9/0x56c0 [ 1193.690403][ C1] ? __pfx___schedule+0x10/0x10 [ 1193.695311][ C1] preempt_schedule_irq+0x4d/0xa0 [ 1193.700371][ C1] irqentry_exit+0x14f/0x8f0 [ 1193.704990][ C1] ? trace_irq_disable+0x3b/0x140 [ 1193.710053][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1193.716178][ C1] RIP: 0010:unwind_next_frame+0x21d/0x2550 [ 1193.722028][ C1] Code: b6 04 20 84 c0 4c 89 e3 0f 85 66 1d 00 00 45 8b 6d 00 44 89 f8 ff c0 4c 8d 24 85 84 c4 9d 91 4c 89 e0 48 c1 e8 03 0f b6 04 18 <84> c0 0f 85 66 1d 00 00 45 8b 04 24 41 ff c0 4a 8d 04 6d 00 00 00 [ 1193.741669][ C1] RSP: 0018:ffffc900057972e0 EFLAGS: 00000a02 [ 1193.747775][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000080000000 [ 1193.755794][ C1] RDX: 00000000000ad3a5 RSI: ffffffff8c4bda60 RDI: ffffffff8c4bda20 [ 1193.763814][ C1] RBP: ffffffff84893649 R08: ffffffff8176f27f R09: 0000000000000000 [ 1193.771914][ C1] R10: 0000000000000000 R11: ffffffff8eb59c60 R12: ffffffff91abe960 [ 1193.780000][ C1] R13: 00000000000a3b80 R14: ffffc90005797388 R15: 0000000000038936 [ 1193.788010][ C1] ? tomoyo_realpath_from_path+0x5f9/0x640 [ 1193.793965][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1193.799132][ C1] ? tomoyo_realpath_from_path+0x5fa/0x640 [ 1193.804974][ C1] ? unwind_next_frame+0x8f/0x2550 [ 1193.810126][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1193.816360][ C1] arch_stack_walk+0x11b/0x150 [ 1193.821419][ C1] ? tomoyo_realpath_from_path+0x5fa/0x640 [ 1193.827279][ C1] stack_trace_save+0xa9/0x100 [ 1193.832090][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1193.837498][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1193.842587][ C1] save_stack+0x122/0x230 [ 1193.846963][ C1] ? __pfx_save_stack+0x10/0x10 [ 1193.851859][ C1] ? page_ext_get+0x22/0x2e0 [ 1193.856481][ C1] ? __free_frozen_pages+0xc1e/0xd10 [ 1193.861806][ C1] ? __slab_free+0x274/0x2c0 [ 1193.866445][ C1] ? qlist_free_all+0x99/0x100 [ 1193.871240][ C1] ? kasan_quarantine_reduce+0x148/0x160 [ 1193.876906][ C1] ? __kasan_kmalloc+0x22/0xb0 [ 1193.881702][ C1] ? __kmalloc_noprof+0x375/0x720 [ 1193.886752][ C1] ? tomoyo_encode+0x2ad/0x570 [ 1193.891543][ C1] ? tomoyo_realpath_from_path+0x5fa/0x640 [ 1193.897392][ C1] ? page_ext_put+0x97/0xc0 [ 1193.902122][ C1] __reset_page_owner+0x71/0x1f0 [ 1193.907125][ C1] __free_frozen_pages+0xc1e/0xd10 [ 1193.912288][ C1] __slab_free+0x274/0x2c0 [ 1193.916748][ C1] ? qlist_free_all+0x8e/0x100 [ 1193.921594][ C1] qlist_free_all+0x99/0x100 [ 1193.926221][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 1193.931287][ C1] kasan_quarantine_reduce+0x148/0x160 [ 1193.936794][ C1] __kasan_kmalloc+0x22/0xb0 [ 1193.941434][ C1] __kmalloc_noprof+0x375/0x720 [ 1193.946417][ C1] ? __kmalloc_noprof+0x1ad/0x720 [ 1193.951571][ C1] ? tomoyo_encode+0x2ad/0x570 [ 1193.957152][ C1] ? tomoyo_encode+0x2ad/0x570 [ 1193.961968][ C1] tomoyo_encode+0x2ad/0x570 [ 1193.966608][ C1] tomoyo_realpath_from_path+0x5fa/0x640 [ 1193.972288][ C1] tomoyo_path_perm+0x283/0x560 [ 1193.977241][ C1] ? tomoyo_path_perm+0x251/0x560 [ 1193.982390][ C1] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 1193.987880][ C1] security_inode_getattr+0x12b/0x310 [ 1193.993363][ C1] vfs_getattr+0x23/0x70 [ 1193.997657][ C1] vfs_statx_path+0x2b/0x230 [ 1194.002294][ C1] ? vfs_statx+0x107/0x200 [ 1194.006778][ C1] vfs_statx+0x12e/0x200 [ 1194.011075][ C1] ? __pfx_vfs_statx+0x10/0x10 [ 1194.015873][ C1] ? strncpy_from_user+0x150/0x2c0 [ 1194.021033][ C1] ? do_getname+0x151/0x250 [ 1194.025583][ C1] vfs_fstatat+0x11b/0x170 [ 1194.030132][ C1] __x64_sys_newfstatat+0x151/0x200 [ 1194.035371][ C1] ? __pfx___x64_sys_newfstatat+0x10/0x10 [ 1194.041150][ C1] ? __pfx___x64_sys_umount+0x10/0x10 [ 1194.046650][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.052753][ C1] do_syscall_64+0x174/0x580 [ 1194.057428][ C1] ? trace_irq_disable+0x3b/0x140 [ 1194.062502][ C1] ? clear_bhb_loop+0x40/0x90 [ 1194.067225][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.073168][ C1] RIP: 0033:0x7f7538f9c4da [ 1194.077624][ C1] RSP: 002b:00007fff868cec28 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 1194.086071][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7538f9c4da [ 1194.094685][ C1] RDX: 00007fff868cec50 RSI: 00007fff868cece0 RDI: 00000000ffffff9c [ 1194.102777][ C1] RBP: 00007fff868cece0 R08: 00007fff868cfce0 R09: 00000000ffffffff [ 1194.110778][ C1] R10: 0000000000000100 R11: 0000000000000286 R12: 00007fff868cfd70 [ 1194.118793][ C1] R13: 00007f753903330a R14: 00000000000ffa82 R15: 00007fff868cfdb0 [ 1194.126820][ C1] [ 1194.129871][ C1] rcu: rcu_preempt kthread starved for 1573 jiffies! g182177 f0x2 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1194.141094][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1194.151091][ C1] rcu: RCU grace-period kthread stack dump: [ 1194.157176][ C1] task:rcu_preempt state:R running task stack:27736 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1194.170723][ C1] Call Trace: [ 1194.174116][ C1] [ 1194.177088][ C1] __schedule+0x17d9/0x56c0 [ 1194.181637][ C1] ? __lock_acquire+0x683/0x2cf0 [ 1194.186639][ C1] ? __pfx___schedule+0x10/0x10 [ 1194.191565][ C1] ? schedule+0x90/0x2b0 [ 1194.195849][ C1] schedule+0x164/0x2b0 [ 1194.200043][ C1] schedule_timeout+0x152/0x2c0 [ 1194.204927][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1194.210508][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1194.215954][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1194.221862][ C1] ? prepare_to_swait_event+0x322/0x350 [ 1194.227475][ C1] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1194.232426][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1194.238621][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1194.244031][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1194.249283][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1194.254004][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1194.259250][ C1] ? __kthread_parkme+0x71/0x1f0 [ 1194.264342][ C1] ? __kthread_parkme+0x196/0x1f0 [ 1194.269401][ C1] kthread+0x388/0x470 [ 1194.273593][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1194.280038][ C1] ? __pfx_kthread+0x10/0x10 [ 1194.284753][ C1] ret_from_fork+0x514/0xb70 [ 1194.289383][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1194.294615][ C1] ? __switch_to+0xc89/0x1420 [ 1194.299428][ C1] ? __pfx_kthread+0x10/0x10 [ 1194.304076][ C1] ret_from_fork_asm+0x1a/0x30 [ 1194.308989][ C1] [ 1194.312034][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1194.318389][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1194.323624][ C0] NMI backtrace for cpu 0 [ 1194.323641][ C0] CPU: 0 UID: 0 PID: 12279 Comm: kworker/u8:26 Not tainted syzkaller #0 PREEMPT(full) [ 1194.323661][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 1194.323672][ C0] Workqueue: wg-kex-wg1 wg_packet_handshake_send_worker [ 1194.323803][ C0] RIP: 0010:nf_hook_slow+0xda/0x220 [ 1194.323876][ C0] Code: 8b 3f 48 8b 74 24 08 48 8b 54 24 10 49 89 db 2e 2e 2e 41 ff d3 89 c5 40 0f b6 dd 48 89 df 48 c7 c6 80 7d 0a 90 e8 76 84 d9 f7 <83> fb 01 7f 0d 0f 85 b7 00 00 00 e8 e6 7e d9 f7 eb 39 83 fb 03 0f [ 1194.323890][ C0] RSP: 0018:ffffc90000007130 EFLAGS: 00000246 [ 1194.323905][ C0] RAX: 0000000000000004 RBX: 0000000000000001 RCX: 0000000000000001 [ 1194.323915][ C0] RDX: ffffffff89ecf28a RSI: ffffffff900a7d80 RDI: 0000000000000001 [ 1194.323927][ C0] RBP: 0000000000000001 R08: ffff888067e35d00 R09: 0000000000000004 [ 1194.323937][ C0] R10: 0000000000000003 R11: 0000000000000100 R12: 0000000000000003 [ 1194.323947][ C0] R13: ffff88807886d238 R14: 1ffff1100f10da40 R15: ffff88807886d240 [ 1194.323959][ C0] FS: 0000000000000000(0000) GS:ffff888124f54000(0000) knlGS:0000000000000000 [ 1194.323973][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1194.323985][ C0] CR2: 00005601248d5000 CR3: 0000000025e92000 CR4: 00000000003526f0 [ 1194.324002][ C0] Call Trace: [ 1194.324008][ C0] [ 1194.324018][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 1194.324073][ C0] nf_hook+0x22a/0x3a0 [ 1194.324095][ C0] ? nf_hook+0xa1/0x3a0 [ 1194.324113][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1194.324134][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 1194.324160][ C0] ip_output+0x269/0x450 [ 1194.324178][ C0] ? __pfx_ip_finish_output+0x10/0x10 [ 1194.324199][ C0] ? ip_output+0x5a/0x450 [ 1194.324219][ C0] synproxy_send_client_synack+0x89b/0xde0 [ 1194.324269][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1194.324288][ C0] ? nft_tunnel_obj_init+0x1398/0x1950 [ 1194.324356][ C0] ? synproxy_pernet+0x45/0x270 [ 1194.324379][ C0] nft_synproxy_eval_v4+0x362/0x4e0 [ 1194.324402][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1194.324423][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1194.324446][ C0] nft_synproxy_do_eval+0x335/0x550 [ 1194.324467][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1194.324487][ C0] ? unwind_next_frame+0x1baf/0x2550 [ 1194.324510][ C0] nft_do_chain+0x48d/0x1b10 [ 1194.324548][ C0] ? arch_stack_walk+0x11b/0x150 [ 1194.324571][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1194.324595][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1194.324639][ C0] ? blake2s_compress+0xfa/0x1c00 [ 1194.324705][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1194.324743][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1194.324770][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 1194.324788][ C0] ? nf_nat_ipv4_local_in+0x21f/0x720 [ 1194.324806][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1194.324827][ C0] nf_hook_slow+0xc5/0x220 [ 1194.324847][ C0] NF_HOOK+0x21f/0x3c0 [ 1194.324865][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1194.324882][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1194.324897][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1194.324915][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1194.324935][ C0] ? ip_local_deliver+0x113/0x190 [ 1194.324953][ C0] NF_HOOK+0x336/0x3c0 [ 1194.324970][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1194.324987][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1194.325002][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1194.325020][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1194.325036][ C0] ? ip_rcv_core+0x88d/0xd50 [ 1194.325055][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1194.325071][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1194.325088][ C0] process_backlog+0xa34/0x1860 [ 1194.325134][ C0] ? process_backlog+0x3c3/0x1860 [ 1194.325159][ C0] __napi_poll+0xaa/0x330 [ 1194.325179][ C0] net_rx_action+0x61d/0xf50 [ 1194.325205][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1194.325238][ C0] handle_softirqs+0x225/0x840 [ 1194.325257][ C0] ? do_softirq+0x76/0xd0 [ 1194.325277][ C0] ? kernel_fpu_end+0x62/0x80 [ 1194.325294][ C0] do_softirq+0x76/0xd0 [ 1194.325310][ C0] [ 1194.325316][ C0] [ 1194.325322][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1194.325340][ C0] blake2s_compress+0xfa/0x1c00 [ 1194.325363][ C0] ? __asan_memset+0x22/0x50 [ 1194.325381][ C0] ? encode_point+0x8346/0x84b0 [ 1194.325401][ C0] ? __pfx_encode_point+0x10/0x10 [ 1194.325416][ C0] ? kernel_fpu_begin_mask+0x2b8/0x380 [ 1194.325438][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 1194.325460][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1194.325483][ C0] ? kernel_fpu_end+0x62/0x80 [ 1194.325509][ C0] blake2s_update+0x140/0x450 [ 1194.325533][ C0] hmac+0x1f4/0x3b0 [ 1194.325553][ C0] ? __pfx_hmac+0x10/0x10 [ 1194.325585][ C0] ? kdf+0x13d/0x290 [ 1194.325604][ C0] kdf+0x184/0x290 [ 1194.325624][ C0] ? __pfx_kdf+0x10/0x10 [ 1194.325653][ C0] wg_noise_handshake_create_initiation+0x29e/0x810 [ 1194.325676][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 1194.325696][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1194.325736][ C0] ? __queue_work+0x1ea/0x10a0 [ 1194.325765][ C0] ? __lock_acquire+0x683/0x2cf0 [ 1194.325787][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1194.325811][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1194.325833][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 1194.325855][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 1194.325875][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 1194.325895][ C0] wg_packet_handshake_send_worker+0x18c/0x370 [ 1194.325920][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 1194.325941][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1194.325967][ C0] ? rcu_is_watching+0x15/0xb0 [ 1194.325991][ C0] ? process_scheduled_works+0xa20/0x14e0 [ 1194.326008][ C0] process_scheduled_works+0xa8e/0x14e0 [ 1194.326038][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1194.326058][ C0] ? assign_work+0x3cf/0x5d0 [ 1194.326077][ C0] worker_thread+0xa47/0xfb0 [ 1194.326106][ C0] kthread+0x388/0x470 [ 1194.326127][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1194.326143][ C0] ? __pfx_kthread+0x10/0x10 [ 1194.326164][ C0] ret_from_fork+0x514/0xb70 [ 1194.326186][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1194.326207][ C0] ? __switch_to+0xc89/0x1420 [ 1194.326227][ C0] ? __pfx_kthread+0x10/0x10 [ 1194.326248][ C0] ret_from_fork_asm+0x1a/0x30 [ 1194.326271][ C0] [ 1195.337448][ C0] net_ratelimit: 3076 callbacks suppressed [ 1195.337475][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.356021][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1195.370168][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.382897][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1195.398537][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1195.412587][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.425213][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1195.439375][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1195.452282][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1195.468561][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1200.381665][ C0] net_ratelimit: 2899 callbacks suppressed [ 1200.381692][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1200.401810][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.414410][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1200.428459][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.441269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1200.456881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1200.470850][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.483463][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:ea:4a:d9:c0:2f:9a, vlan:0) [ 1200.497426][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1200.510096][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0)