last executing test programs: 1m37.012742773s ago: executing program 0 (id=4334): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd5000f8dbdf2555000000080001004f00000008000300", @ANYRES32=r1, @ANYBLOB="0c009900050020005d000000"], 0x30}, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000100)={0x24, r3, 0x1, 0x70bd08, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x6e}, @val={0x8, 0x3, r1}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 1m36.681238177s ago: executing program 3 (id=4339): socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$kcm(0x11, 0x200000000000002, 0x300) sendmsg$sock(r0, &(0x7f0000000000)={&(0x7f0000000100)=@tipc=@name={0x1e, 0x2, 0x3, {{0x40, 0x3}, 0xffffffff}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=[@mark={{0x14, 0x1, 0x24, 0xff}}], 0x18, 0xffffffff}, 0x40812) 1m36.645201287s ago: executing program 0 (id=4340): socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r1, 0x321, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000005}, 0x4000000) 1m36.63321506s ago: executing program 3 (id=4341): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000100)="52000000230001011e0206000000000000fffffff400"/41, 0x29) 1m36.422181537s ago: executing program 3 (id=4345): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000002c0000000c000000ff0f00000000000008001c00c9"], 0x3c}], 0x1, 0x0, 0x0, 0xb305e06d8ab48273}, 0x48800) 1m36.364747589s ago: executing program 0 (id=4347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000002f0009002abd700000000000040000002600"], 0x3c}, 0x1, 0x0, 0x0, 0x4a804}, 0x84) 1m36.048216899s ago: executing program 3 (id=4350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r2, 0x1, 0x15, &(0x7f0000000280)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f0000000940)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r2, 0x6, 0x19, &(0x7f0000000980)=0x1, 0x4) connect$inet6(r2, &(0x7f00000009c0)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r2, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000a80)="cb", 0x1}], 0x1}}], 0x1, 0x400c011) socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd21, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0xb, 0xfff3}, {0x0, 0x5}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x24040894}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x7, &(0x7f0000000840)=ANY=[@ANYBLOB="1800000000000000000000000000000046000200000000000700000000000000050001000000000085100000faffffff95"], &(0x7f0000000880)='GPL\x00'}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) close(r8) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="5000000010021100000000d6ac1f65264bfa36dacc0fb94f", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e65766500002000028014000700fe80000000000000000000000000000008000200ac1414bb"], 0x50}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000600)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r1, &(0x7f0000000640)={&(0x7f0000000680)=@xdp={0x2c, 0x7, r4, 0x3e}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000740)="81", 0x1}], 0x1}, 0x4) syz_emit_ethernet(0x4e, &(0x7f00000008c0)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x18, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x5, 0x0, "9dc8"}]}}}}}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_SET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000a200", @ANYRES16=r11, @ANYBLOB="01002cbd7000fcdbdf254b0000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x48081}, 0x80) 1m35.821307869s ago: executing program 0 (id=4353): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000640)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="adffa888d226000024001280090001007866726d0000000014000280080001000300000008000200250000000a0002000000000000000000"], 0x50}}, 0xc080) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000b00)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000b40), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000940)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x48009}, 0x4004814) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c40)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000c80)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000d40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000d00)={&(0x7f0000000440)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fddbdf250200000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="08000100b358ea54044f24c49d649d8f0c0b4123e926aa5655107279a1386e11e97f01af8931d754663d4aa53de7da69a17bf07132be6ab40de57963c78110b19f89dfbc26f7344b1341b5715cb0299362787e", @ANYRES32=r5, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8014) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="eabf000000000000000000000000000000000000ec998faa8ba1165988a395e335be1013653b965ebd7aea0b21591932e65929278460ae2d6b51e0fe733eac8a7e2438fc878be33dadaa00"/89, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="010000000300"/28], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x3a, 0x4, &(0x7f00000003c0)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="19000000040000000800000040"], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x14, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000a0310cfb7090e6ab1545fc356f9f119f9c69ed226947ce32ad927645347a662958a02c30b1272a9e5cb24a0b22c74eef0f3e03c9ffd4df69b23fbea84230f9a099cdc0a5b17f0780c20cf0e1addd5a12d29305a0c4a7af9a78af2e052ba2ee1a1894334bbf98657c", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r9) sendmsg$NLBL_MGMT_C_LISTDEF(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010028bd600009dbdf250600000006000b00000000007910bfdcd841974548b92e4d0b6863a16022b3bff3e1674074c0a4e016bd6e73c394d9b0ff7e253985b131cb99536268"], 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4180) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000fc0)={'wpan1\x00'}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f00000008c0)) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=@newqdisc={0xd14, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xfff6}, {0xe, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x40, 0xa}}, @qdisc_kind_options=@q_tbf={{0x8}, {0xc1c, 0x2, [@TCA_TBF_PTAB={0x404, 0x3, [0x6, 0xd, 0x7fff, 0xb01, 0x3ff, 0x7, 0x876f, 0x58, 0x5, 0x0, 0x5, 0xfdb, 0x8000, 0xfffffff9, 0x10, 0x4, 0x9, 0x2a1, 0x2, 0x4, 0x40, 0xda1, 0x5, 0x6, 0x1, 0x8d5, 0x65, 0x9, 0x0, 0xffff, 0x4, 0x30, 0x2, 0x3, 0xffff, 0x1, 0x5, 0x9, 0x0, 0x7, 0x0, 0x8, 0x4, 0x2a1, 0x6, 0x5, 0x243, 0x7f, 0xa, 0x5, 0x4, 0x7, 0xe5, 0x9, 0x10, 0x9, 0xb643, 0x7, 0x0, 0x2, 0x9, 0x4be4, 0x1, 0xa, 0x5, 0x5, 0x80, 0x8, 0x100000, 0x4, 0x5, 0x80000000, 0x5, 0xc, 0x6aa7, 0x3, 0x8796, 0x4, 0x3, 0x8, 0x2ea, 0x0, 0x2, 0x0, 0x0, 0x5, 0x1, 0x9, 0x9, 0x6, 0x8, 0x7, 0x101, 0x6ca, 0x1, 0xd, 0x8, 0x5, 0xe8, 0x400, 0xf, 0x8000, 0xdc0439b, 0x10001, 0x3ff, 0x8, 0x3, 0xfffff000, 0x3, 0x9, 0x15, 0x4, 0x6, 0x0, 0x0, 0x6, 0x7, 0x6, 0x2, 0xbc, 0x6, 0x7ff, 0x4, 0x738, 0x9, 0x8, 0x4, 0x10001, 0x2, 0x7, 0x0, 0x7, 0xbe84, 0x8, 0x1df8, 0x9, 0x8, 0x3, 0x1, 0x4f, 0x5, 0xd, 0x7ffffffe, 0x9ec6, 0x7fffffff, 0x6, 0xb, 0x36, 0x5, 0x9, 0x5, 0xffffffc0, 0x9, 0x8f, 0xfffffffe, 0x5, 0x81, 0x3, 0x81, 0x1, 0x4, 0x9, 0x8, 0x2, 0xa, 0x7fffffff, 0x10, 0x1, 0x886, 0x9, 0x3f1, 0x0, 0x6, 0x1, 0x7f, 0x1, 0x2e74, 0x7, 0x2, 0x7, 0xc941, 0x4, 0xffff, 0x3b5, 0x80000000, 0x9, 0xb, 0x3, 0x7fffffff, 0x2, 0xb88, 0x0, 0xb6, 0x2, 0xfffff000, 0x6, 0x5, 0x4, 0x1, 0x3, 0x0, 0xffffffff, 0x0, 0x7, 0x7, 0x401, 0x3, 0x2, 0x3, 0x3, 0x6, 0x4000, 0x6, 0x6, 0xf, 0x5, 0x7, 0x8000, 0x2, 0x5, 0x60, 0x5, 0xbb7, 0x8, 0x9, 0x2, 0x9, 0x8, 0x6, 0x5, 0x8, 0x3, 0x6, 0x80, 0xfffffffb, 0x2, 0x5, 0x9, 0x6, 0x3, 0x3, 0xffff, 0x101, 0x8, 0x5, 0x1000, 0x7fff, 0x9, 0xffffffff, 0x1, 0xc, 0x100, 0x3, 0x10976cf2, 0x8, 0x5]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x0, 0x9, 0x0, 0x920d, 0x0, 0x4, 0x1, 0x7, 0x1000, 0x7c, 0x6, 0x81, 0x5, 0x1, 0x0, 0x3, 0x1, 0x6, 0x8, 0x8, 0x6, 0x7fff, 0x5, 0x0, 0x5, 0x6, 0x8, 0x5b, 0x8, 0xffff, 0x4, 0x6, 0x4, 0x10000, 0xffffffff, 0x6, 0x8, 0x9, 0x10000, 0x80000001, 0xc0, 0x1e, 0x6, 0x5, 0x3, 0x6, 0x9, 0x9, 0x1, 0x5b, 0xffff, 0xd, 0x0, 0x800, 0x1, 0x93, 0x4, 0x8, 0x404, 0x8, 0x8, 0x9, 0x9, 0x8, 0x0, 0x3, 0x6, 0x9, 0x5, 0x9, 0x5, 0x8, 0x8b, 0x6, 0x200, 0xfffffff2, 0xe97, 0x5, 0x9, 0x5, 0x3, 0x3, 0xfffffffc, 0x8, 0x0, 0x8ece, 0x5, 0x9, 0x8, 0x401, 0x3, 0x4, 0x1, 0x10f, 0x62a4104d, 0x35701ea6, 0x2, 0x0, 0x2000000, 0x81ad, 0xfffffff7, 0xf48, 0x9, 0x2, 0x1ff, 0x2, 0x7, 0xffffffff, 0x418, 0x4, 0x9, 0x7f, 0x1, 0x8, 0x86, 0x7, 0x4280000, 0x3, 0x400, 0x7, 0x5, 0x4, 0x7ff, 0x1, 0xffffffff, 0x800, 0xffffff81, 0x5, 0xa62, 0x0, 0x5, 0x401, 0xffffffff, 0xc0, 0x4, 0x9, 0x5, 0x5, 0x100, 0x6, 0x2, 0x1ff, 0x0, 0x6, 0xd0a9fb69, 0x9, 0x3, 0x7, 0x932e, 0x95, 0xbf7, 0xb, 0x74c2, 0x75, 0x9, 0x7, 0x5, 0x1ff, 0x5, 0x9, 0x0, 0x3, 0x3, 0x6, 0xbd, 0x100, 0xd4, 0xc, 0x0, 0xac2, 0x456, 0x80000000, 0x0, 0x719, 0x1, 0x6, 0xffffff81, 0x8000, 0x1, 0x7, 0x0, 0x1, 0x5, 0x0, 0x3, 0x7fffffff, 0x56, 0x3, 0x332, 0x5, 0x3, 0x7f, 0x4, 0x10001, 0xc, 0xffffffff, 0x6, 0x490a1d79, 0x100, 0xcb4, 0x7fff, 0x401, 0x3, 0x1, 0x7f, 0x8, 0x7, 0x7, 0x800, 0x6, 0x7b, 0x2, 0x6, 0x0, 0x4, 0xceec, 0x1, 0xff80000, 0x45c, 0xfff, 0xb, 0x4, 0xfff, 0xffffffff, 0x8, 0x9, 0x100, 0xd, 0x200, 0x1000, 0x40f4000, 0x7, 0x80, 0x9, 0x7, 0x7, 0x6, 0xcbb3, 0x7, 0x0, 0x9, 0x7, 0x5, 0x9, 0x8, 0x0, 0x4, 0x4, 0x7, 0x6, 0x3, 0xb3, 0x8, 0x40, 0x7fffffff]}, @TCA_TBF_RTAB={0x404, 0x2, [0x8, 0xbcb4, 0x4, 0x80000001, 0xffff, 0xffffffc0, 0x7, 0x4b1, 0x8, 0x284b, 0x8, 0x8, 0x6, 0xfffffff7, 0xc0000000, 0x7, 0x5, 0x8, 0x7, 0x9, 0xa, 0x6, 0x46d4, 0xcb, 0x4, 0x315b, 0x4, 0x8, 0x9, 0xfff, 0x2, 0xfff, 0x6, 0xfffffffd, 0x6, 0x2, 0x0, 0x3, 0x4, 0x248, 0xd, 0x1, 0x0, 0x100, 0xaada2d2, 0x6, 0x3, 0x10000, 0x8, 0x100, 0xfff, 0x3, 0x9, 0x30000, 0x0, 0x0, 0xffffffff, 0x3, 0xa8, 0x4, 0x4, 0x1, 0xffff3e9b, 0x7, 0x2, 0x0, 0x10, 0xdea, 0x3, 0x1, 0x7, 0x7, 0x9, 0x9, 0x8, 0x5be, 0x7, 0x10001, 0x2, 0xb6b7, 0x40, 0x3, 0x396e, 0x7, 0x2, 0x7, 0xffffffff, 0x1ff, 0x9, 0x6, 0x8000, 0xdb1a, 0xa, 0x7, 0x8, 0x4, 0x21, 0x86, 0x4, 0x6, 0xf7fffffe, 0x9, 0x3, 0x7, 0xfc000000, 0x9e1, 0x1, 0x8, 0x7fff, 0x1ff, 0xb, 0x2797, 0xa3b, 0xa, 0xffffffff, 0x6, 0xc, 0x0, 0xfff, 0x8, 0x40000000, 0x8, 0x8, 0x8, 0x2, 0x81, 0xe, 0x9, 0x0, 0xd1fc, 0x0, 0xfaf, 0x6, 0x64b, 0x2, 0x0, 0x5, 0x5, 0x6, 0x5, 0x2, 0x1, 0x2, 0x5, 0x8, 0x9, 0x2, 0x281, 0x3, 0x525, 0x4, 0xcec, 0x4, 0x4, 0xd, 0x0, 0x7c9a9a16, 0x1ce, 0x4, 0x3ff, 0x4a20, 0x1, 0xc, 0x5, 0x63c1, 0x377a, 0x20000000, 0x8, 0x0, 0x8, 0x8, 0x8, 0x0, 0x7323, 0x5, 0x1, 0x1, 0x11, 0x0, 0x6, 0x5, 0xd, 0x6, 0x1c71, 0x653da3e7, 0x1000, 0x8, 0x6, 0x7, 0x2, 0xfffffffa, 0x5, 0x401, 0x6, 0x8ff, 0x9, 0x800, 0x9, 0x8, 0x5, 0x9, 0x6, 0x5, 0x0, 0x22a, 0xbb9a, 0x3, 0xb, 0x5, 0x12, 0xdcb, 0x9, 0x7, 0xf9, 0x6, 0x1ff, 0x10000, 0xff, 0x5, 0x8, 0x2, 0x5, 0x1, 0x3, 0x1, 0x724, 0x2, 0x2, 0x0, 0xc, 0xffffff3d, 0xfffffffc, 0x5, 0x3, 0x6, 0x100, 0x9, 0x3, 0xce4819c1, 0xffffffff, 0x7, 0x9, 0x4, 0x87, 0x401, 0x8, 0x7fff, 0x1, 0x6, 0x0, 0x9, 0xfffffff7, 0x83, 0x4, 0x7, 0x80000000]}, @TCA_TBF_RATE64={0xc, 0x4, 0x5d4fa1ed992a6f3d}]}}, @TCA_STAB={0xa4, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x7, 0x100, 0x3ff, 0x0, 0x81, 0xffffffff, 0x3}}, {0xa, 0x2, [0xe19e, 0x8, 0x9]}}, {{0x1c, 0x1, {0x0, 0x9, 0xfffe, 0xfffffba4, 0x2, 0x1ff, 0x2, 0x1}}, {0x6, 0x2, [0xb]}}, {{0x1c, 0x1, {0x1, 0x3, 0xf9eb, 0x1, 0x1, 0x704, 0x1d9, 0x5}}, {0xe, 0x2, [0xfed, 0x0, 0x5, 0x4, 0x67]}}, {{0x1c, 0x1, {0x4, 0xc1, 0x40, 0x81, 0x0, 0x7, 0xfff, 0x3}}, {0xa, 0x2, [0xffb9, 0x7, 0x6]}}]}, @qdisc_kind_options=@q_qfg={0x8}]}, 0xd14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r11, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000001100)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRESHEX, @ANYRESHEX, @ANYRES32, @ANYBLOB="600092a85127ee422dea4a9913bc7a4a9ba0fae97c6becb23080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002100000000008000400050000000800010002000001240003"], 0x7c}, 0x1, 0x0, 0x0, 0x814}, 0x0) 1m35.312805467s ago: executing program 0 (id=4358): r0 = socket(0x2, 0x3, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)) (async) setsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000640)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) (async) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000680)=@ipv6_getaddr={0x40, 0x16, 0x20, 0x70bd27, 0x25dfdbfe, {0xa, 0x10, 0x0, 0xc8}, [@IFA_LOCAL={0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, @IFA_LOCAL={0x14, 0x2, @local}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044054}, 0x880) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x3, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000010c0)='syzkaller\x00', 0x4, 0x436, &(0x7f0000001100)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000011c0), 0x7}, 0x48) (async) socket$kcm(0x29, 0x2, 0x0) (async) r5 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r5, &(0x7f0000001200)={0xa, 0x4e2b, 0x400006, @loopback, 0x77f}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000001240)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000001280)={r5, r4}) (async) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001340)=@delchain={0x24, 0x65, 0x1, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa2b3a78061ec334e, 0x10}, {0x8, 0x6}, {0xfff3, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) sendmsg$netlink(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f0000001400)=ANY=[], 0x10}], 0x1, &(0x7f0000001440)=ANY=[], 0x60, 0x24004065}, 0x20000014) (async) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=@ipv4_newrule={0x60, 0x20, 0x2, 0x70bd2c, 0x25dfdbfd, {0x2, 0x10, 0x80, 0x9c, 0x7f, 0x0, 0x0, 0x8, 0x10000}, [@FRA_SRC={0x8, 0x2, @private=0xa010102}, @FRA_SRC={0x8, 0x2, @local}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xf7}, @FRA_SRC={0x8, 0x2, @multicast2}, @FRA_FLOW={0x8, 0xb, 0xab3}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xfff}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x36bec74f}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x8) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) (async) sendto$inet(r0, &(0x7f0000000400)="8ce2ad4d4f95e087a7846d3f81f59cc1dfd8dd3b", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) 1m34.988710965s ago: executing program 0 (id=4361): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a0000000800000001000000400000004200a8cde91258c11e113dd820687f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x1003, r2, 0x100000000000000}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dd000000", @ANYRES16=r4, @ANYBLOB="010000000000000000002500000008000200", @ANYRES32=r5, @ANYBLOB="050029000100000005002a000100000005002b000100000005002e0001000000"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r4, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x50, r4, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x50}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010600000000000000002000000008000200ada814d39d5e4f9c6c1414c158629c4f9dba2ba2206b0e41e2324b0d39fe0992e8da8120c741c67885f391ee316254f92d8f0f01bf7de0f8bfe507cf4f68fce6f9a6c278b08b371b44441a155398a9492ff22fa8ed76a8d2ca8ac8bc2cc6ba2d37a48e44f1d6fb56ac7cfc12f8f192d0297e98696b7580a04d0bb67900e866308a674277cfc9ca00634744c5f4aabc8ec6ce3e08eff7a9f36aa6e42eae61ecdd6390a6f33f14e87da3fd7fe65034daf15295e5caafa8562fed1ae41691e9ec03e7ad9a3c73174335da", @ANYRES32=r5, @ANYBLOB="050033000100000005003500ff0000000500360000000000"], 0x34}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000b40)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001080)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x2a0, 0x390, 0x1c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x5}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f9) r9 = socket(0x10, 0x3, 0x0) r10 = gettid() sendmsg$nl_route(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r10}]}, 0x3c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000480)={r7, 0x1, 0x6, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012000000000015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x5c}}, 0x0) 1m34.532404517s ago: executing program 1 (id=4365): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000002680)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002640)={&(0x7f00000024c0)={0x150, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8010}, 0x4004) 1m34.009549099s ago: executing program 1 (id=4367): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="d800000019008111e0020f060d8107040a600200640f040b067c55a12a00090008000699e3ffffff14000500fe8081780c000567b8b7b940020000090a0016060000000000000000d67f6f9400f7d1d9bbe94fa27100a007a290457f0189b316277ce06bbace8017cb39b62ee5a7cef4090000001fb791643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b83ece0b42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0xf0) 1m33.710676355s ago: executing program 1 (id=4369): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0060800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) 1m33.619658921s ago: executing program 1 (id=4370): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), r0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x20, r1, 0x321, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}, 0x1, 0x14, 0x0, 0x20000005}, 0x4000000) 1m29.748623229s ago: executing program 1 (id=4372): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (rerun: 32) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xd, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x5, 0x1f6, &(0x7f0000000480)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000540), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, &(0x7f0000000700)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x0, 0xffffffff, 0x9, 0x2000200, 0x8, 0x4}, {0x8000, 0xbd, 0x4, 0x9, 0x8, 0x3}], ['\x00', '\x00']}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r2, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f00000006c0), 0x0, 0xfeffffff, 0x10, 0x8, 0x0, 0x0}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x58, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xa0}}, 0x0) 1m29.681937184s ago: executing program 4 (id=4374): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000a40)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000880)={0x158, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x40090}, 0x24000118) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x301, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) 1m29.48857548s ago: executing program 1 (id=4376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000110001002abd7000fedbdf2500000080000000000000000000000000000004d502003c0014000d00"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40008c4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 1m29.479963846s ago: executing program 4 (id=4377): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000002680)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002640)={&(0x7f00000024c0)={0x150, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8010}, 0x4004) 1m29.125015618s ago: executing program 4 (id=4380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2c0100000d0a010800000000000000000a0000010900020073797a31000000000900010073797a310000000000010380fc0060800c00018006000100ff"], 0x12c}, 0x1, 0x0, 0x0, 0x4008805}, 0x8000) 1m28.890717674s ago: executing program 4 (id=4382): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0xa00}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1m28.837927879s ago: executing program 4 (id=4383): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000440)={&(0x7f0000000180)='hmac(sha384)\x00', &(0x7f0000000400)='/\\(#^\x00', 0xff}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x8) r3 = accept4(r0, 0x0, 0x0, 0x800) r4 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) recvmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f00000001c0)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0090406a4f4be55fdbc9ddad514a54df439ef16ece9e27f003444135eaf210", @ANYRESHEX=r3, @ANYRESOCT=r0], 0xd80}, 0x1, 0x0, 0x0, 0x20008815}, 0x10) accept4$tipc(r3, 0x0, 0x0, 0x800) socket$alg(0x26, 0x5, 0x0) (async) socket$pppoe(0x18, 0x1, 0x0) (async) ioctl$PPPIOCGMRU(r1, 0x80047453, 0x0) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) ioctl$OCFS2_IOC_REFLINK(r0, 0x40186f04, &(0x7f0000000440)={&(0x7f0000000180)='hmac(sha384)\x00', &(0x7f0000000400)='/\\(#^\x00', 0xff}) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x117, 0x5, 0x0, 0x8) (async) accept4(r0, 0x0, 0x0, 0x800) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$TIPC_DEST_DROPPABLE(r4, 0x10f, 0x81, &(0x7f0000000080), 0x4) (async) recvmmsg(r4, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)=""/54, 0x36}], 0x1, &(0x7f00000001c0)=""/153, 0x99}, 0xffffffff}], 0x1, 0x0, 0x0) (async) sendmsg$tipc(r4, &(0x7f0000000280)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x4}}, 0x10, 0x0}, 0xc1) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="0090406a4f4be55fdbc9ddad514a54df439ef16ece9e27f003444135eaf210", @ANYRESHEX=r3, @ANYRESOCT=r0], 0xd80}, 0x1, 0x0, 0x0, 0x20008815}, 0x10) (async) accept4$tipc(r3, 0x0, 0x0, 0x800) (async) 1m28.486499859s ago: executing program 4 (id=4384): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000480)={0x2, 0x13, 0x0, 0x9, 0x2}, 0x10}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b40000000000000061115c000000000006000000000000009500000c00000000"], &(0x7f00000002c0)='GPL\x00', 0x4, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000440), 0x10}, 0x94) pipe(&(0x7f0000000540)={0xffffffffffffffff}) r3 = socket$inet6_udp(0xa, 0x2, 0x0) splice(r3, 0x0, r2, &(0x7f0000000580), 0x6, 0x0) bind$alg(r2, &(0x7f00000005c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(rfc7539(ecb-camellia-aesni,sha224-avx2))\x00'}, 0x58) socket$xdp(0x2c, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000680)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r4) r5 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f0000000500)=@add_del={0x2, &(0x7f00000004c0)='nr0\x00'}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x5c, r5, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r6}, {0x40, 0x2, 0x0, 0x1, [{0xfffffffffffffd0d, 0x1, @priority={{{0x5e}, {0xfe45}, {0x0, 0x4, 0x1}}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000401}, 0x200400c4) 1m28.308812209s ago: executing program 2 (id=4387): r0 = socket(0x26, 0x803, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8798}], 0x1, 0x40001041, 0x0) 1m28.296515604s ago: executing program 2 (id=4388): r0 = socket(0x2b, 0x80801, 0x1) read$alg(r0, 0x0, 0x0) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r1, 0x800442d3, &(0x7f0000000000)={0x8, 0xc5, 0x0, @empty, 'veth1_macvtap\x00'}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0400000000000021f44c8a0ecf0000000000000012800e00010077697265677561726400000004009cd96571ab3065e63ae6dfcf19226b2d9df622d047aa1349b7964af8f9da67480e9baacc06871267eea37145712ae550b0f8692005e8500bfe7e3da847fb9aded2e5d33bc92b9524183d"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1m28.18046971s ago: executing program 2 (id=4389): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="24009cfbff1500eaa27f000000000010ca0a000000080001007c352b0000000000000000001706aab8767223f066661d9065df46d538fc377b8a158e7729b0e612256f300c8f9d99cf8f686f603ab6451d1b5b35353d00cca6c3085c6c847ce5a269375f024ffaebad605a18328e510faaffaaff70"], 0x24}}, 0x0) ioctl$SIOCSIFMTU(r0, 0x8947, &(0x7f0000000040)={'bond0\x00', 0x10001}) 1m28.16702034s ago: executing program 3 (id=4390): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000002680)={&(0x7f0000002480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002640)={&(0x7f00000024c0)={0x150, 0x1403, 0x1, 0x70bd26, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'sit0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'syz_tun\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'xfrm0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_team\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'wlan1\x00'}}]}, 0x150}, 0x1, 0x0, 0x0, 0x8010}, 0x4004) 1m28.044201411s ago: executing program 2 (id=4391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000000)=0x4, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4) sendmsg$netlink(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r4, @ANYBLOB="0000000a010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x70bd2a, 0xffffffaa, {0x0, 0x0, 0xe403, r5, 0x3, 0x71061}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}}}]}, 0x40}}, 0x24008044) 1m28.031468477s ago: executing program 3 (id=4392): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000b40)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000000b80)={&(0x7f0000000bc0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000c00)=[@rdma_dest={0x10, 0x114, 0xc}], 0x18}, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f00000004c0)=0x4000000000000200, 0xe50fb6c50bc849c9) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x14) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r7}, 0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000009c0)={0x18, 0xf, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8}, 0x94) (async) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xffe0, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) bind$packet(r3, &(0x7f00000007c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x2c, r9, 0x1, 0x0, 0xfffffffe, {{0x2}, {@val={0x8, 0x3, r10}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}}, 0x0) (async) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x88, r9, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x15, 0x67}}}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "8d6c515d93080d396e0a3b17195624df"}, @NL80211_ATTR_PMK={0x14, 0xfe, "d3026da22cabe0ef6942d2bf75d52778"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="1815ccc30328"}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK={0x14, 0xfe, "cbf9536064f77606df4182539ce048dd"}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x3b}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x88}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) (async) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x50, r11, 0x7, 0x0, 0x40000, {}, [@ETHTOOL_A_LINKMODES_OURS={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x20}, @ETHTOOL_A_BITSET_MASK={0x8, 0x5, "7180bbda"}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000002f00090027bd9f0000000000040000000c00180002ac0f0002ac0f"], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) 1m27.87030423s ago: executing program 2 (id=4393): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x5d}, [@ldst={0x5, 0x0, 0x0, 0x0, 0x0, 0xe00}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) 1m27.799355465s ago: executing program 2 (id=4394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000050000000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002200)=0x14) sendmsg$nl_route(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0x200, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x9], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000400)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x3, 0x0, &(0x7f00000005c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000004100010000000000000000000101000000000000040008000400028020000180100004000000000000000000000000000c001c"], 0x40}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4040) recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/193, 0xc1}, {&(0x7f0000001900)=""/207, 0xcf}, {&(0x7f0000001a00)=""/98, 0x62}, {&(0x7f0000001a80)=""/57, 0x39}, {&(0x7f0000001ac0)=""/196, 0xc4}, {&(0x7f0000001bc0)=""/119, 0x77}, {&(0x7f0000001c40)=""/191, 0xbf}, {&(0x7f0000001d00)=""/228, 0xe4}], 0x9}, 0xb}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000102, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r8, 0x89e0, &(0x7f0000001e00)) getpeername$packet(0xffffffffffffffff, &(0x7f0000002000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002040)=0x14) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000002080)={0xffffffffffffffff, 0x8, 0xb, 0x9, @vifc_lcl_ifindex=r9, @empty}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x58, r11, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x44}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x42}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x840) sendmsg$nl_generic(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) 1m13.69597892s ago: executing program 32 (id=4361): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="0a0000000800000001000000400000004200a8cde91258c11e113dd820687f0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000ec0)={0x0, 0x0, 0x0, 0x0, 0x1003, r2, 0x100000000000000}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="dd000000", @ANYRES16=r4, @ANYBLOB="010000000000000000002500000008000200", @ANYRES32=r5, @ANYBLOB="050029000100000005002a000100000005002b000100000005002e0001000000"], 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x48, r4, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x1}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_FRAME_TYPES={0x5, 0x31, 0x2}, @IEEE802154_ATTR_LLSEC_KEY_BYTES={0x14, 0x30, "000102030405060708090a0b0c0d0e0f"}]}, 0x48}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x50, r4, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x50}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000f00)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010600000000000000002000000008000200ada814d39d5e4f9c6c1414c158629c4f9dba2ba2206b0e41e2324b0d39fe0992e8da8120c741c67885f391ee316254f92d8f0f01bf7de0f8bfe507cf4f68fce6f9a6c278b08b371b44441a155398a9492ff22fa8ed76a8d2ca8ac8bc2cc6ba2d37a48e44f1d6fb56ac7cfc12f8f192d0297e98696b7580a04d0bb67900e866308a674277cfc9ca00634744c5f4aabc8ec6ce3e08eff7a9f36aa6e42eae61ecdd6390a6f33f14e87da3fd7fe65034daf15295e5caafa8562fed1ae41691e9ec03e7ad9a3c73174335da", @ANYRES32=r5, @ANYBLOB="050033000100000005003500ff0000000500360000000000"], 0x34}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000b40)={'syzkaller0\x00', 0x7101}) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001080)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000540)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x390, 0x2a0, 0x390, 0x1c0, 0x0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast1, @private1, [], [0xffffffff, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x0, 0x38}, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000010000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@private=0xa000000, @ipv4=@empty, 0x2f, 0x30, 0x1}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0x0, 0xffffff00, 0xffffffff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x2f, 0x9, 0x5}, 0x0, 0xa8, 0xe0, 0x48000000}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0x6, 0x5}, {0xffffffffffffffff, 0x6, 0x1}, {0x0, 0x4, 0x2}, 0xfffffffe}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@loopback, 0x38, 0x17}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f9) r9 = socket(0x10, 0x3, 0x0) r10 = gettid() sendmsg$nl_route(r9, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=@newlink={0x3c, 0x10, 0xff05, 0x70bd28, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x42c0}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NET_NS_PID={0x8, 0x13, r10}]}, 0x3c}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000480)={r7, 0x1, 0x6, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012000000000015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x5c}}, 0x0) 1m4.329576549s ago: executing program 33 (id=4376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c000000110001002abd7000fedbdf2500000080000000000000000000000000000004d502003c0014000d00"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x40008c4) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 0s ago: executing program 34 (id=4394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000050000000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x40, 0x25dfdbfb, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000002140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002180)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f00000021c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002200)=0x14) sendmsg$nl_route(r3, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002280)={&(0x7f00000022c0)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r4], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x88, 0x24, 0x200, 0x70bd27, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x3, 0x4, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x2, 0x5, 0x2, 0x1, 0x10, 0x0, 0x5, 0x9], 0x2, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc, 0x0, 0x1000], [0x0, 0x4, 0x0, 0x0, 0xffff, 0x0, 0xfffd, 0x4, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) write(0xffffffffffffffff, &(0x7f0000000400)="600000001800050601000000000000000a400000fe040001000000001400200020010db8000100000000000000000001080004000100000006", 0x39) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x3, 0x0, &(0x7f00000005c0)) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000004100010000000000000000000101000000000000040008000400028020000180100004000000000000000000000000000c001c"], 0x40}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="4000000041000100000000000000000001010000000000000400060004000280200001801000040000000000000000000000000004"], 0x40}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x4040) recvmmsg(r7, &(0x7f00000006c0)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000800)=""/4096, 0x1000}, {&(0x7f0000001800)=""/193, 0xc1}, {&(0x7f0000001900)=""/207, 0xcf}, {&(0x7f0000001a00)=""/98, 0x62}, {&(0x7f0000001a80)=""/57, 0x39}, {&(0x7f0000001ac0)=""/196, 0xc4}, {&(0x7f0000001bc0)=""/119, 0x77}, {&(0x7f0000001c40)=""/191, 0xbf}, {&(0x7f0000001d00)=""/228, 0xe4}], 0x9}, 0xb}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000102, 0x0) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r8, 0x89e0, &(0x7f0000001e00)) getpeername$packet(0xffffffffffffffff, &(0x7f0000002000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000002040)=0x14) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000002080)={0xffffffffffffffff, 0x8, 0xb, 0x9, @vifc_lcl_ifindex=r9, @empty}, 0x10) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001e80), r10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000001ec0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000001fc0)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f00)={0x58, r11, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}]}, @NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_NOLEARN={0x5, 0x1e, 0x1}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x3}, @NL80211_MESHCONF_TTL={0x5, 0x6, 0x44}]}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r12}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3c}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x2, 0x42}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4010}, 0x840) sendmsg$nl_generic(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x18, 0x15, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}]}, 0x18}}, 0x0) kernel console output (not intermixed with test programs): sable+0x3b/0x140 [ 460.084846][T17636] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.084870][T17636] ? clear_bhb_loop+0x70/0xc0 [ 460.084900][T17636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.084924][T17636] RIP: 0033:0x7fd355d9f559 [ 460.084946][T17636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.084967][T17636] RSP: 002b:00007fd356cce028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.085004][T17636] RAX: ffffffffffffffda RBX: 00007fd356025fa0 RCX: 00007fd355d9f559 [ 460.085022][T17636] RDX: 0000000004008054 RSI: 00002000000003c0 RDI: 0000000000000008 [ 460.085038][T17636] RBP: 00007fd356cce090 R08: 0000000000000000 R09: 0000000000000000 [ 460.085053][T17636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.085067][T17636] R13: 00007fd356026038 R14: 00007fd356025fa0 R15: 00007ffe6c85dd38 [ 460.085104][T17636] [ 460.641287][ T32] net_ratelimit: 32 callbacks suppressed [ 460.641311][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 460.641338][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 460.641361][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 460.641384][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 460.880286][T17656] netlink: 45 bytes leftover after parsing attributes in process `syz.0.3766'. [ 461.151341][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 461.151383][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 461.151409][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 461.151435][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 461.259623][T17665] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3769'. [ 461.514870][T17669] netlink: 'syz.1.3770': attribute type 10 has an invalid length. [ 461.514896][T17669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3770'. [ 461.663568][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 461.663606][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 462.227877][T17679] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3772'. [ 464.095126][T17684] ip6t_rpfilter: unknown options [ 464.317508][T17694] netlink: 'syz.1.3780': attribute type 64 has an invalid length. [ 464.317534][T17694] netlink: 5 bytes leftover after parsing attributes in process `syz.1.3780'. [ 464.446466][T17701] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3781'. [ 464.446850][T17699] netlink: 'syz.2.3782': attribute type 21 has an invalid length. [ 464.446869][T17699] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3782'. [ 464.446946][T17699] netlink: 'syz.2.3782': attribute type 4 has an invalid length. [ 464.446961][T17699] netlink: 'syz.2.3782': attribute type 5 has an invalid length. [ 464.446975][T17699] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3782'. [ 464.654516][T17701] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3781'. [ 464.820238][T17715] netlink: 204 bytes leftover after parsing attributes in process `syz.0.3784'. [ 465.375044][T17723] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3789'. [ 465.751102][ T60] net_ratelimit: 32 callbacks suppressed [ 465.751127][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 465.751154][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 465.751177][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 465.751200][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 465.995010][T17747] vcan0: tx address claim with dlc 0 [ 466.038247][T17751] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3797'. [ 466.173973][T17747] syzkaller0: entered promiscuous mode [ 466.174000][T17747] syzkaller0: entered allmulticast mode [ 466.261639][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 466.261676][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 466.261701][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 466.261724][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 466.363815][T17758] netlink: 236 bytes leftover after parsing attributes in process `syz.3.3801'. [ 466.583814][T17760] IPVS: set_ctl: invalid protocol: 4 12.0.7.0:0 [ 466.771649][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 466.771686][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 466.772717][T17764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3804'. [ 467.375617][T17790] dvmrp0: entered allmulticast mode [ 467.458461][T17791] syzkaller0: entered promiscuous mode [ 467.458488][T17791] syzkaller0: entered allmulticast mode [ 469.268492][T17857] netlink: 'syz.3.3831': attribute type 16 has an invalid length. [ 469.268519][T17857] netlink: 'syz.3.3831': attribute type 17 has an invalid length. [ 470.421075][T17885] __nla_validate_parse: 8 callbacks suppressed [ 470.421127][T17885] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3841'. [ 470.546704][T17885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3841'. [ 470.566903][T17887] netlink: 'syz.1.3842': attribute type 19 has an invalid length. [ 470.781322][T17897] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 470.787696][T17897] batman_adv: batadv0: Adding interface: gretap1 [ 470.787714][T17897] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 470.787744][T17897] batman_adv: batadv0: Interface activated: gretap1 [ 470.787759][T17897] net_ratelimit: 31 callbacks suppressed [ 470.787771][T17897] batadv0: mtu less than device minimum [ 470.792091][T17897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 470.795769][T17897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 470.799334][T17897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 470.805175][T17897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 470.808579][T17897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 470.812162][T17897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 470.815786][T17897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 470.819188][T17897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 470.822739][T17897] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 471.713980][T17919] bond5: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 471.733341][T17919] bond5 (unregistering): Released all slaves [ 472.412671][T17947] netlink: 'syz.3.3862': attribute type 1 has an invalid length. [ 472.472977][T17960] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3862'. [ 472.527792][T17947] bond7: entered promiscuous mode [ 472.539610][T17947] 8021q: adding VLAN 0 to HW filter on device bond7 [ 473.099669][T17982] netlink: 'syz.0.3868': attribute type 10 has an invalid length. [ 473.176715][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3870'. [ 473.240983][T17982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3868'. [ 473.280323][T17987] netlink: 140 bytes leftover after parsing attributes in process `syz.3.3869'. [ 473.519767][T17997] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3872'. [ 473.594919][T18004] netdevsim netdevsim1: Firmware load for './file0/../file0' refused, path contains '..' component [ 473.875900][T18016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3878'. [ 474.139126][T18024] vlan1: default FDB implementation only supports local addresses [ 474.278714][T18034] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3885'. [ 474.416174][T18038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3885'. [ 474.664349][T18052] netlink: 'syz.0.3891': attribute type 3 has an invalid length. [ 474.664588][T18052] netlink: 'syz.0.3891': attribute type 3 has an invalid length. [ 476.024085][T18099] net_ratelimit: 52 callbacks suppressed [ 476.024108][T18099] netlink: Conntrack attr has 8 unknown bytes [ 476.024139][T18099] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.034307][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 476.034388][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 476.034448][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 476.034508][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 476.272559][T18106] __nla_validate_parse: 5 callbacks suppressed [ 476.272583][T18106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3913'. [ 476.540409][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 476.540441][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 476.540463][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 476.540483][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 477.033082][T18127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3921'. [ 477.362579][T18141] syzkaller1: entered promiscuous mode [ 477.362605][T18141] syzkaller1: entered allmulticast mode [ 477.510785][T18150] netlink: 'syz.2.3927': attribute type 1 has an invalid length. [ 477.510819][T18150] netlink: 756 bytes leftover after parsing attributes in process `syz.2.3927'. [ 477.569028][T18154] hsr0: entered allmulticast mode [ 477.569053][T18154] hsr_slave_0: entered allmulticast mode [ 477.569072][T18154] hsr_slave_1: entered allmulticast mode [ 477.611839][T18150] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3927'. [ 478.326519][T18179] netlink: 'syz.0.3938': attribute type 16 has an invalid length. [ 478.326546][T18179] netlink: 'syz.0.3938': attribute type 3 has an invalid length. [ 478.326561][T18179] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3938'. [ 478.368400][T18184] netlink: 'syz.0.3938': attribute type 16 has an invalid length. [ 478.368425][T18184] netlink: 'syz.0.3938': attribute type 3 has an invalid length. [ 478.368440][T18184] netlink: 132 bytes leftover after parsing attributes in process `syz.0.3938'. [ 479.414202][T18218] FAULT_INJECTION: forcing a failure. [ 479.414202][T18218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.414242][T18218] CPU: 0 UID: 0 PID: 18218 Comm: syz.1.3948 Not tainted syzkaller #0 PREEMPT(full) [ 479.414269][T18218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 479.414286][T18218] Call Trace: [ 479.414296][T18218] [ 479.414307][T18218] dump_stack_lvl+0xe8/0x150 [ 479.414356][T18218] should_fail_ex+0x410/0x560 [ 479.414501][T18218] _copy_from_user+0x2d/0xb0 [ 479.414625][T18218] ___sys_sendmsg+0x1c6/0x360 [ 479.414679][T18218] ? __lock_acquire+0x747/0x2de0 [ 479.414712][T18218] ? __pfx____sys_sendmsg+0x10/0x10 [ 479.414780][T18218] ? __fget_files+0x2a/0x420 [ 479.414803][T18218] ? __fget_files+0x3a2/0x420 [ 479.414836][T18218] __x64_sys_sendmsg+0x1b1/0x290 [ 479.414865][T18218] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 479.414916][T18218] do_syscall_64+0x166/0x520 [ 479.414988][T18218] ? trace_irq_disable+0x3b/0x140 [ 479.415014][T18218] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.415039][T18218] ? clear_bhb_loop+0x70/0xc0 [ 479.415068][T18218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.415092][T18218] RIP: 0033:0x7fba5779f559 [ 479.415114][T18218] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 479.415135][T18218] RSP: 002b:00007fba58673028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 479.415161][T18218] RAX: ffffffffffffffda RBX: 00007fba57a25fa0 RCX: 00007fba5779f559 [ 479.415180][T18218] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 479.415195][T18218] RBP: 00007fba58673090 R08: 0000000000000000 R09: 0000000000000000 [ 479.415211][T18218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.415225][T18218] R13: 00007fba57a26038 R14: 00007fba57a25fa0 R15: 00007fffcdb19878 [ 479.415263][T18218] [ 479.810385][T18231] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3952'. [ 479.810420][T18231] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3952'. [ 479.853042][T18229] netlink: 'syz.2.3950': attribute type 10 has an invalid length. [ 479.853066][T18229] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3950'. [ 479.923975][T18232] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535) [ 479.982328][T18231] gretap2: entered promiscuous mode [ 479.982529][T18231] gretap2: entered allmulticast mode [ 480.070969][T18242] batman_adv: batadv0: Adding interface: syzkaller0 [ 480.070990][T18242] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 480.071027][T18242] batman_adv: batadv0: Interface activated: syzkaller0 [ 480.177845][T18241] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 480.352929][T18241] batman_adv: batadv0: Removing interface: syzkaller0 [ 480.412712][T18251] C: entered promiscuous mode [ 480.415561][T18251] tunl0: entered promiscuous mode [ 480.531852][T18251] gre0: entered promiscuous mode [ 480.646375][T18251] 0ªX¹¦Dö»: entered promiscuous mode [ 480.660924][T18251] erspan0: entered promiscuous mode [ 480.662634][T18258] netlink: 'syz.0.3959': attribute type 21 has an invalid length. [ 480.724373][T18251] ip_vti0: entered promiscuous mode [ 480.822464][T18262] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3963'. [ 481.001854][T18268] FAULT_INJECTION: forcing a failure. [ 481.001854][T18268] name failslab, interval 1, probability 0, space 0, times 0 [ 481.001890][T18268] CPU: 0 UID: 0 PID: 18268 Comm: syz.1.3962 Not tainted syzkaller #0 PREEMPT(full) [ 481.001915][T18268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 481.001930][T18268] Call Trace: [ 481.001939][T18268] [ 481.001950][T18268] dump_stack_lvl+0xe8/0x150 [ 481.001988][T18268] should_fail_ex+0x410/0x560 [ 481.002024][T18268] ? __alloc_skb+0x1db/0x7a0 [ 481.002124][T18268] should_failslab+0xa8/0x100 [ 481.002157][T18268] ? __alloc_skb+0x1db/0x7a0 [ 481.002176][T18268] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 481.002202][T18268] ? __alloc_skb+0x18d/0x7a0 [ 481.002223][T18268] ? __alloc_skb+0x1db/0x7a0 [ 481.002251][T18268] __alloc_skb+0x1db/0x7a0 [ 481.002277][T18268] netlink_sendmsg+0x5d4/0xb40 [ 481.002364][T18268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.002404][T18268] ? apparmor_socket_sendmsg+0x98/0x360 [ 481.002499][T18268] ? __pfx_netlink_sendmsg+0x10/0x10 [ 481.002527][T18268] sock_sendmsg_nosec+0x13a/0x180 [ 481.002595][T18268] ____sys_sendmsg+0x54e/0x850 [ 481.002627][T18268] ? __pfx_____sys_sendmsg+0x10/0x10 [ 481.002664][T18268] ? import_iovec+0x73/0xa0 [ 481.002728][T18268] ___sys_sendmsg+0x2a5/0x360 [ 481.002753][T18268] ? __lock_acquire+0x747/0x2de0 [ 481.002785][T18268] ? __pfx____sys_sendmsg+0x10/0x10 [ 481.002851][T18268] ? __fget_files+0x2a/0x420 [ 481.002871][T18268] ? __fget_files+0x3a2/0x420 [ 481.002905][T18268] __x64_sys_sendmsg+0x1b1/0x290 [ 481.002934][T18268] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 481.002986][T18268] do_syscall_64+0x166/0x520 [ 481.003013][T18268] ? trace_irq_disable+0x3b/0x140 [ 481.003039][T18268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.003063][T18268] ? clear_bhb_loop+0x70/0xc0 [ 481.003092][T18268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.003116][T18268] RIP: 0033:0x7fba5779f559 [ 481.003140][T18268] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 481.003161][T18268] RSP: 002b:00007fba58673028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 481.003186][T18268] RAX: ffffffffffffffda RBX: 00007fba57a25fa0 RCX: 00007fba5779f559 [ 481.003204][T18268] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 481.003219][T18268] RBP: 00007fba58673090 R08: 0000000000000000 R09: 0000000000000000 [ 481.003235][T18268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.003249][T18268] R13: 00007fba57a26038 R14: 00007fba57a25fa0 R15: 00007fffcdb19878 [ 481.003288][T18268] [ 481.410217][ T1493] net_ratelimit: 72 callbacks suppressed [ 481.410240][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 481.410268][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 481.410293][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 481.410317][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 481.412428][T18278] netlink: 'syz.2.3966': attribute type 10 has an invalid length. [ 481.412451][T18278] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3966'. [ 481.730613][T18289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3967'. [ 481.920216][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 481.920254][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 481.920277][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 481.920300][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 482.433141][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 482.433178][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 482.517750][T18320] netlink: 'syz.0.3979': attribute type 10 has an invalid length. [ 482.517775][T18320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3979'. [ 482.821891][T18335] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3985'. [ 482.841182][T18330] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3983'. [ 483.030267][T18343] netlink: 'syz.3.3988': attribute type 21 has an invalid length. [ 483.197267][T18349] netlink: 'syz.2.3991': attribute type 23 has an invalid length. [ 483.218582][T18349] netlink: 'syz.2.3991': attribute type 21 has an invalid length. [ 483.625672][T18364] netlink: 'syz.4.3998': attribute type 32 has an invalid length. [ 483.652987][T18361] Unsupported ieee802154 address type: 0 [ 483.741758][T18370] netlink: 'syz.0.3997': attribute type 1 has an invalid length. [ 483.782291][T18370] bond4: entered promiscuous mode [ 483.782725][T18370] 8021q: adding VLAN 0 to HW filter on device bond4 [ 483.818715][T18370] macvtap1: entered allmulticast mode [ 483.838345][T18368] FAULT_INJECTION: forcing a failure. [ 483.838345][T18368] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 483.838379][T18368] CPU: 1 UID: 0 PID: 18368 Comm: syz.3.3999 Not tainted syzkaller #0 PREEMPT(full) [ 483.838404][T18368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 483.838417][T18368] Call Trace: [ 483.838427][T18368] [ 483.838437][T18368] dump_stack_lvl+0xe8/0x150 [ 483.838475][T18368] should_fail_ex+0x410/0x560 [ 483.838513][T18368] _copy_from_iter+0x1d3/0x1660 [ 483.838545][T18368] ? __alloc_skb+0x27a/0x7a0 [ 483.838569][T18368] ? __alloc_skb+0x27a/0x7a0 [ 483.838590][T18368] ? __alloc_skb+0x27a/0x7a0 [ 483.838610][T18368] ? __pfx__copy_from_iter+0x10/0x10 [ 483.838635][T18370] macvtap2: entered allmulticast mode [ 483.838638][T18368] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 483.838663][T18368] ? __alloc_skb+0x27a/0x7a0 [ 483.838681][T18368] ? __alloc_skb+0x27a/0x7a0 [ 483.838708][T18368] ? netlink_sendmsg+0x650/0xb40 [ 483.838737][T18368] ? skb_put+0x112/0x210 [ 483.838761][T18368] netlink_sendmsg+0x6c0/0xb40 [ 483.838800][T18368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.838837][T18368] ? apparmor_socket_sendmsg+0x98/0x360 [ 483.838869][T18368] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.838896][T18368] sock_sendmsg_nosec+0x13a/0x180 [ 483.838929][T18368] ____sys_sendmsg+0x54e/0x850 [ 483.838960][T18368] ? __pfx_____sys_sendmsg+0x10/0x10 [ 483.839003][T18368] ? import_iovec+0x73/0xa0 [ 483.839057][T18368] ___sys_sendmsg+0x2a5/0x360 [ 483.839081][T18368] ? __lock_acquire+0x747/0x2de0 [ 483.839111][T18368] ? __pfx____sys_sendmsg+0x10/0x10 [ 483.839170][T18368] ? __fget_files+0x2a/0x420 [ 483.839188][T18368] ? __fget_files+0x3a2/0x420 [ 483.839218][T18368] __x64_sys_sendmsg+0x1b1/0x290 [ 483.839246][T18368] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 483.839294][T18368] do_syscall_64+0x166/0x520 [ 483.839321][T18368] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.839344][T18368] ? clear_bhb_loop+0x70/0xc0 [ 483.839372][T18368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.839394][T18368] RIP: 0033:0x7fc23139f559 [ 483.839414][T18368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 483.839433][T18368] RSP: 002b:00007fc232263028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 483.839457][T18368] RAX: ffffffffffffffda RBX: 00007fc231625fa0 RCX: 00007fc23139f559 [ 483.839473][T18368] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 483.839487][T18368] RBP: 00007fc232263090 R08: 0000000000000000 R09: 0000000000000000 [ 483.839502][T18368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 483.839515][T18368] R13: 00007fc231626038 R14: 00007fc231625fa0 R15: 00007ffeac430738 [ 483.839551][T18368] [ 484.144366][T18374] macvtap3: entered allmulticast mode [ 484.489615][T18370] bond4: (slave bridge0): making interface the new active one [ 484.489643][T18370] bridge0: entered promiscuous mode [ 484.543902][T18370] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 484.858910][T18394] netlink: 'syz.3.4006': attribute type 4 has an invalid length. [ 485.220252][T18404] FAULT_INJECTION: forcing a failure. [ 485.220252][T18404] name failslab, interval 1, probability 0, space 0, times 0 [ 485.220287][T18404] CPU: 0 UID: 0 PID: 18404 Comm: syz.4.4013 Not tainted syzkaller #0 PREEMPT(full) [ 485.220310][T18404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 485.220322][T18404] Call Trace: [ 485.220331][T18404] [ 485.220341][T18404] dump_stack_lvl+0xe8/0x150 [ 485.220378][T18404] should_fail_ex+0x410/0x560 [ 485.220415][T18404] should_failslab+0xa8/0x100 [ 485.220448][T18404] __kmalloc_noprof+0xfe/0x720 [ 485.220474][T18404] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 485.220573][T18404] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 485.220602][T18404] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 485.220630][T18404] genl_family_rcv_msg_doit+0xda/0x340 [ 485.220670][T18404] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 485.220712][T18404] ? apparmor_capable+0x126/0x170 [ 485.220736][T18404] ? bpf_lsm_capable+0x9/0x20 [ 485.220756][T18404] ? security_capable+0x7e/0x2c0 [ 485.220854][T18404] genl_rcv_msg+0x614/0x7a0 [ 485.220892][T18404] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.220922][T18404] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 485.221006][T18404] ? __pfx_nl802154_add_llsec_key+0x10/0x10 [ 485.221030][T18404] ? __pfx_nl802154_post_doit+0x10/0x10 [ 485.221097][T18404] netlink_rcv_skb+0x226/0x4a0 [ 485.221127][T18404] ? __pfx_genl_rcv_msg+0x10/0x10 [ 485.221164][T18404] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 485.221215][T18404] ? down_read+0x2be/0x330 [ 485.221356][T18404] genl_rcv+0x28/0x40 [ 485.221389][T18404] netlink_unicast+0x8ef/0xa80 [ 485.221436][T18404] netlink_sendmsg+0x813/0xb40 [ 485.221478][T18404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.221517][T18404] ? apparmor_socket_sendmsg+0x98/0x360 [ 485.221552][T18404] ? __pfx_netlink_sendmsg+0x10/0x10 [ 485.221581][T18404] sock_sendmsg_nosec+0x13a/0x180 [ 485.221617][T18404] ____sys_sendmsg+0x54e/0x850 [ 485.221650][T18404] ? __pfx_____sys_sendmsg+0x10/0x10 [ 485.221687][T18404] ? import_iovec+0x73/0xa0 [ 485.221728][T18404] ___sys_sendmsg+0x2a5/0x360 [ 485.221752][T18404] ? __lock_acquire+0x747/0x2de0 [ 485.221784][T18404] ? __pfx____sys_sendmsg+0x10/0x10 [ 485.221860][T18404] ? __fget_files+0x2a/0x420 [ 485.221881][T18404] ? __fget_files+0x3a2/0x420 [ 485.221915][T18404] __x64_sys_sendmsg+0x1b1/0x290 [ 485.221945][T18404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 485.221997][T18404] do_syscall_64+0x166/0x520 [ 485.222024][T18404] ? trace_irq_disable+0x3b/0x140 [ 485.222049][T18404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.222074][T18404] ? clear_bhb_loop+0x70/0xc0 [ 485.222103][T18404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.222126][T18404] RIP: 0033:0x7f2b23d9f559 [ 485.222149][T18404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 485.222170][T18404] RSP: 002b:00007f2b24c47028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 485.222195][T18404] RAX: ffffffffffffffda RBX: 00007f2b24025fa0 RCX: 00007f2b23d9f559 [ 485.222213][T18404] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000007 [ 485.222227][T18404] RBP: 00007f2b24c47090 R08: 0000000000000000 R09: 0000000000000000 [ 485.222242][T18404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 485.222256][T18404] R13: 00007f2b24026038 R14: 00007f2b24025fa0 R15: 00007ffe42b354b8 [ 485.222294][T18404] [ 485.412535][T18408] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4014'. [ 485.483414][T18408] smc: ib device syz2 ibport 1 applied user defined pnetid S [ 486.140640][T18431] netlink: 400 bytes leftover after parsing attributes in process `syz.4.4024'. [ 486.188994][T18443] netlink: 400 bytes leftover after parsing attributes in process `syz.4.4024'. [ 486.275077][T18435] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4025'. [ 486.556252][ T13] net_ratelimit: 30 callbacks suppressed [ 486.556277][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 486.556303][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 486.556327][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 486.556351][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 486.715963][T18455] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 487.016570][T18468] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4032'. [ 487.060441][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 487.060475][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 487.060499][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 487.060523][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 487.369896][T18482] netlink: 'syz.1.4036': attribute type 21 has an invalid length. [ 487.570812][ T13] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 487.725829][T18489] smc: net device team0 applied user defined pnetid SYZ2 [ 487.856918][T18502] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 487.884733][T18502] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 487.887207][T18502] bond0: option ad_user_port_key: mode dependency failed, not supported in mode active-backup(1) [ 488.365344][T18524] netlink: 'syz.1.4054': attribute type 1 has an invalid length. [ 488.483453][T18523] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4054'. [ 488.538001][T18532] FAULT_INJECTION: forcing a failure. [ 488.538001][T18532] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 488.538040][T18532] CPU: 0 UID: 0 PID: 18532 Comm: syz.2.4057 Not tainted syzkaller #0 PREEMPT(full) [ 488.538067][T18532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 488.538082][T18532] Call Trace: [ 488.538092][T18532] [ 488.538103][T18532] dump_stack_lvl+0xe8/0x150 [ 488.538145][T18532] should_fail_ex+0x410/0x560 [ 488.538185][T18532] _copy_from_user+0x2d/0xb0 [ 488.538224][T18532] __sys_bind+0x1c6/0x410 [ 488.538347][T18532] ? __pfx___sys_bind+0x10/0x10 [ 488.538396][T18532] ? __pfx_ksys_write+0x10/0x10 [ 488.538430][T18532] __x64_sys_bind+0x7a/0x90 [ 488.538465][T18532] do_syscall_64+0x166/0x520 [ 488.538492][T18532] ? trace_irq_disable+0x3b/0x140 [ 488.538519][T18532] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.538543][T18532] ? clear_bhb_loop+0x70/0xc0 [ 488.538572][T18532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.538596][T18532] RIP: 0033:0x7f123599f559 [ 488.538618][T18532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.538638][T18532] RSP: 002b:00007f12368b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 488.538663][T18532] RAX: ffffffffffffffda RBX: 00007f1235c25fa0 RCX: 00007f123599f559 [ 488.538681][T18532] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003 [ 488.538696][T18532] RBP: 00007f12368b9090 R08: 0000000000000000 R09: 0000000000000000 [ 488.538711][T18532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 488.538725][T18532] R13: 00007f1235c26038 R14: 00007f1235c25fa0 R15: 00007ffddcb53bd8 [ 488.538762][T18532] [ 489.365530][T18553] netlink: 'syz.2.4060': attribute type 10 has an invalid length. [ 489.365559][T18553] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4060'. [ 489.906559][T18571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4064'. [ 491.064643][T18613] bond9: entered allmulticast mode [ 491.067062][T18613] 8021q: adding VLAN 0 to HW filter on device bond9 [ 491.103069][T18616] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4076'. [ 491.261122][T18625] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4079'. [ 491.289464][T18631] netlink: 284 bytes leftover after parsing attributes in process `syz.3.4077'. [ 491.315989][T18634] netlink: 'syz.2.4079': attribute type 10 has an invalid length. [ 491.316014][T18634] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4079'. [ 491.578735][T18634] dummy0: entered promiscuous mode [ 491.671708][ T60] net_ratelimit: 33 callbacks suppressed [ 491.671732][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 491.671759][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 491.671783][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 491.671806][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 492.167638][T18655] netlink: 'syz.3.4085': attribute type 32 has an invalid length. [ 492.167663][T18655] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4085'. [ 492.191186][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 492.191220][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 492.191244][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 492.191265][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 492.347311][T18655] bond8: Setting coupled_control to off (0) [ 492.701141][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 492.701177][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 492.978129][T18689] netlink: 'syz.1.4094': attribute type 49 has an invalid length. [ 493.203738][T18694] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 493.671364][T18703] 8021q: adding VLAN 0 to HW filter on device bond10 [ 494.136367][T18721] netlink: 236 bytes leftover after parsing attributes in process `syz.3.4105'. [ 494.433028][T18727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4108'. [ 494.449828][T18728] Cannot find set identified by id 65534 to match [ 494.597329][T18734] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4112'. [ 494.909180][T18746] bridge_slave_0: left allmulticast mode [ 494.909212][T18746] bridge_slave_0: left promiscuous mode [ 494.909430][T18746] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.026821][T18746] bridge_slave_1: left allmulticast mode [ 495.026851][T18746] bridge_slave_1: left promiscuous mode [ 495.027068][T18746] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.157230][T18746] bond0: (slave 30): Releasing backup interface [ 495.282350][T18746] bond0: (slave bond_slave_1): Releasing backup interface [ 495.378130][T18746] team0: Port device team_slave_0 removed [ 495.479080][T18746] team0: Port device team_slave_1 removed [ 495.656607][ T5742] syz1: Port: 1 Link DOWN [ 495.728945][T18770] netlink: 144 bytes leftover after parsing attributes in process `syz.0.4119'. [ 495.922440][T18752] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 495.944863][T18752] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 496.106219][T18752] vda: unable to read partition table [ 496.180300][T18761] netlink: 3080 bytes leftover after parsing attributes in process `syz.4.4118'. [ 496.180328][T18761] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.4118'. [ 496.341937][T18752] syz.3.4114 (18752) used greatest stack depth: 19360 bytes left [ 496.580383][T18780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4122'. [ 496.683523][T18787] netlink: 'syz.0.4126': attribute type 8 has an invalid length. [ 496.789317][ T8778] net_ratelimit: 123 callbacks suppressed [ 496.789341][ T8778] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 496.789369][ T8778] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 496.789392][ T8778] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 496.789415][ T8778] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 496.941893][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.191806][T18802] netlink: ct family unspecified [ 497.262811][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 497.295193][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 497.295231][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 497.295255][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 497.707265][T18816] FAULT_INJECTION: forcing a failure. [ 497.707265][T18816] name failslab, interval 1, probability 0, space 0, times 0 [ 497.707302][T18816] CPU: 1 UID: 0 PID: 18816 Comm: syz.3.4139 Not tainted syzkaller #0 PREEMPT(full) [ 497.707327][T18816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 497.707342][T18816] Call Trace: [ 497.707351][T18816] [ 497.707362][T18816] dump_stack_lvl+0xe8/0x150 [ 497.707401][T18816] should_fail_ex+0x410/0x560 [ 497.707439][T18816] should_failslab+0xa8/0x100 [ 497.707473][T18816] __kmalloc_noprof+0xfe/0x720 [ 497.707499][T18816] ? __netlink_lookup+0x82e/0x8f0 [ 497.707545][T18816] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 497.707568][T18816] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 497.707600][T18816] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 497.707633][T18816] genl_start+0x180/0x6d0 [ 497.707675][T18816] __netlink_dump_start+0x442/0x7b0 [ 497.707709][T18816] genl_family_rcv_msg_dumpit+0x213/0x310 [ 497.707749][T18816] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 497.707783][T18816] ? genl_get_cmd+0x6cc/0x960 [ 497.707822][T18816] ? __pfx_genl_start+0x10/0x10 [ 497.707853][T18816] ? __pfx_genl_dumpit+0x10/0x10 [ 497.707884][T18816] ? __pfx_genl_done+0x10/0x10 [ 497.707935][T18816] genl_rcv_msg+0x5e1/0x7a0 [ 497.707982][T18816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.708016][T18816] ? __pfx_ethnl_default_start+0x10/0x10 [ 497.708132][T18816] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 497.708162][T18816] ? __pfx_ethnl_default_done+0x10/0x10 [ 497.708209][T18816] netlink_rcv_skb+0x226/0x4a0 [ 497.708239][T18816] ? __pfx_genl_rcv_msg+0x10/0x10 [ 497.708275][T18816] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 497.708320][T18816] ? down_read+0x2be/0x330 [ 497.708355][T18816] genl_rcv+0x28/0x40 [ 497.708387][T18816] netlink_unicast+0x8ef/0xa80 [ 497.708433][T18816] netlink_sendmsg+0x813/0xb40 [ 497.708474][T18816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.708512][T18816] ? apparmor_socket_sendmsg+0x98/0x360 [ 497.708546][T18816] ? __pfx_netlink_sendmsg+0x10/0x10 [ 497.708572][T18816] sock_sendmsg_nosec+0x13a/0x180 [ 497.708606][T18816] ____sys_sendmsg+0x54e/0x850 [ 497.708636][T18816] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.708672][T18816] ? import_iovec+0x73/0xa0 [ 497.708710][T18816] ___sys_sendmsg+0x2a5/0x360 [ 497.708751][T18816] ? __lock_acquire+0x747/0x2de0 [ 497.708783][T18816] ? __pfx____sys_sendmsg+0x10/0x10 [ 497.708848][T18816] ? __fget_files+0x2a/0x420 [ 497.708870][T18816] ? __fget_files+0x3a2/0x420 [ 497.708901][T18816] __x64_sys_sendmsg+0x1b1/0x290 [ 497.708931][T18816] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 497.708980][T18816] do_syscall_64+0x166/0x520 [ 497.709008][T18816] ? trace_irq_disable+0x3b/0x140 [ 497.709034][T18816] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.709058][T18816] ? clear_bhb_loop+0x70/0xc0 [ 497.709097][T18816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.709120][T18816] RIP: 0033:0x7fc23139f559 [ 497.709141][T18816] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 497.709162][T18816] RSP: 002b:00007fc232263028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.709187][T18816] RAX: ffffffffffffffda RBX: 00007fc231625fa0 RCX: 00007fc23139f559 [ 497.709205][T18816] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 497.709220][T18816] RBP: 00007fc232263090 R08: 0000000000000000 R09: 0000000000000000 [ 497.709235][T18816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 497.709250][T18816] R13: 00007fc231626038 R14: 00007fc231625fa0 R15: 00007ffeac430738 [ 497.709290][T18816] [ 497.839660][T18820] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4141'. [ 498.448034][T18833] syzkaller1: entered promiscuous mode [ 498.448233][T18833] syzkaller1: entered allmulticast mode [ 498.575521][T18836] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4148'. [ 498.575555][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4148'. [ 498.750484][T18844] netlink: 'syz.4.4148': attribute type 3 has an invalid length. [ 498.750513][T18844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4148'. [ 499.033031][T18850] xt_hashlimit: size too large, truncated to 1048576 [ 499.218575][T18858] FAULT_INJECTION: forcing a failure. [ 499.218575][T18858] name failslab, interval 1, probability 0, space 0, times 0 [ 499.218610][T18858] CPU: 0 UID: 0 PID: 18858 Comm: syz.3.4154 Not tainted syzkaller #0 PREEMPT(full) [ 499.218635][T18858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 499.218648][T18858] Call Trace: [ 499.218656][T18858] [ 499.218665][T18858] dump_stack_lvl+0xe8/0x150 [ 499.218700][T18858] should_fail_ex+0x410/0x560 [ 499.218734][T18858] should_failslab+0xa8/0x100 [ 499.218764][T18858] __kmalloc_noprof+0xfe/0x720 [ 499.218788][T18858] ? __netlink_lookup+0x82e/0x8f0 [ 499.218815][T18858] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 499.218835][T18858] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 499.218863][T18858] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 499.218892][T18858] genl_start+0x180/0x6d0 [ 499.218930][T18858] __netlink_dump_start+0x442/0x7b0 [ 499.218971][T18858] genl_family_rcv_msg_dumpit+0x213/0x310 [ 499.219007][T18858] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 499.219037][T18858] ? genl_get_cmd+0x6cc/0x960 [ 499.219071][T18858] ? __pfx_genl_start+0x10/0x10 [ 499.219098][T18858] ? __pfx_genl_dumpit+0x10/0x10 [ 499.219130][T18858] ? __pfx_genl_done+0x10/0x10 [ 499.219174][T18858] genl_rcv_msg+0x5e1/0x7a0 [ 499.219211][T18858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.219241][T18858] ? __pfx_ethnl_default_start+0x10/0x10 [ 499.219268][T18858] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 499.219295][T18858] ? __pfx_ethnl_default_done+0x10/0x10 [ 499.219338][T18858] netlink_rcv_skb+0x226/0x4a0 [ 499.219365][T18858] ? __pfx_genl_rcv_msg+0x10/0x10 [ 499.219414][T18858] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 499.219458][T18858] ? down_read+0x2be/0x330 [ 499.219491][T18858] genl_rcv+0x28/0x40 [ 499.219521][T18858] netlink_unicast+0x8ef/0xa80 [ 499.219573][T18858] netlink_sendmsg+0x813/0xb40 [ 499.219608][T18858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.219640][T18858] ? apparmor_socket_sendmsg+0x98/0x360 [ 499.219669][T18858] ? __pfx_netlink_sendmsg+0x10/0x10 [ 499.219692][T18858] sock_sendmsg_nosec+0x13a/0x180 [ 499.219716][T18858] ____sys_sendmsg+0x54e/0x850 [ 499.219738][T18858] ? __pfx_____sys_sendmsg+0x10/0x10 [ 499.219761][T18858] ? import_iovec+0x73/0xa0 [ 499.219788][T18858] ___sys_sendmsg+0x2a5/0x360 [ 499.219804][T18858] ? __lock_acquire+0x747/0x2de0 [ 499.219825][T18858] ? __pfx____sys_sendmsg+0x10/0x10 [ 499.219869][T18858] ? __fget_files+0x2a/0x420 [ 499.219883][T18858] ? __fget_files+0x3a2/0x420 [ 499.219911][T18858] __x64_sys_sendmsg+0x1b1/0x290 [ 499.219936][T18858] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 499.219986][T18858] do_syscall_64+0x166/0x520 [ 499.220010][T18858] ? trace_irq_disable+0x3b/0x140 [ 499.220033][T18858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.220053][T18858] ? clear_bhb_loop+0x70/0xc0 [ 499.220077][T18858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.220097][T18858] RIP: 0033:0x7fc23139f559 [ 499.220115][T18858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.220132][T18858] RSP: 002b:00007fc232263028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 499.220153][T18858] RAX: ffffffffffffffda RBX: 00007fc231625fa0 RCX: 00007fc23139f559 [ 499.220168][T18858] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 499.220181][T18858] RBP: 00007fc232263090 R08: 0000000000000000 R09: 0000000000000000 [ 499.220193][T18858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 499.220223][T18858] R13: 00007fc231626038 R14: 00007fc231625fa0 R15: 00007ffeac430738 [ 499.220258][T18858] [ 500.246479][T18883] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 500.246530][T18883] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 501.078504][T18912] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4174'. [ 501.141957][T18908] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4174'. [ 501.971702][ T8778] net_ratelimit: 44 callbacks suppressed [ 501.971727][ T8778] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 501.971776][ T8778] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 501.971799][ T8778] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 501.971828][ T8778] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 502.272794][T18948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4187'. [ 502.460582][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.487295][ T6442] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 502.487334][ T6442] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 502.487361][ T6442] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 502.487387][ T6442] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 502.729721][T18960] FAULT_INJECTION: forcing a failure. [ 502.729721][T18960] name failslab, interval 1, probability 0, space 0, times 0 [ 502.729758][T18960] CPU: 1 UID: 0 PID: 18960 Comm: syz.1.4194 Not tainted syzkaller #0 PREEMPT(full) [ 502.729784][T18960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 502.729799][T18960] Call Trace: [ 502.729808][T18960] [ 502.729819][T18960] dump_stack_lvl+0xe8/0x150 [ 502.729857][T18960] should_fail_ex+0x410/0x560 [ 502.729895][T18960] should_failslab+0xa8/0x100 [ 502.729935][T18960] __kmalloc_noprof+0xfe/0x720 [ 502.729961][T18960] ? __kmalloc_noprof+0x1ab/0x720 [ 502.729985][T18960] ? ethnl_default_start+0x14b/0x610 [ 502.730017][T18960] ? ethnl_default_start+0x14b/0x610 [ 502.730058][T18960] ethnl_default_start+0x14b/0x610 [ 502.730097][T18960] genl_start+0x4c1/0x6d0 [ 502.730141][T18960] __netlink_dump_start+0x442/0x7b0 [ 502.730177][T18960] genl_family_rcv_msg_dumpit+0x213/0x310 [ 502.730217][T18960] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 502.730252][T18960] ? genl_get_cmd+0x6cc/0x960 [ 502.730299][T18960] ? __pfx_genl_start+0x10/0x10 [ 502.730331][T18960] ? __pfx_genl_dumpit+0x10/0x10 [ 502.730363][T18960] ? __pfx_genl_done+0x10/0x10 [ 502.730414][T18960] genl_rcv_msg+0x5e1/0x7a0 [ 502.730456][T18960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.730489][T18960] ? __pfx_ethnl_default_start+0x10/0x10 [ 502.730520][T18960] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 502.730551][T18960] ? __pfx_ethnl_default_done+0x10/0x10 [ 502.730597][T18960] netlink_rcv_skb+0x226/0x4a0 [ 502.730627][T18960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 502.730662][T18960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 502.730713][T18960] ? down_read+0x2be/0x330 [ 502.730749][T18960] genl_rcv+0x28/0x40 [ 502.730782][T18960] netlink_unicast+0x8ef/0xa80 [ 502.730826][T18960] netlink_sendmsg+0x813/0xb40 [ 502.730865][T18960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.730904][T18960] ? apparmor_socket_sendmsg+0x98/0x360 [ 502.730938][T18960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 502.730966][T18960] sock_sendmsg_nosec+0x13a/0x180 [ 502.731000][T18960] ____sys_sendmsg+0x54e/0x850 [ 502.731042][T18960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 502.731076][T18960] ? import_iovec+0x73/0xa0 [ 502.731112][T18960] ___sys_sendmsg+0x2a5/0x360 [ 502.731134][T18960] ? __lock_acquire+0x747/0x2de0 [ 502.731164][T18960] ? __pfx____sys_sendmsg+0x10/0x10 [ 502.731223][T18960] ? __fget_files+0x2a/0x420 [ 502.731242][T18960] ? __fget_files+0x3a2/0x420 [ 502.731273][T18960] __x64_sys_sendmsg+0x1b1/0x290 [ 502.731299][T18960] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 502.731345][T18960] do_syscall_64+0x166/0x520 [ 502.731370][T18960] ? trace_irq_disable+0x3b/0x140 [ 502.731393][T18960] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.731415][T18960] ? clear_bhb_loop+0x70/0xc0 [ 502.731441][T18960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.731462][T18960] RIP: 0033:0x7fba5779f559 [ 502.731482][T18960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 502.731500][T18960] RSP: 002b:00007fba58673028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 502.731523][T18960] RAX: ffffffffffffffda RBX: 00007fba57a25fa0 RCX: 00007fba5779f559 [ 502.731557][T18960] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 502.731572][T18960] RBP: 00007fba58673090 R08: 0000000000000000 R09: 0000000000000000 [ 502.731586][T18960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.731600][T18960] R13: 00007fba57a26038 R14: 00007fba57a25fa0 R15: 00007fffcdb19878 [ 502.731637][T18960] [ 503.009389][ T6442] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 504.113528][T18995] FAULT_INJECTION: forcing a failure. [ 504.113528][T18995] name failslab, interval 1, probability 0, space 0, times 0 [ 504.113575][T18995] CPU: 0 UID: 0 PID: 18995 Comm: syz.2.4207 Not tainted syzkaller #0 PREEMPT(full) [ 504.113601][T18995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 504.113617][T18995] Call Trace: [ 504.113626][T18995] [ 504.113637][T18995] dump_stack_lvl+0xe8/0x150 [ 504.113678][T18995] should_fail_ex+0x410/0x560 [ 504.113719][T18995] should_failslab+0xa8/0x100 [ 504.113755][T18995] __kmalloc_noprof+0xfe/0x720 [ 504.113783][T18995] ? __kmalloc_noprof+0x1ab/0x720 [ 504.113808][T18995] ? ethnl_default_start+0x14b/0x610 [ 504.113842][T18995] ? ethnl_default_start+0x14b/0x610 [ 504.113885][T18995] ethnl_default_start+0x14b/0x610 [ 504.113927][T18995] genl_start+0x4c1/0x6d0 [ 504.113973][T18995] __netlink_dump_start+0x442/0x7b0 [ 504.114010][T18995] genl_family_rcv_msg_dumpit+0x213/0x310 [ 504.114052][T18995] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 504.114090][T18995] ? genl_get_cmd+0x6cc/0x960 [ 504.114132][T18995] ? __pfx_genl_start+0x10/0x10 [ 504.114165][T18995] ? __pfx_genl_dumpit+0x10/0x10 [ 504.114199][T18995] ? __pfx_genl_done+0x10/0x10 [ 504.114252][T18995] genl_rcv_msg+0x5e1/0x7a0 [ 504.114297][T18995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.114335][T18995] ? __pfx_ethnl_default_start+0x10/0x10 [ 504.114368][T18995] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 504.114400][T18995] ? __pfx_ethnl_default_done+0x10/0x10 [ 504.114451][T18995] netlink_rcv_skb+0x226/0x4a0 [ 504.114482][T18995] ? __pfx_genl_rcv_msg+0x10/0x10 [ 504.114521][T18995] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 504.114577][T18995] ? down_read+0x2be/0x330 [ 504.114613][T18995] genl_rcv+0x28/0x40 [ 504.114647][T18995] netlink_unicast+0x8ef/0xa80 [ 504.114694][T18995] netlink_sendmsg+0x813/0xb40 [ 504.114736][T18995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.114777][T18995] ? apparmor_socket_sendmsg+0x98/0x360 [ 504.114815][T18995] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.114844][T18995] sock_sendmsg_nosec+0x13a/0x180 [ 504.114881][T18995] ____sys_sendmsg+0x54e/0x850 [ 504.114914][T18995] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.114950][T18995] ? import_iovec+0x73/0xa0 [ 504.114992][T18995] ___sys_sendmsg+0x2a5/0x360 [ 504.115017][T18995] ? __lock_acquire+0x747/0x2de0 [ 504.115050][T18995] ? __pfx____sys_sendmsg+0x10/0x10 [ 504.115121][T18995] ? __fget_files+0x2a/0x420 [ 504.115142][T18995] ? __fget_files+0x3a2/0x420 [ 504.115178][T18995] __x64_sys_sendmsg+0x1b1/0x290 [ 504.115209][T18995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 504.115263][T18995] do_syscall_64+0x166/0x520 [ 504.115291][T18995] ? trace_irq_disable+0x3b/0x140 [ 504.115318][T18995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.115343][T18995] ? clear_bhb_loop+0x70/0xc0 [ 504.115385][T18995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.115407][T18995] RIP: 0033:0x7f123599f559 [ 504.115429][T18995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 504.115449][T18995] RSP: 002b:00007f12368b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.115475][T18995] RAX: ffffffffffffffda RBX: 00007f1235c25fa0 RCX: 00007f123599f559 [ 504.115492][T18995] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 504.115508][T18995] RBP: 00007f12368b9090 R08: 0000000000000000 R09: 0000000000000000 [ 504.115523][T18995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.115538][T18995] R13: 00007f1235c26038 R14: 00007f1235c25fa0 R15: 00007ffddcb53bd8 [ 504.115582][T18995] [ 504.696117][T18998] syzkaller0: entered promiscuous mode [ 504.696145][T18998] syzkaller0: entered allmulticast mode [ 505.028026][T19007] bond5: option packets_per_slave: invalid value (18446744073709551615) [ 505.028055][T19007] bond5: option packets_per_slave: allowed values 0 - 65535 [ 505.051312][T19007] bond5 (unregistering): Released all slaves [ 505.592145][T19023] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4215'. [ 505.592191][T19023] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4215'. [ 505.749348][T19026] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4216'. [ 505.770367][T19025] sch_tbf: burst 0 is lower than device lo mtu (81) ! [ 506.138135][T19038] FAULT_INJECTION: forcing a failure. [ 506.138135][T19038] name failslab, interval 1, probability 0, space 0, times 0 [ 506.138173][T19038] CPU: 0 UID: 0 PID: 19038 Comm: syz.3.4219 Not tainted syzkaller #0 PREEMPT(full) [ 506.138198][T19038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 506.138212][T19038] Call Trace: [ 506.138222][T19038] [ 506.138232][T19038] dump_stack_lvl+0xe8/0x150 [ 506.138269][T19038] should_fail_ex+0x410/0x560 [ 506.138305][T19038] ? __alloc_skb+0x1db/0x7a0 [ 506.138327][T19038] should_failslab+0xa8/0x100 [ 506.138361][T19038] ? __alloc_skb+0x1db/0x7a0 [ 506.138380][T19038] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 506.138406][T19038] ? __alloc_skb+0x18d/0x7a0 [ 506.138428][T19038] ? __alloc_skb+0x1db/0x7a0 [ 506.138472][T19038] __alloc_skb+0x1db/0x7a0 [ 506.138499][T19038] netlink_dump+0x1e7/0xee0 [ 506.138528][T19038] ? __pfx_ethnl_parse_header_dev_get+0x10/0x10 [ 506.138567][T19038] ? __kmalloc_noprof+0x38c/0x720 [ 506.138594][T19038] ? __kmalloc_noprof+0x1ab/0x720 [ 506.138618][T19038] ? ethnl_default_start+0x14b/0x610 [ 506.138652][T19038] ? __pfx_netlink_dump+0x10/0x10 [ 506.138695][T19038] ? genl_start+0x57e/0x6d0 [ 506.138739][T19038] __netlink_dump_start+0x589/0x7b0 [ 506.138776][T19038] genl_family_rcv_msg_dumpit+0x213/0x310 [ 506.138817][T19038] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 506.138853][T19038] ? genl_get_cmd+0x6cc/0x960 [ 506.138894][T19038] ? __pfx_genl_start+0x10/0x10 [ 506.138927][T19038] ? __pfx_genl_dumpit+0x10/0x10 [ 506.138959][T19038] ? __pfx_genl_done+0x10/0x10 [ 506.139012][T19038] genl_rcv_msg+0x5e1/0x7a0 [ 506.139056][T19038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.139089][T19038] ? __pfx_ethnl_default_start+0x10/0x10 [ 506.139119][T19038] ? __pfx_ethnl_default_dumpit+0x10/0x10 [ 506.139149][T19038] ? __pfx_ethnl_default_done+0x10/0x10 [ 506.139223][T19038] netlink_rcv_skb+0x226/0x4a0 [ 506.139253][T19038] ? __pfx_genl_rcv_msg+0x10/0x10 [ 506.139292][T19038] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 506.139339][T19038] ? down_read+0x2be/0x330 [ 506.139374][T19038] genl_rcv+0x28/0x40 [ 506.139413][T19038] netlink_unicast+0x8ef/0xa80 [ 506.139475][T19038] netlink_sendmsg+0x813/0xb40 [ 506.139519][T19038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.139560][T19038] ? apparmor_socket_sendmsg+0x98/0x360 [ 506.139597][T19038] ? __pfx_netlink_sendmsg+0x10/0x10 [ 506.139627][T19038] sock_sendmsg_nosec+0x13a/0x180 [ 506.139665][T19038] ____sys_sendmsg+0x54e/0x850 [ 506.139699][T19038] ? __pfx_____sys_sendmsg+0x10/0x10 [ 506.139738][T19038] ? import_iovec+0x73/0xa0 [ 506.139780][T19038] ___sys_sendmsg+0x2a5/0x360 [ 506.139806][T19038] ? __lock_acquire+0x747/0x2de0 [ 506.139839][T19038] ? __pfx____sys_sendmsg+0x10/0x10 [ 506.139909][T19038] ? __fget_files+0x2a/0x420 [ 506.139930][T19038] ? __fget_files+0x3a2/0x420 [ 506.139964][T19038] __x64_sys_sendmsg+0x1b1/0x290 [ 506.139993][T19038] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 506.140043][T19038] do_syscall_64+0x166/0x520 [ 506.140070][T19038] ? trace_irq_disable+0x3b/0x140 [ 506.140096][T19038] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.140121][T19038] ? clear_bhb_loop+0x70/0xc0 [ 506.140150][T19038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.140174][T19038] RIP: 0033:0x7fc23139f559 [ 506.140195][T19038] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.140213][T19038] RSP: 002b:00007fc232263028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.140239][T19038] RAX: ffffffffffffffda RBX: 00007fc231625fa0 RCX: 00007fc23139f559 [ 506.140257][T19038] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 506.140273][T19038] RBP: 00007fc232263090 R08: 0000000000000000 R09: 0000000000000000 [ 506.140288][T19038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.140302][T19038] R13: 00007fc231626038 R14: 00007fc231625fa0 R15: 00007ffeac430738 [ 506.140342][T19038] [ 506.436906][T19010] netlink: 'syz.2.4212': attribute type 1 has an invalid length. [ 506.722929][T19010] 8021q: adding VLAN 0 to HW filter on device bond10 [ 506.811055][T19039] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 507.152707][ T12] net_ratelimit: 38 callbacks suppressed [ 507.152732][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 507.152766][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 507.152791][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 507.152814][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 507.157294][T19059] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4226'. [ 507.493333][T19073] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4229'. [ 507.602446][T19076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4231'. [ 507.602483][T19076] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4231'. [ 507.609671][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4231'. [ 507.609709][T19075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4231'. [ 507.660940][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.692497][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 507.692532][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 507.692557][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 507.692581][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 507.878815][T19075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4231'. [ 508.210155][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 508.608844][T19107] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 508.676157][T19109] team0: No ports can be present during mode change [ 508.984103][T19117] ipvlan0: entered promiscuous mode [ 508.984198][T19117] ipvlan0: entered allmulticast mode [ 508.984215][T19117] veth0_vlan: entered allmulticast mode [ 509.213780][T19126] syz_tun: entered allmulticast mode [ 509.258989][T19125] syz_tun: left allmulticast mode [ 509.281953][T19134] bridge0: port 3(veth1_to_bridge) entered blocking state [ 509.282352][T19134] bridge0: port 3(veth1_to_bridge) entered disabled state [ 509.282525][T19134] veth1_to_bridge: entered allmulticast mode [ 509.287160][T19134] veth1_to_bridge: entered promiscuous mode [ 509.287320][T19134] bridge0: adding interface veth1_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 509.292710][T19134] bridge0: port 3(veth1_to_bridge) entered blocking state [ 509.292989][T19134] bridge0: port 3(veth1_to_bridge) entered forwarding state [ 512.320136][ T60] net_ratelimit: 39 callbacks suppressed [ 512.320165][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 512.320195][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 512.320233][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 512.320258][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 512.830227][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 512.830274][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 512.830299][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 512.830322][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 512.883252][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.345392][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 517.430211][ T50] net_ratelimit: 36 callbacks suppressed [ 517.430237][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 517.430264][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 517.430286][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 517.430310][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 517.940612][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 517.940667][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 517.940690][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 517.940712][ T50] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 518.060494][ T5742] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 518.069550][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 522.532362][ T12] net_ratelimit: 38 callbacks suppressed [ 522.532398][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 522.532426][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 522.532450][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 522.532474][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 523.040212][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 523.040251][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 523.040275][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 523.040298][ T1493] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 523.264496][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.553308][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 527.631403][ T12] net_ratelimit: 37 callbacks suppressed [ 527.631430][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 527.631469][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 527.631491][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 527.631522][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 527.661113][T16841] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.141629][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 528.141669][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 528.141694][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 528.141718][ T60] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 528.464831][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.956217][T19150] team0: No ports can be present during mode change [ 532.003096][T19147] netlink: 'syz.1.4259': attribute type 83 has an invalid length. [ 532.335353][T19165] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 532.394281][T19167] __nla_validate_parse: 4 callbacks suppressed [ 532.394330][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4268'. [ 532.546411][T19173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4269'. [ 532.645749][T19170] tc action pedit offset 2062 out of bounds [ 532.716016][T19182] netlink: 'syz.4.4273': attribute type 10 has an invalid length. [ 532.738980][ T12] net_ratelimit: 39 callbacks suppressed [ 532.739000][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 532.739025][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 532.739046][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 532.739067][ T12] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 532.815243][T19182] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.817042][T19182] team0: entered allmulticast mode [ 532.817065][T19182] team_slave_1: entered allmulticast mode [ 532.817085][T19182] macvlan0: entered allmulticast mode [ 532.817100][T19182] veth1_vlan: entered allmulticast mode [ 533.164366][T19189] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 533.202974][T19189] team0: No ports can be present during mode change [ 533.240468][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 533.240502][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 533.240524][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 533.240545][ T32] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 533.375078][T19193] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4277'. [ 533.425328][ T5763] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.650169][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4281'. [ 533.877961][T19204] syzkaller0: entered promiscuous mode [ 533.878164][T19204] syzkaller0: entered allmulticast mode [ 533.966377][T19216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4284'. [ 534.028493][T19217] netlink: 288 bytes leftover after parsing attributes in process `syz.1.4286'. [ 534.029821][T19222] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4287'. [ 534.051888][ T5628] block nbd6: Receive control failed (result -1) [ 534.214145][T19219] bond5 (unregistering): Released all slaves [ 534.296046][T19217] ip6erspan1: entered promiscuous mode [ 534.688686][T19245] team0: No ports can be present during mode change [ 534.965352][T19251] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4295'. [ 535.047358][T19256] x_tables: unsorted underflow at hook 3 [ 535.140619][T19264] netlink: 'syz.4.4301': attribute type 2 has an invalid length. [ 535.140817][T19263] netlink: 'syz.4.4301': attribute type 2 has an invalid length. [ 535.142300][T19263] x_tables: duplicate entry at hook 4 [ 535.142429][T19263] x_tables: duplicate entry at hook 4 [ 535.219609][T19267] netlink: 'syz.0.4300': attribute type 2 has an invalid length. [ 535.219634][T19267] netlink: 'syz.0.4300': attribute type 8 has an invalid length. [ 535.219648][T19267] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4300'. [ 535.437040][T19273] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4302'. [ 536.103374][T19304] ip6gretap0: entered promiscuous mode [ 536.103560][T19304] ip6gretap0: entered allmulticast mode [ 536.918429][T19338] set match dimension is over the limit! [ 537.227025][T19352] netlink: 'syz.1.4333': attribute type 11 has an invalid length. [ 537.304256][T19356] netlink: 'syz.1.4333': attribute type 11 has an invalid length. [ 537.820462][ T30] net_ratelimit: 40 callbacks suppressed [ 537.820486][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.861142][ T59] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 537.861178][ T59] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 537.861202][ T59] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 537.861242][ T59] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 537.990726][T19389] __nla_validate_parse: 6 callbacks suppressed [ 537.990750][T19389] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4345'. [ 538.370255][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:00:00:00:01 [ 538.370291][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:00:00:2a [ 538.370313][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 538.370335][ T6444] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 538.566498][T19411] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4354'. [ 538.566529][T19411] netlink: 'syz.1.4354': attribute type 6 has an invalid length. [ 538.826973][T19419] netlink: 'syz.4.4352': attribute type 10 has an invalid length. [ 538.827000][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4352'. [ 538.860837][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.890877][T19401] syzkaller0: entered promiscuous mode [ 538.891089][T19401] syzkaller0: entered allmulticast mode [ 539.223610][T19433] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4360'. [ 539.405421][T19441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4361'. [ 539.946823][T19459] netlink: 260 bytes leftover after parsing attributes in process `syz.0.4361'. [ 540.102661][T19463] siw: device registration error -23 [ 540.287173][T19466] netlink: 144 bytes leftover after parsing attributes in process `syz.1.4367'. [ 540.477011][T19470] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4369'. [ 540.477039][T19470] netlink: 236 bytes leftover after parsing attributes in process `syz.1.4369'. [ 542.830031][ C1] net_ratelimit: 10661 callbacks suppressed [ 542.830056][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.830336][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.830670][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.830926][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.831190][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.831443][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.831697][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.831951][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.832255][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 542.832591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 544.256334][T19436] veth9: entered allmulticast mode [ 544.745290][T19488] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4375'. [ 544.749635][T19488] syzkaller0: left promiscuous mode [ 544.749658][T19488] syzkaller0: left allmulticast mode [ 545.142731][T19502] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4380'. [ 545.142763][T19502] netlink: 236 bytes leftover after parsing attributes in process `syz.4.4380'. [ 545.943857][T19522] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4388'. [ 546.079118][T19527] siw: device registration error -23 [ 546.206108][T19534] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4392'. [ 546.321024][T19533] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4392'. [ 547.840092][ C1] net_ratelimit: 16196 callbacks suppressed [ 547.840120][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 547.840570][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.840653][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.840979][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.841010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.841293][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.841441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.842001][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.842441][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.842862][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 550.759921][ C0] sched: DL replenish lagged too much [ 552.759873][T19543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4394'. [ 552.850028][ C0] net_ratelimit: 24175 callbacks suppressed [ 552.850053][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.850069][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.850394][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 552.850521][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.850789][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.850990][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.851123][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.851464][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.851478][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.851789][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.860012][ C0] net_ratelimit: 24249 callbacks suppressed [ 557.860039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.860174][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.860487][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.860497][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.860818][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.860921][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.861134][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.861360][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.861446][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.861808][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 562.869938][ C1] net_ratelimit: 24146 callbacks suppressed [ 562.869964][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.870260][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.870568][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.870861][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.871173][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 562.871512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.871576][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.871878][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.872041][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.872177][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.879997][ C1] net_ratelimit: 23586 callbacks suppressed [ 567.880023][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.880180][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.880441][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.880631][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.880816][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.881074][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.881216][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.881536][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.881591][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.881955][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.889931][ C1] net_ratelimit: 24483 callbacks suppressed [ 572.889957][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.890266][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.890272][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.890579][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.890743][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.890942][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 572.891242][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.891347][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.891655][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.891719][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.899925][ C1] net_ratelimit: 24572 callbacks suppressed [ 577.899952][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 577.900169][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 577.900379][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.900584][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.900713][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.901026][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.901027][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.901342][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.901491][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 577.901709][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.910084][ C0] net_ratelimit: 24830 callbacks suppressed [ 582.910111][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.910120][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.910456][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.910586][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 582.910766][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.911044][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.911130][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 582.911512][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.911632][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.911938][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.920069][ C1] net_ratelimit: 25217 callbacks suppressed [ 587.920095][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.920100][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.920442][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.920574][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 587.920835][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.920999][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.921205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 587.921479][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.921628][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.921967][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 592.930124][ C1] net_ratelimit: 24344 callbacks suppressed [ 592.930151][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.930236][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.930692][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 592.930853][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 592.931175][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 592.931287][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.931633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.931637][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.933564][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.933893][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.939911][ C0] net_ratelimit: 22693 callbacks suppressed [ 597.939937][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 597.940169][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.940501][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 597.940955][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.941311][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.941507][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 597.941624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.941944][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.941971][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 597.942256][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.949937][ C0] net_ratelimit: 21117 callbacks suppressed [ 602.949966][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 602.950289][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.950453][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 602.950654][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.950895][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.951069][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.951369][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.951429][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.951827][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.951859][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 607.960046][ C1] net_ratelimit: 20756 callbacks suppressed [ 607.960073][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.960415][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.960732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.961113][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 607.961273][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.961575][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 607.962005][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.962472][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.962921][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 607.964469][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 612.969989][ C1] net_ratelimit: 21642 callbacks suppressed [ 612.970016][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.970059][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.970340][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.970582][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.970689][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.970998][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.971057][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.971323][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 612.971531][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.971715][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.980155][ C1] net_ratelimit: 21453 callbacks suppressed [ 617.980182][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.980265][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 617.980491][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.980847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 617.981235][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.981530][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.981828][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.982102][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.982110][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 617.982437][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.990233][ C0] net_ratelimit: 22249 callbacks suppressed [ 622.990236][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 622.990257][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.990666][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.990732][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.990999][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.991178][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.991355][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.991635][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.991687][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.992009][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.000158][ C1] net_ratelimit: 21977 callbacks suppressed [ 628.000183][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.000506][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.000845][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.000846][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.001228][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 628.001324][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 628.001699][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.001755][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.002033][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 628.002197][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.009984][ C0] net_ratelimit: 22365 callbacks suppressed [ 633.010010][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.010156][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.010438][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 633.010505][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.011184][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.011553][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.011875][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 633.012003][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 633.012372][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 633.012377][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.020033][ C1] net_ratelimit: 22052 callbacks suppressed [ 638.020059][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.020364][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.020694][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.020991][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.021300][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.021369][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.021598][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.021895][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 638.021965][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 638.022352][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.030128][ C1] net_ratelimit: 20373 callbacks suppressed [ 643.030153][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.030265][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.030737][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.031196][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.031699][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.032219][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.032676][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 643.033128][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 643.034666][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 643.034705][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.040134][ C1] net_ratelimit: 19278 callbacks suppressed [ 648.040160][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.040546][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.040736][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.040997][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.041166][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 648.041350][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.041585][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 648.041709][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.042043][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 648.042062][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.049921][ C0] net_ratelimit: 21672 callbacks suppressed [ 653.049947][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.050030][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.050329][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.050387][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 653.050633][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.050823][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.050980][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.051259][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.051322][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 653.051656][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 658.060184][ C1] net_ratelimit: 20659 callbacks suppressed [ 658.060210][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.060301][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.060539][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.060789][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.060858][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.061179][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.061223][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 658.061505][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 658.061847][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 658.062261][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.069913][ C1] net_ratelimit: 19130 callbacks suppressed [ 663.069938][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.070285][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 663.070710][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.071472][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 663.071921][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 663.072340][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 663.072742][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.073159][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 663.073606][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 663.074040][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.079940][ C0] net_ratelimit: 18527 callbacks suppressed [ 668.079968][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.080105][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.080411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.080437][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.080779][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.080839][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 668.081114][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.081267][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.081494][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 668.081691][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.089965][ C1] net_ratelimit: 18295 callbacks suppressed [ 673.089992][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.090007][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 673.090302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.090451][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.090602][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.090902][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.090923][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.091209][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 673.091387][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 673.091530][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 678.099889][ C1] net_ratelimit: 18588 callbacks suppressed [ 678.099916][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.099970][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.100257][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.100409][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.100592][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.100818][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.100931][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.101257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 678.101263][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 678.101600][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.110026][ C0] net_ratelimit: 18771 callbacks suppressed [ 683.110053][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.110571][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.111044][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 683.111510][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.111972][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.112459][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.112733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.112893][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.113043][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 683.113344][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.119865][ C1] net_ratelimit: 18976 callbacks suppressed [ 688.119891][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.120197][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.120515][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.120921][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.121224][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.121524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.121841][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.122144][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 688.122327][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 688.122443][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.132122][ C0] net_ratelimit: 17169 callbacks suppressed [ 693.132149][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.132524][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.132565][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 693.132855][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.133047][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 693.133162][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.133464][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.133470][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.133783][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 693.133894][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.140078][ C0] net_ratelimit: 15418 callbacks suppressed [ 698.140105][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.140165][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.140514][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.140599][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.141098][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 698.141981][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 698.142418][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.142750][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.143082][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 698.143447][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.150179][ C1] net_ratelimit: 14985 callbacks suppressed [ 703.150207][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 703.150631][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.150971][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.151293][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.151618][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.151893][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 703.151952][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.152315][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 703.152321][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 703.152745][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 708.161512][ C0] net_ratelimit: 15387 callbacks suppressed [ 708.161540][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.161971][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 708.162442][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 708.162855][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.163291][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.163722][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:a2:1c:43:75:72:e9, vlan:0) [ 708.163836][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.164151][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.164187][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.164581][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 708.190080][ T33] INFO: task kworker/0:5:5763 blocked for more than 151 seconds. [ 708.190110][ T33] Not tainted syzkaller #0 [ 708.190124][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.190136][ T33] task:kworker/0:5 state:D stack:24008 pid:5763 tgid:5763 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 708.190201][ T33] Workqueue: events switchdev_deferred_process_work [ 708.190321][ T33] Call Trace: [ 708.190330][ T33] [ 708.190348][ T33] __schedule+0x17db/0x58f0 [ 708.190379][ T33] ? update_protect_slice+0x128/0x210 [ 708.190422][ T33] ? do_raw_spin_unlock+0xf5/0x200 [ 708.190465][ T33] ? __pfx___schedule+0x10/0x10 [ 708.190502][ T33] ? schedule+0x90/0x2b0 [ 708.190532][ T33] schedule+0x164/0x2b0 [ 708.190559][ T33] schedule_preempt_disabled+0x13/0x30 [ 708.190585][ T33] __mutex_lock+0x7c1/0x1550 [ 708.190620][ T33] ? __mutex_lock+0x5d4/0x1550 [ 708.190653][ T33] ? switchdev_deferred_process_work+0xe/0x20 [ 708.190686][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 708.190715][ T33] ? lock_acquire+0x115/0x350 [ 708.190752][ T33] ? rcu_is_watching+0x16/0xb0 [ 708.190785][ T33] ? process_scheduled_works+0x97a/0x1630 [ 708.190818][ T33] switchdev_deferred_process_work+0xe/0x20 [ 708.190846][ T33] process_scheduled_works+0xc3d/0x1630 [ 708.190914][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 708.190955][ T33] ? assign_work+0x3cf/0x5d0 [ 708.190993][ T33] worker_thread+0xa47/0xfb0 [ 708.191042][ T33] ? __kthread_parkme+0x71/0x1f0 [ 708.191097][ T33] kthread+0x38b/0x480 [ 708.191121][ T33] ? __pfx_worker_thread+0x10/0x10 [ 708.191152][ T33] ? __pfx_kthread+0x10/0x10 [ 708.191178][ T33] ret_from_fork+0x514/0xb70 [ 708.191206][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 708.191230][ T33] ? __switch_to+0xc89/0x1420 [ 708.191268][ T33] ? __pfx_kthread+0x10/0x10 [ 708.191294][ T33] ret_from_fork_asm+0x1a/0x30 [ 708.191336][ T33] [ 708.191350][ T33] INFO: task kworker/u8:14:6446 blocked for more than 151 seconds. [ 708.191368][ T33] Not tainted syzkaller #0 [ 708.191380][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.191391][ T33] task:kworker/u8:14 state:D stack:21736 pid:6446 tgid:6446 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 708.191454][ T33] Workqueue: ipv6_addrconf addrconf_dad_work [ 708.191558][ T33] Call Trace: [ 708.191566][ T33] [ 708.191581][ T33] __schedule+0x17db/0x58f0 [ 708.191642][ T33] ? __pfx___schedule+0x10/0x10 [ 708.191678][ T33] ? schedule+0x90/0x2b0 [ 708.191708][ T33] schedule+0x164/0x2b0 [ 708.191736][ T33] schedule_preempt_disabled+0x13/0x30 [ 708.191761][ T33] __mutex_lock+0x7c1/0x1550 [ 708.191796][ T33] ? __mutex_lock+0x5d4/0x1550 [ 708.191829][ T33] ? addrconf_dad_work+0x116/0x15c0 [ 708.191868][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 708.191920][ T33] addrconf_dad_work+0x116/0x15c0 [ 708.191968][ T33] ? __pfx_addrconf_dad_work+0x10/0x10 [ 708.192014][ T33] ? rcu_is_watching+0x16/0xb0 [ 708.192047][ T33] ? process_scheduled_works+0x97a/0x1630 [ 708.192090][ T33] process_scheduled_works+0xc3d/0x1630 [ 708.192158][ T33] ? __pfx_process_scheduled_works+0x10/0x10 [ 708.192199][ T33] ? assign_work+0x3cf/0x5d0 [ 708.192237][ T33] worker_thread+0xa47/0xfb0 [ 708.192288][ T33] ? __kthread_parkme+0x71/0x1f0 [ 708.192334][ T33] kthread+0x38b/0x480 [ 708.192359][ T33] ? __pfx_worker_thread+0x10/0x10 [ 708.192390][ T33] ? __pfx_kthread+0x10/0x10 [ 708.192416][ T33] ret_from_fork+0x514/0xb70 [ 708.192443][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 708.192467][ T33] ? __switch_to+0xc89/0x1420 [ 708.192504][ T33] ? __pfx_kthread+0x10/0x10 [ 708.192530][ T33] ret_from_fork_asm+0x1a/0x30 [ 708.192573][ T33] [ 708.192617][ T33] INFO: task syz.4.4384:19541 blocked for more than 151 seconds. [ 708.192635][ T33] Not tainted syzkaller #0 [ 708.192647][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.192659][ T33] task:syz.4.4384 state:D stack:27808 pid:19541 tgid:19528 ppid:5623 task_flags:0x400040 flags:0x00080002 [ 708.192726][ T33] Call Trace: [ 708.192734][ T33] [ 708.192749][ T33] __schedule+0x17db/0x58f0 [ 708.192835][ T33] ? __pfx___schedule+0x10/0x10 [ 708.192872][ T33] ? schedule+0x90/0x2b0 [ 708.192901][ T33] schedule+0x164/0x2b0 [ 708.192929][ T33] schedule_preempt_disabled+0x13/0x30 [ 708.192954][ T33] __mutex_lock+0x7c1/0x1550 [ 708.192989][ T33] ? __mutex_lock+0x5d4/0x1550 [ 708.193022][ T33] ? genl_rcv_msg+0x10b/0x7a0 [ 708.193070][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 708.193096][ T33] ? __dev_queue_xmit+0x29b/0x3920 [ 708.193185][ T33] ? radix_tree_lookup+0x240/0x290 [ 708.193240][ T33] genl_rcv_msg+0x10b/0x7a0 [ 708.193284][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.193341][ T33] netlink_rcv_skb+0x226/0x4a0 [ 708.193371][ T33] ? __pfx_genl_rcv_msg+0x10/0x10 [ 708.193410][ T33] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 708.193458][ T33] ? down_read+0x2be/0x330 [ 708.193492][ T33] genl_rcv+0x28/0x40 [ 708.193526][ T33] netlink_unicast+0x8ef/0xa80 [ 708.193574][ T33] netlink_sendmsg+0x813/0xb40 [ 708.193616][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.193657][ T33] ? apparmor_socket_sendmsg+0x98/0x360 [ 708.193694][ T33] ? __pfx_netlink_sendmsg+0x10/0x10 [ 708.193723][ T33] sock_sendmsg_nosec+0x13a/0x180 [ 708.193761][ T33] __sys_sendto+0x408/0x5a0 [ 708.193791][ T33] ? __pfx___sys_sendto+0x10/0x10 [ 708.193811][ T33] ? errseq_sample+0x40/0x70 [ 708.193862][ T33] ? fd_install+0x94/0x3d0 [ 708.193896][ T33] ? fd_install+0x309/0x3d0 [ 708.193940][ T33] __x64_sys_sendto+0xde/0x100 [ 708.193968][ T33] do_syscall_64+0x166/0x520 [ 708.193995][ T33] ? trace_irq_disable+0x3b/0x140 [ 708.194021][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.194045][ T33] ? clear_bhb_loop+0x70/0xc0 [ 708.194082][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.194106][ T33] RIP: 0033:0x7f2b23d5fd8e [ 708.194128][ T33] RSP: 002b:00007f2b24c24e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 708.194172][ T33] RAX: ffffffffffffffda RBX: 00007f2b24c266c0 RCX: 00007f2b23d5fd8e [ 708.194190][ T33] RDX: 0000000000000020 RSI: 00007f2b24c25000 RDI: 000000000000000a [ 708.194206][ T33] RBP: 0000000000000000 R08: 00007f2b24c24f04 R09: 000000000000000c [ 708.194221][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 708.194236][ T33] R13: 00007f2b24c24f58 R14: 00007f2b24c25000 R15: 0000000000000000 [ 708.194275][ T33] [ 708.194285][ T33] INFO: task syz.4.4384:19542 blocked for more than 151 seconds. [ 708.194302][ T33] Not tainted syzkaller #0 [ 708.194314][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 708.194325][ T33] task:syz.4.4384 state:D stack:28808 pid:19542 tgid:19528 ppid:5623 task_flags:0x400040 flags:0x00080002 [ 708.194392][ T33] Call Trace: [ 708.194401][ T33] [ 708.194416][ T33] __schedule+0x17db/0x58f0 [ 708.194475][ T33] ? __pfx___schedule+0x10/0x10 [ 708.194511][ T33] ? schedule+0x90/0x2b0 [ 708.194540][ T33] schedule+0x164/0x2b0 [ 708.194569][ T33] schedule_preempt_disabled+0x13/0x30 [ 708.194595][ T33] __mutex_lock+0x7c1/0x1550 [ 708.194629][ T33] ? __mutex_lock+0x5d4/0x1550 [ 708.194662][ T33] ? br_ioctl_stub+0x1a8/0xd60 [ 708.194822][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 708.194860][ T33] ? __mutex_trylock_common+0x15f/0x270 [ 708.194906][ T33] br_ioctl_stub+0x1a8/0xd60 [ 708.194937][ T33] ? trace_contention_end+0x3d/0x140 [ 708.194972][ T33] ? __mutex_lock+0x30b/0x1550 [ 708.195001][ T33] ? __pfx_br_ioctl_stub+0x10/0x10 [ 708.195034][ T33] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 708.195075][ T33] ? put_user_ifreq+0x7a/0xc0 [ 708.195102][ T33] ? sock_ioctl+0x4b8/0x7e0 [ 708.195137][ T33] ? hook_file_ioctl+0x1f2/0x600 [ 708.195220][ T33] ? __pfx_br_ioctl_stub+0x10/0x10