last executing test programs: 35.193679457s ago: executing program 2 (id=16893): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_mtu=0x6}) r1 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r1, 0x0, 0x0, 0x2000a080, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) (async) recvfrom(r1, 0x0, 0x0, 0x12041, 0x0, 0x0) (async, rerun: 32) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) (async, rerun: 32) r2 = accept4(r1, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000240)=0x80, 0x800) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}]}, &(0x7f00000002c0)=0x10) (async, rerun: 32) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) (rerun: 32) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r5, 0x7fff, 0x30, 0x1, 0x5}, &(0x7f00000000c0)=0x18) (async) setsockopt$inet_sctp_SCTP_AUTH_KEY(r2, 0x84, 0x17, &(0x7f0000000280)={r5, 0xb68, 0x53, "9553204dd87f8159da94a04fa320e09fa3e58718401c20159e7433d80c8b086c46083eb4ac3e6d5fad8cc08cd5684987776865bc8a0514537e60fc256e8e34078d73b6624b3089f6a326d739d30e6e7dc54f24"}, 0x5b) (async) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000100)={@l2tp6={0xa, 0x0, 0x1, @loopback, 0xf, 0x1}, {&(0x7f0000000040)=""/113, 0x71}, &(0x7f00000000c0), 0x31}, 0xa0) (async, rerun: 64) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) (rerun: 64) 34.109708753s ago: executing program 2 (id=16899): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000000000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a6b304c"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000080ff0000000000000a0000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000100000000000000000000000000000500000000000000fbfffffffffffffede00000000000000000000000000400000000000000000020000000000000080026b09"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 33.799635665s ago: executing program 2 (id=16903): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000010000001500070000000000bf0600fffd000000bf6100000000000007010000043f0000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 33.428539618s ago: executing program 2 (id=16905): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000580)='GPL\x00\xe3\xd6\xd6J\x8c\x80\xa7\xa1%l\x90\xb8\xf7\xb7\x00\xb3\xc9\xb4C}\\\x89\xd2\xf7\x1c\xcb\x9c8\x19\xce1\x16\x90_j+wQ\xae\x1d\xb4i\xeb\x98\x98(9\xf8\xcc\xa3D>`\xd4^\xb65{\xd8\vo\b\x03\xa8\n\xe9\xc7\x10\x97\xed\xd9\xbdS\n\xf9\xc1\x0f\xc5r\xd15\xe1\x99\xc9\xcf\xefC\x18\'v!\xca\xc9&#\xef\xc1\x85\xc5\x11\xe2RZ\x9a\xc6\xb8[\x7f\xed\xfc\xa0\xe04\xa4\xec\xfe]<\xaacs9\xd7sf\\\x05g\xd2W\x12o\xf7\xcdX\x8e\x1e\x17\n\xb4iF3\xab\x10\xa2hFj\x91\x95', 0x0, &(0x7f0000000000)={@align=0x80, {0x85cd, 0x6, 0xfffffffa, 0x8000000000000000}}, 0xe, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffffffc}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x27, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc916184}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x5, 0xa, 0xfffffffffffffffc, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @map_fd, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0xd0, &(0x7f0000000380)=""/208, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911172000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000100)={r0, &(0x7f0000000580)='GPL\x00\xe3\xd6\xd6J\x8c\x80\xa7\xa1%l\x90\xb8\xf7\xb7\x00\xb3\xc9\xb4C}\\\x89\xd2\xf7\x1c\xcb\x9c8\x19\xce1\x16\x90_j+wQ\xae\x1d\xb4i\xeb\x98\x98(9\xf8\xcc\xa3D>`\xd4^\xb65{\xd8\vo\b\x03\xa8\n\xe9\xc7\x10\x97\xed\xd9\xbdS\n\xf9\xc1\x0f\xc5r\xd15\xe1\x99\xc9\xcf\xefC\x18\'v!\xca\xc9&#\xef\xc1\x85\xc5\x11\xe2RZ\x9a\xc6\xb8[\x7f\xed\xfc\xa0\xe04\xa4\xec\xfe]<\xaacs9\xd7sf\\\x05g\xd2W\x12o\xf7\xcdX\x8e\x1e\x17\n\xb4iF3\xab\x10\xa2hFj\x91\x95', 0x0, &(0x7f0000000000)={@align=0x80, {0x85cd, 0x6, 0xfffffffa, 0x8000000000000000}}, 0xe, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0xfffffffc}) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1}, 0x8) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x4, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x27, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xc916184}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @jmp={0x5, 0x0, 0x6, 0x5, 0xa, 0xfffffffffffffffc, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @map_fd, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xb}]}, &(0x7f0000000340)='GPL\x00', 0x1, 0xd0, &(0x7f0000000380)=""/208, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x6, 0x5}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000911172000000000095"], &(0x7f0000000c40)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8}, 0x94) (async) 33.066849045s ago: executing program 2 (id=16906): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x402c3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001300310327bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="024703000160040014000300766c6155f000000000000000000000000800040009000000"], 0x3c}}, 0x20040850) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r2, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) close(0x3) (async) r4 = socket(0x2, 0x80805, 0x0) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) close(0x3) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r4, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt(r3, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000000)={r6, 0x5f3f}, &(0x7f0000000080)=0x8) recvfrom$inet(r2, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x100000, @rand_addr=' \x01\x00'}]}, &(0x7f0000000180)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) (async) socketpair(0x29, 0x1, 0x3, &(0x7f0000000240)) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 32.070165992s ago: executing program 2 (id=16915): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket(0x25, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003200)={'syztnl2\x00', &(0x7f0000001200)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x7, 0xfffffffc, 0x0, @local, @empty, 0x700, 0x40}}) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000010c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @private2, 0x2}}}, &(0x7f0000000000)=0x84) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x9b) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002600080022bd7008f99e98ff02e9ff0a08003e800427fecf822eb49094d80000"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r4, 0xbabc) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) r5 = socket(0x27, 0x6, 0x4) getsockopt$bt_hci(r5, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x1000) (async) syz_genetlink_get_family_id$nl80211(0x0, r7) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002900)=r9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) (async) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 64) recvmsg(r11, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001000)=""/102, 0x66}, {0x0}], 0x2}, 0x30120) (rerun: 64) 29.987799699s ago: executing program 1 (id=16930): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000000660800000000000018000000000000000c000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0xd8, &(0x7f00000001c0)=""/216, 0x41100, 0x8}, 0x94) 29.89127076s ago: executing program 1 (id=16932): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0xa, 0x300) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0}, &(0x7f0000000400)=0x14) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000d, 0x12, r2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x90, 0xaf32, 0xf44, 0x0, 0x1, 0x6, '\x00', r1, r2, 0x0, 0x3, 0x2, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000ff8085000000040000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$netlink(0x10, 0x3, 0xc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x19, &(0x7f0000000340)={0x0, 0x5}, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01040000000000000000020000000900010073797a300000000048000000030a01040000000000000000020000000900010073797a30000000000900030073797a30000000001400048008000140000000030800024000000000080005400000000198000000060a01040000000000000000020000000900010073797a30000000000900020073797a30000000006c000480680001800a0001006d61746368000000580002800e000100686173686c696d697400000008000240000000013c0003006c6f00000000000000000000000000002000000010"], 0x128}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000003000000b7040000020000008500000033000000850000000700000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000180)=r6}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r6, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000001800dd8d25bd7000000000000200000000000006000000000600150004000000140016801000088055"], 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) recvmmsg(r7, &(0x7f0000004ec0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2000, 0x0) 29.50973624s ago: executing program 0 (id=16934): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r1, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x14}, 0x60) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, "d92984bd1ca44c226af5160e961711a077b88375b78411e88509de05000000020010000080000000000000000aabeb00", 0x3c}, 0x60) bind$nfc_llcp(r0, &(0x7f0000000280)={0x27, 0x0, 0x1, 0x5, 0x0, 0x6, "23ba4cb148e27a62778ab6e2ad47e2f096dbae5488d838161da26752700a993a9898b753acbbe03034a8e6487bac34f3e95e88aaaafc3788337701a4cd90bb", 0x21}, 0x60) 29.284618238s ago: executing program 0 (id=16935): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$BTRFS_IOC_ENCODED_READ(r1, 0x80809440, &(0x7f0000000300)={&(0x7f0000000180)=[{&(0x7f00000000c0)="8ae9e54112c3be31cc939f436fc37e432aac0ee97521e302341e77feef8c6923447106932c63b79483e20b16a9c054acff14a8ae0688a80b0b4c74f107317930310734923ae9c6166b898cb1997fc96066f9de9df895a76eefdb3f1d0b4d9f0dbabcf6652d8aae62d92ded773cb704e72f9db3b71d0d631d7c9e0126d8", 0x7d}, {&(0x7f0000000140)="2232104c2f95056b590199", 0xb}], 0x2, 0x3, 0x0, 0x8, 0x3, 0xfffffffffffffff8, 0x4}) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000000200), 0x4) getsockname(r1, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@fallback, 0xffffffffffffffff, 0x3b, 0x20}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a54000000060a010400000000000000000a0000010900010073797a310000000028000480240001800c0001007061796c6f61640014000280080003400000004f08000240000000020900020073797a320008000014000000010000000000000000000200000a0000"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) 29.041856203s ago: executing program 0 (id=16937): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000700000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.956065759s ago: executing program 3 (id=16938): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x1f0}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) 28.867249021s ago: executing program 1 (id=16939): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x140, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/238, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f0164000000050053"], 0x54}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x6c, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x23}}}}, [@NL80211_ATTR_SSID={0x10, 0x34, @random="1da4ae5d757ccbc4ab4734c7"}, @NL80211_ATTR_HE_BSS_COLOR={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x157c}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]]}, 0x6c}, 0x1, 0x0, 0x0, 0x40000}, 0x8080) 28.866977886s ago: executing program 4 (id=16940): socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) (async) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000340)=0x6, 0x4) (async) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000000080000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x24}}, 0x0) socket(0x1e, 0x6, 0x1) 28.846016398s ago: executing program 0 (id=16941): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000004000000080000000a"], 0x48) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000e00000001000000000000010400000020000001000000000000000d01000000050000000000000c020000000a0000000000000c0200000000696e74006d61696e0073"], 0x0, 0x5a}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f0000000608)="0900000004", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x5, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="000000000000000018420000060000000000000000000000b703000000000000b7040000000000098500000008000000b7000000000000009500000000000000b7000000000000009500000000000000"], &(0x7f0000000500)='GPL\x00', 0x1, 0x100000, &(0x7f0000000700)=""/1048576, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000600)={0x0, 0x3}, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) 28.806348753s ago: executing program 3 (id=16942): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0x100, 0x1d0, 0xffffffff, 0xffffffff, 0x100, 0x1d0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0xff0}, {[0x0, 0x3f3], 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x3d0) (async) r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$AUTOFS_IOC_EXPIRE(r0, 0x810c9365, &(0x7f0000000000)={{0x6, 0x1}, 0x100, './file0\x00'}) (async) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000012c0)={0x2, &(0x7f0000000fc0)=[{}, {}]}) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000540)={{0xffffffffffffffff, &(0x7f0000000400)='frag\x00', 0x900, &(0x7f0000000440)={@align=0xfffffffffffffff8, {0xfff7, 0x8, 0x2, 0x4}}, 0x4, &(0x7f0000000480)={@_ha_fsid}, &(0x7f00000004c0)=0x4}, {[0x1, 0x2, 0x9, 0xf]}, 0x6, 0xc, &(0x7f0000000500)=""/12}) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$kcm(r1, &(0x7f00000021c0)={&(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x2, 0x3, 0x1, {0xa, 0x4e23, 0x1000, @mcast1, 0x8}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000640)="33a2ce2bf14828e8844afdfd2fe59d14a928b446204fb2700f17068eb3593a9e4f52cb36b77e38c6e3f51be3033af9d097a8b34ba904f1480ebdc2287218ddaa5e8ac41f34a8babd50eb4044a352a0a81f04c2c268a9e0c223bc5010675662d053511570eef32891f44cb696d3783c3f657344397deee820a15d607e8b8be4", 0x7f}, {&(0x7f00000006c0)="3bbe373fc124cdeae64f4bf36d69f1bd031e2f4c2a08dad1399df5431608b53849835eb0396c3f86f5243dafbf872f4de3c3822099851faa013d8ecc183cff3e5cde15992d84ac8d0cb9f02a71d299effa5a246b4b64fe35c7cd835554a2310d2904a2eeecb00e03751e4873dde2ee8af914c2a39ce1b488c24f205ce6a5db7a1ba51b976c461e10cfdf9dd7e974136ebcf6f7d7dc9646fa1701b15307fc772ad88e7677911e397cfa6099761990750b87145a160ef65ea910081e199dc47f2bdfeb24", 0xc3}, {&(0x7f0000000c80)="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", 0x1000}, {&(0x7f0000001c80)="c7afbb26201a62a940e036186379b1c889dc771dd51ebdc65eb6ed8ba73e5e1613f98b5acd8dbe515d9d533ccc52d5e05b29a4f4bcb35653b7856e04c9946d369a8761cb770d879a5331d9e58f766950a8b81820b4610bd3b7a3b63f178beb16b49ead22d12815c9e64b15d750a50e6a6618bce6cce455638b54f21a24e01a3e9f5efa98e99a39835c5d7ea694f13e18e5a93b0ea14693314c192db1854bbfb27bf4041c393087b955b20f10a0fdc01c32e7a11b98c99a2d2814ec889ad202c102afa56c7d4c8d24c8fc941503df5baf50f4ec73c8d8c7db5d871d8d53439b8107de611b", 0xe4}, {&(0x7f0000001d80)="90965b421671042f1e74ce44f548533aee7c169ff2253d2df515654cb962e4dd58d0134f5a71591ecf306e07b5504036cdb4a4b4256b6a3078692c168b01dd96ab3f4af7701daef310cdaf24b88d2d9ca9b9cd1d979ba02a574100a36b02e638b05304a28ef1b2b14d1b87c97d620f14123c45188f92ff7a8feb9fb711f466a634bb380cbaf26763710eab7c2ed12b5310d796571dcfe72bc336569f952682c17ba4db4fd1144d4b1bdbf8a1ccadb02ca6a0502473ad36d175d9c7be687da8df68902dc174de9d37c6db3f7b2cedd0ad3d3c", 0xd2}, {&(0x7f0000001e80)="f2c3ae90c99d48bd8fe73e9170cad495a76bdeee5e20a061eb0b4eb2c431e683818ade907959e82abe2e9268d89a95f1d70cd75e1bd2aa43308999895192f90e", 0x40}], 0x6, &(0x7f0000001f40)=[{0x80, 0x108, 0x0, "14ec4ebf2d8a0c0d24136b44002cb0bc61bb84221cd816e03dd2c5c7f62f894de2379bf05e0deee56ea7e77e912f6066df48bc14cfda3d970dc63aa374a1a3011e19dcfea116fae3bb7af28354a6e1bca75973b83e9778fcd7aee997c4b854f2725e7c0944c8046b62bc8c2fb22d04ea"}, {0x18, 0x108, 0x5, "49bb907cb1ad"}, {0x60, 0x102, 0x5, "5b497dd5780013e018668184e6a33dc318d9344a7fd77a35b3e916867a2ef1e873c9897c970c476cd9ffc9b3eb6588624d54039a9388520437e5012d15a8858415a2e44ac9e562e4f876"}, {0xa0, 0x116, 0x6, "ab1042d87b74bfa2c33ab5688971515fdf82054c1b3d96be53521feee473b842ee3b61a3990bce4089c79313479ca1e9809a5c9d8620c1ee8dbbb29191b7d224f5ad5176bf647dcc290accb19a9e8ed18c116b6f8adf8cdf15cd4689d3d45022c5bca8f5b9c044ee4f0bdb020e8edd631eb9a0103e1a2b962b5f2f74dcd761ad76f50c01cacdd70ec7e7038cfe2a"}, {0xd0, 0x0, 0x2, "313182eebe69c55d6c4fe118e162ed604b268f5293775839367ecbc26dc49afd0a878f464d41812e297da3a1d1cb18cf9f6e6cba2628ed4686c5f009c8b364a67219e503dcda70bd37cf18015f40633ac197e1b63478a8137229e070d31f11c4636b471baa976360efa53534f845c1dd8577ee25663928cb2efb35b585b146347b8bf91de63250baf00c43792ab8745d9992ce4bdcb521f57f1b22a1955dba5e0a261051a22edb32594a6ff244f2ffb04cad5c147c9c0684e92793d4"}], 0x268}, 0x40) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0016000500142603600e1208000f", 0x2b}], 0x1}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="30000000410007012bbd700000000000047c00000400c2800c0001800600060086dd00000c000780"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000080000000000000008000000911125000000000095"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.615114341s ago: executing program 4 (id=16943): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095004100000000006916590000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf650000000000000f65d0ffffff00006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ff3d4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf664e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b369289aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe01c5473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076ebae3f55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932c9a6aa57f1ad2e99e0e67ab93716d20000009fbb0f53acbb40b4f8e2739670b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc401000000cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000f4000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386ba3b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be19637302f3b41eae50509fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b30410856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff010404faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202ee1192b81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9b5a8ded5de8206c812439ab129ae818837ee1562078fc524a3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8b0100010000000000abc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f44fc00b69151d681a2f71373f20d92c9048407c91fabecfe8b3f2d545ffffffff00000000a1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf857689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18533d4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684ee54c0a263c806aabac2f66cb052f847c62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961ef4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fc0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bb000000000000000000000000000000884efcecca45ea4ab2ec097668456a6ff12854997f5aed737d5205ace5c0b64f87ef10784d0479cb44ca077e0c4ce6ff880e2ce3de63853a9740e9233683bfc8636bee293aeeb680b399a296e6f44c07b5fc5d9d359af007f23004a7acb6df23664ea209620b4fe0f4df81c33bd8ca2335cb4b50881937379b45a301175c3e8eb32970564ec8e25c46ee3bae079faedaad94276cfa251be8256c4c37fc84a299fa176018054e9149a1c9d20a809ce3000000000000000000000000f6fad8476470bf4bb79d2ba2c0f7147577466f4229b364d6900ad22583c0ec630ea0c6177ad88014b074d88fea473d5ef91ed786bbd3371f0dfcc5ccf4aa82927192aa94fe70a261f1899e1f2f62d50b027f7e7cac8fe3691aa323e71d5e479d466512d1df57633a9006016322978a795431c745f0502e37b8884c368a3f9d5c05a7fb5bd25d95442d09f79c5bd656dccb450cb19c6df406ffcfc414334021df3e4654f84f10070846d3b06795445f79b1f0"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 28.614709763s ago: executing program 1 (id=16944): sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x279}], 0x1, 0x0, 0x6b}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80805, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010001d0025bd7000fadbdf2500000000", @ANYRES32=r2, @ANYBLOB="138000002b9201002400128009000100626f6e6400000000140002800800", @ANYRES16=r0], 0x44}, 0x1, 0x0, 0x0, 0x40448e0}, 0x0) 28.614094016s ago: executing program 3 (id=16945): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcffffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000085000000200000001500070000000000bf06000000000000bf6100000000000007010000043f0000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.525909392s ago: executing program 0 (id=16946): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x4dcc43, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)=ANY=[@ANYBLOB="1900000013000500000000100000000000000000", @ANYRES32=0x0, @ANYBLOB='p'], 0x20}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000870000008500000007000000"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r4, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r5, 0x84, 0x7d, &(0x7f0000000840)=""/4127, &(0x7f0000000000)=0x101f) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={0x0, 0xc4}}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) accept4(r7, 0x0, 0x0, 0x800) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000600)=@bpf_lsm={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000061100400000000006200000000000000950000000000f6006968c858b7f0545c1e97331a"], &(0x7f0000000540)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r1) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000002c0)=0x14) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYRES16=0x0], 0x8) 28.404410443s ago: executing program 4 (id=16947): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x180800) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$inet(r1, &(0x7f0000000140)={0x2, 0x0, @dev}, &(0x7f0000000180)=0x10) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000030000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) socket$kcm(0x29, 0x2, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f00006dbffc), 0x4) bind$inet(r4, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x390}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a", 0x29}, {&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}], 0x3, 0x0, 0x0, 0x40088c5}, 0x0) close(0x3) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 28.343386857s ago: executing program 3 (id=16948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xffffffed}, {0xffffffffffffff58, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_ENCAP_FLAGS={0x6}]}}}]}, 0x48}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x5, &(0x7f0000000580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x3, 0x4, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)=@deltaction={0x17c, 0x31, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x8, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0xc, 0x1b, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xa552}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}]}, @TCA_ACT_TAB={0x5c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x18, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @TCA_ACT_TAB={0x70, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd}}, {0x14, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x44010}, 0x41) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002f000903feff00000000000006"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x1c, 0x2f, 0x9, 0x70bd27, 0x25dfdbfd, {0x4}, [@typed={0x7, 0xb, 0x0, 0x0, @str='\x05\x00\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x20040004) recvmsg(r3, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x2000) r5 = socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008804}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r9 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, 0x0, 0x0) r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000480)='ns/mnt\x00') sendmsg$RDMA_NLDEV_CMD_SYS_SET(r7, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, 0x1407, 0x1, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_DIM={0x5, 0x54, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r8}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r9}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r10}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x800) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x3d0, 0xffffffff, 0x250, 0x1b8, 0x250, 0xffffffff, 0xffffffff, 0x338, 0x338, 0x338, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @multicast2, 0x0, 0x0, 'geneve0\x00', 'wlan0\x00', {}, {}, 0x11}, 0x0, 0x190, 0x1b8, 0x0, {0x100000000000000}, [@common=@inet=@recent0={{0xf8}, {0xd06, 0x2, 0x2, 0x0, 'syz0\x00', 0x4}}, @common=@unspec=@cgroup0={{0x28}, {0x7, 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth1_virt_wifi\x00', '\x00', {}, {}, 0xff}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@addrtype={{0x30}, {0x6b7, 0x500, 0x1}}, @common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8004090) socket$inet6_icmp(0xa, 0x2, 0x3a) 28.223809163s ago: executing program 1 (id=16949): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r1, @ANYBLOB="fcfe00000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf610000000000000701000004000000850000005e000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 28.050059505s ago: executing program 4 (id=16950): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000080)={0xc, 0x24, 0x2, 0x0, 0xd, 0x2, 0x4, 0x0, 0x0, 0x5, 0x40}, 0xb) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f00000001c0)={r2, 0x400}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000340)={0xfffbfffc, 0x2000000, 0x5, 0x6}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000120001fbffffff000200000007"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) 27.947423238s ago: executing program 1 (id=16951): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0xfffffffa}, @IFLA_GTP_RESTART_COUNT={0x5, 0x6, 0x1}]}}}]}, 0x40}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x304, 0x3a}, "56db7a2700f91000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_MASTER={0x8, 0xa, r3}]}, 0x28}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) 27.947150743s ago: executing program 3 (id=16952): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRESHEX=r0], 0x1f0}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) 27.850593233s ago: executing program 4 (id=16953): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, @in={0x2, 0x0, @private=0xc0586300}, @in6={0xa, 0x0, 0x0, @private0}, @in={0x2, 0x4e20, @broadcast}], 0x58) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140)=0x2, 0x4) 27.760090209s ago: executing program 3 (id=16954): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @remote, 0xff, 0xff000000, 'veth1_to_hsr\x00', 'dvmrp1\x00', {}, {}, 0xff, 0x3, 0x30}, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x1, 0x1e04, 0x0, 0x3, 0x4], 0x1, 0x2}, {0xffffffffffffffff, [0x7, 0xb2cc575b459b5b36, 0x4, 0x1], 0x6, 0x7}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0xffffffff, 'sit0\x00', 'vlan1\x00', {0xff}, {0xff}, 0x1, 0x0, 0x40}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x87c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x5, 0x0, 0x2, 0x3ff, 0xd, 0xffffff81, 0xc0, 0x1, 0x2fa, 0x6, 0x4, 0x2, 0x8, 0x1ff, 0x1a7, 0xce, 0x6, 0x4, 0x7, 0x1, 0x7, 0x0, 0x8, 0x8001, 0x8001, 0x2, 0x7, 0x3, 0x8, 0x1, 0x9, 0x10000, 0x0, 0x8, 0xa3, 0x0, 0x0, 0x1, 0x0, 0xd1c8, 0x88c9, 0x1000, 0x7, 0x800, 0x8007, 0xc76, 0xdd, 0x386, 0x101, 0x5, 0xfd, 0x21, 0x66b6, 0xd4, 0x9, 0x8, 0x932, 0x10000, 0x0, 0x7, 0x7, 0x401, 0x8, 0x7, 0x66c53844, 0xb7, 0x5, 0x9140, 0x7fffffff, 0x401, 0x7, 0x7, 0x8, 0x9, 0xfffffffe, 0x5, 0x63, 0x9, 0x4, 0xffffff6a, 0x4, 0x401, 0x2, 0x5, 0x800, 0x5, 0x10001, 0x7, 0x6, 0x3, 0x5, 0x81, 0x3b932d, 0x8000, 0x4, 0x44c0, 0x8001, 0x5, 0x8, 0xa2e, 0xd, 0x3c8b, 0x3, 0x8001, 0x2, 0x40, 0x0, 0x0, 0x2, 0x101, 0x3ff, 0x2, 0x6, 0x7f, 0x37d8, 0x8, 0xd, 0x8, 0x3, 0x4, 0x40, 0x1, 0x22af662d, 0x7, 0x5, 0x387, 0x400, 0x81, 0x0, 0xffff, 0xa5e, 0x7ff, 0x8, 0x4, 0xf1, 0xffff, 0xa849, 0x2, 0x0, 0x400, 0x1ff, 0x6c, 0x0, 0x7b, 0x400, 0xd33c, 0x8, 0x56, 0x3, 0x800, 0x7, 0x6, 0x2, 0x4, 0x1, 0x1, 0x7, 0x7, 0x4, 0xaee, 0x5, 0x8, 0xef19, 0x7, 0x2, 0x7f, 0x5, 0x7, 0x800, 0xfff, 0x6, 0x4, 0x800, 0x800, 0x4, 0xffffffff, 0x4338, 0xb, 0x7, 0xea, 0x8, 0xffff33fd, 0x0, 0x8000, 0xa, 0x9, 0x0, 0x8, 0x30aa0000, 0x7, 0x6, 0x8, 0x60000000, 0x7f, 0x3, 0x5, 0x9, 0x5, 0xfffffffd, 0x4, 0x0, 0x9, 0xffffff91, 0x80000000, 0x1, 0x5, 0x51, 0x10, 0x7, 0x1, 0x9, 0xed, 0x1, 0xac39, 0xb, 0x6, 0x0, 0x2, 0x1, 0x0, 0x1, 0xc6, 0xfff, 0x3, 0x8, 0x400, 0x2, 0x0, 0x1, 0x5, 0xb, 0x73073418, 0x2, 0x9, 0x3, 0x4, 0x40, 0x18000000, 0xa, 0x5, 0x9, 0x0, 0x2, 0xf1, 0x0, 0x3, 0x1, 0x8000, 0x1, 0x9, 0x7fffffff, 0x7, 0x5, 0x1, 0xffff2581]}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xfffffffe, 0x9, 0x2, 0x73b5, 0x80000000, 0x400, 0x8, 0x8000, 0x4, 0x8, 0x100, 0x217, 0x1000, 0x99, 0x6, 0x6, 0x7, 0x0, 0x7, 0x5, 0x1, 0x3, 0x4, 0xc22, 0xf14, 0x8092, 0x7, 0x10004, 0x80, 0xec, 0xeff, 0x7, 0x3, 0x2, 0x0, 0x3, 0x2, 0x4, 0x0, 0xd010, 0xffffff0b, 0x2, 0x1, 0x400, 0x8, 0x1, 0x3, 0x228, 0x29, 0x80000001, 0x7000000, 0x1, 0xffff, 0x7, 0xf, 0xd, 0x9, 0x9, 0x7, 0x7, 0x10, 0x5, 0xe7b, 0x4, 0x3, 0x7, 0x6, 0x7, 0x5, 0x4, 0x100, 0x0, 0x3, 0x9, 0x5, 0x80000001, 0x10, 0x2, 0x9, 0x9, 0x7ff, 0x401, 0x8, 0x8, 0x99c2, 0x4, 0x7, 0x61, 0xa40a, 0xc, 0x5, 0x7fff, 0x100, 0x76, 0x9, 0xc, 0xf, 0x50, 0x0, 0xffffffff, 0x3, 0x1, 0x767c, 0x6, 0x8000, 0x8, 0xd, 0x6, 0xffffffc0, 0x7, 0x101, 0x8, 0x3, 0x7066211e, 0x2, 0x6, 0x5, 0x3, 0x5, 0x8, 0x400, 0x2a4, 0xd, 0x10001, 0xfffffffa, 0x6, 0x80000000, 0x3, 0x9, 0x8, 0x0, 0x40, 0x2, 0xfffff801, 0x6, 0x7, 0xcc0, 0xfffffff4, 0x8, 0x5, 0x9, 0x9, 0x1, 0x17, 0x1, 0x0, 0x400, 0x9, 0x5, 0x100, 0xffff8000, 0x2, 0x6, 0x10, 0x4, 0x80, 0xfff, 0x5, 0xfffffffb, 0x8, 0x4, 0x24, 0x3, 0x0, 0x3ff, 0x4, 0xdd5, 0x7fffffff, 0x10000000, 0x4fcf, 0x1, 0xe0000000, 0x3, 0x8, 0x6, 0x4, 0x2, 0x80, 0x4, 0x8, 0x81, 0x0, 0x6, 0x5, 0x8, 0xffffff3a, 0xfffffffb, 0x8, 0x80000, 0x0, 0x9, 0x8, 0x44ca0699, 0x6, 0x3b326896, 0x495, 0x52, 0x8, 0x3, 0x1, 0x101, 0x4, 0x5, 0x2, 0x6e, 0x5, 0x40, 0x7, 0x0, 0x4, 0xd, 0x0, 0x1, 0x3, 0x5, 0xe0ae, 0x10001, 0x7, 0x4, 0xa4, 0x7, 0xd, 0x7f, 0x864, 0xfa, 0x0, 0x81, 0x0, 0x9, 0x1, 0x0, 0x3, 0x3, 0x6, 0xd, 0x1, 0x42, 0x81, 0x4, 0x101, 0x8, 0x7, 0x4, 0x3, 0x7, 0xfff, 0xfffffff8, 0x30000, 0xf, 0x4, 0x2, 0x9, 0x8, 0x6, 0x90000000]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffd, 0xffffffffffffffff, 0x1, 0x9, 0xef, {0x2, 0x2, 0x1, 0x7ff, 0x84cc, 0x5}, {0x2, 0x1, 0x4, 0x5, 0x1, 0x6}, 0x100, 0x2, 0x7}}]}]}}]}, 0x87c}}, 0x0) write$tun(r3, &(0x7f00000002c0)={@val={0x0, 0x60}, @val={0x0, 0x0, 0xfffc, 0x1d, 0x465, 0xfdf5}, @mpls={[], @ipv6=@udp={0x1, 0x6, "b8089b", 0xc4, 0x11, 0x1, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, {[@srh={0x21, 0x6, 0x4, 0x3, 0x6f, 0x18, 0x0, [@dev={0xfe, 0x80, '\x00', 0x3c}, @ipv4={'\x00', '\xff\xff', @multicast1}, @mcast2]}, @routing={0x0, 0x4, 0x1, 0xb, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @empty]}], {0x4e23, 0x4e21, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x4, "ad13ca42030b4cd4c28ba333c11215e28a8689f853aa232a65ddbde1a4bbb4a7", "0bd67df985d4dcbd2671fdb82b76ca6e", {"511d00353ff87896f8c6cd33792ae4e7", "3032173d225343c4fb50026ce9a5f6f0"}}}}}}}, 0xfa) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000000040)={r7, 0x4}, 0x8) bind$nfc_llcp(r0, &(0x7f0000001040)={0x27, 0x0, 0xffffffffffffffff, 0x3, 0x0, 0xff, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x14}, 0x60) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x18, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000002d"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r10}, 0xc) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r11 = socket$kcm(0x23, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000140)={&(0x7f0000000340)=@rc={0x1f, @any, 0x9}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000180)="cd16f3ca0d", 0xfffffffffffffcec}, {&(0x7f00000001c0)="aa030fc4f54cf15f5f5952f2a0c9dd85a5a12eea18434174744a2a91fcf6bda0feafcbe08e440b385dcb547de32b5293175bfbe3a2bd90394bb3ccbf187085098714de9a9b76dbc55e72dca4570ea9fd9b1b0eaab647328093721a113372c9c24a67c9b5d3b5d84d606e6212387dd64fe4b7d98bf51a262317a1656cf5b6f660a0cc5953e13a182ec7290b43cc9b3a29d32fd27fa8525de617a91ca35e968bd693f384e8982b06248c29d8356b590cfb753e"}], 0x1, 0x0, 0x0, 0x100100}, 0x0) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r12, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000040)=0x4) 27.634939408s ago: executing program 0 (id=16955): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) (async) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) write(r0, 0x0, 0x7) r1 = socket(0xa, 0x4, 0x800080ff) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) (async) setsockopt$inet6_int(r1, 0x29, 0x4, 0x0, 0x0) r2 = accept(r1, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000140)=0x80) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000880)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x68, 0x68, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0xa}, @enum, @fwd={0xa}, @enum={0x0, 0x4, 0x0, 0x6, 0x4, [{0x9, 0x1}, {0x5, 0x401}, {0xa, 0xfffffff7}, {0x1, 0x10000}]}, @volatile={0xe, 0x0, 0x0, 0x9, 0x3}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}}, &(0x7f0000000f40)=""/4079, 0x82, 0xfef, 0x1, 0x410}, 0x28) setsockopt$inet6_udp_int(r2, 0x11, 0xcd, &(0x7f0000000180)=0x4, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000100039040200"/20, @ANYRES32=0x0, @ANYBLOB="40100000004104001800331fa4ba5903b62465000c000280080007000a0101000800040006400000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="40000000100039040200"/20, @ANYRES32=0x0, @ANYBLOB="40100000004104001800331fa4ba5903b62465000c000280080007000a0101000800040006400000"], 0x40}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 27.617190558s ago: executing program 4 (id=16956): openat$rfkill(0xffffffffffffff9c, &(0x7f00000002c0), 0x80080, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001d80), 0x80800, 0x0) r1 = epoll_create(0x41) r2 = socket$netlink(0x10, 0x3, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x28, 0x2d, 0x107, 0x70bd25, 0x25df5bfe, {0x20, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xdd}]}, @nested={0xc, 0x3, 0x0, 0x1, [@typed={0x5, 0x2, 0x0, 0x0, @binary="bb"}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000004}, 0xc010) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r6, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="68a30000", @ANYRES16=r4, @ANYBLOB="000128bd7000ffdbdf250e0000000c009900080000004a000000cb020e00802807000802110000010802110000005050505050508e00060000000000000005000000040606981000010406020e0005d9813a040052c954a27d694ef24b88e18e9ae8970e9e2a689251710dd3833fea0ebcff370b5c5dd93a4837a9e8d8ba8057858713061ba99ccd7333e80d7dc88ce2a655c279212c3ad7674514b331bf66ed7b9a2d19b9678244fd3e7abbd42e510a00112f774b9355fd11275c826ae6234eac167d4ec999242656de123d66666fd562cebe0dd5ffef6c04966d6c192c07a3cbbe24b5a18e6d5debb0d3a1557389bbe213dbab9bad3e4c8f4a0fc40bd3ac5af36aeab6be05e462e84de70b49c8bb5d403de5ec9f1d15a9613d045dc36681e37e0f7e23d5ad87fce43c04000606042d1a00100b08000000000000007f00080005000000060003000000067206030303030303dd8d4e1caab62795d1f7b5982e7ba3ccc91a8a5f5c6c8546c35c61bbfb6295c95790c15be0789bf464fe25cd40a1c84d29f5b4f2818bc55d7330b7b26738bac19bf376cdf57cc08b5b1cd3b219f849d57f144c6c2a9ba387fa2db03fd4b2e0b039e1dd84100d2b2b0cbf69c9f88070edd49fad7e8c29213bf4748b13a9429003f5cd4067ee4be4750b564ec27a557cddcc21a7ede9edef3dce61c167baab446f6298475cf440bc7215dba75b64c7a50c302a2b6d7c25927bdd6f14a90ca86981742e5f47b16e100d78f45e972a8655f231dad05c615482ffb08fc5956e9f0606a33803105bca239c5e05208d8133b5c3b0653c873a90ab1ae796196e7dfd1cc44137741ff99f1399c9c441f15d956337ff06e01b102dba0f109bed424a2a9abe21218ab225c027c42cab5306834323643f27d0f90be02e46d60bf8507f8cd709282dc04edf6400a5abda9f8a21b8124623067ce89e198eff8f05e12fe1dd33d5d6c68e56d67bef3f4163709318cd2cd40ff63d778f6f284b39259e27d27aeee6ce25c9207e1e4c1cd00e7d9065dfaf0b4b8e007c0391008b29e1c452aa87102f7dedd85af4d33ccedb93c14e0f2e864de9eb619ea822e87cfcceee8388200bd5c71abb7221c6ed331f7db9025cec5fe51e4c96d0f95a5f00a760e6e3953017c76f7977fee33cb4ec88fcef828516215cd8bde3c608bbf84d92521f65b142633fc71761daba8cb4d4d9be8d340ac38a858f4185fcdf4586f5a84bfa037524f3e32775862c1e57fbb6adda07bccf4836ba31b1ed711bc35d0e9122f0bc575974e8220c428b6efd0bb308c58a0cb04430b65ad4d596b41b98f7655748fa39953fb0331033ea85b428335dd3ae4f4606343332139d99d850fb3cc6055c705eee2fef6ed96cf36d4e1979c76774fb70a2d84fb08f7df24f04ce3746385200d225d8400bf213cb279f9b828472b64466f7f43aca2074d287a4121080bb44fb30edb2975a14176e5d12ece1fd6cbcc222359f98ffe855afe6add99775b080aed09c534e3102c1a227471dda5524a89f36b7d804b05c69b4cc45fe1ba733405fe51d5d7e50197a55dbe36253b25af82c96db6dd0bceda9ddb729a15ee181270fa93923d237fd519374d4a31d1f2ea0ed354ff44f447cf885ddad1c91244de10e5f074b4616fbd58acf20e3ea90c5d8b46dbc96fb22b3b75c730517793105e24e4de8b850aff9e76f5f785d8954fbba7ffa40755ac160ca43fa21a26a7d876d6c706790e658f33b61c683a402c00929c0af86be29fb4f07b3ca79466af9533e7e239d63272f1590239e29a35859fe4a9924d8a2c1de2480135b2c81cb64099e32193dbd8291a19c6312c80882a3988970cf3fe3f00eea8440ba97388a08cfe7aba9f15b69b97d07a2cbb7bb5727db8f30ba1b2b84d6a10d8d8c90d346bb1a76532746e655f188b65d870814d9af6882508d6b6b4669b2b72278c4605f22a0dd814da2b134ea775fcba4a55cc1db9a8484fb081e411ecdce4aeed4d54b7e0612361d4d1664c9bc7adbc2929aa58d14cf662480632404f9c2dd45c76d763db02b89f6d0fc5e12848d71e927daf138be39ed12d86e489235f6c6b5e56d05d54ffe2fa4ed239dd0478de89af6d7504585433db5a622c2984664562424923524b0c6801a246ee1363ddb76b1d52d4e308360eec25453bdfb05ab443f362009b0a2f9832e6489d5d1120e05c78360de9e1258e4384e70f0962f3b74b40e05ce880008e85eff2f52ca7bddf28ed311fff17dcb574d81410bf8367056a69aef028f7adc6255935b3677e96c342d281357b9715edd4b1c81"], 0x668}, 0x1, 0x0, 0x0, 0xc0}, 0x24004001) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x1}) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r7 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r7, &(0x7f0000001240)={&(0x7f0000000a00)=@generic={0xa, "8ab77fa26849ff3556b3b598b353011a5b90650042e2dacdc165ecece4e6be1862e2bdacd2737d00ad6f9f030000005e15dd9fb1a7adc211220963ad5def53b911ba5b9da13641f982757012a7496de0b3a36f8049f260c603dbc317f54b901ee80eae132ca6e88c776553e1833052ca376304313c5637786a36a4b83857"}, 0x80, 0x0}, 0x24008000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x10, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 0s ago: executing program 32 (id=16915): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket(0x25, 0xa, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async, rerun: 32) r1 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000003200)={'syztnl2\x00', &(0x7f0000001200)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x7, 0xfffffffc, 0x0, @local, @empty, 0x700, 0x40}}) (async) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000010c0)={0x0, @in6={{0xa, 0x4e21, 0x1, @private2, 0x2}}}, &(0x7f0000000000)=0x84) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, &(0x7f00000000c0)=0x9b) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002600080022bd7008f99e98ff02e9ff0a08003e800427fecf822eb49094d80000"], 0x24}, 0x1, 0x0, 0x0, 0x1000c957}, 0x0) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r4, 0xbabc) (async) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000000), 0x4) r5 = socket(0x27, 0x6, 0x4) getsockopt$bt_hci(r5, 0x84, 0x72, &(0x7f0000000000)=""/4078, &(0x7f0000001080)=0xfee) (async) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r7, 0x1000) (async) syz_genetlink_get_family_id$nl80211(0x0, r7) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="7a0af8ff75257078bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf52866651ddd73f30f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce72d75946c2b638d91dbef661962239c77edf2d34b12cd48a1b20fb7dd8432619f2c50d77bc0ea9b0af58e6fff4942eb613eff289026d5045ef76d7d864409eb2dc9518a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5208ff0df2db761014b1b999a12df6bee431a668135b8214afa5827b56a8074bf1e6cf5d84b35a3a3a4c66824fe12dbe20fcf50a194185b9e2d8b815fedb0d982936156be3cdda66fb977aef7c9cb92428ef25d9bf665bd60024c09e9eed544126fabe4cb8d826e1ec03cc492f5cad6227c94fea467aea7fa8b58abc37056433edf43fba5566a3e022034ac81fd48f9b7314ffa730017fbd37fdb23bc26992529402a520ef67e246415a6a8ca9d4aa797a95ca3314ded0d8a24abd57e042888a9141ab4e6c6b939aaefc248791464970c43120211b9bc82a85cd2fc18f535c7986c2d52ba62f74f00000000008000000000000000000000000040000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x51}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000002900)=r9, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r10, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)}, 0x1f00) (async) sendmsg$tipc(r11, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async, rerun: 64) recvmsg(r11, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001000)=""/102, 0x66}, {0x0}], 0x2}, 0x30120) (rerun: 64) kernel console output (not intermixed with test programs): ] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16248'. [ 1528.544790][T24156] netlink: 'syz.0.16248': attribute type 30 has an invalid length. [ 1528.598302][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16248'. [ 1528.598369][T24158] netlink: 'syz.0.16248': attribute type 30 has an invalid length. [ 1528.607570][T19007] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.614965][T20202] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.615008][T20202] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.615038][T20202] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1528.619847][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16248'. [ 1528.619879][T24158] netlink: 'syz.0.16248': attribute type 30 has an invalid length. [ 1528.620664][T24158] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16248'. [ 1528.620686][T24158] netlink: 'syz.0.16248': attribute type 30 has an invalid length. [ 1528.625559][T24158] netlink: 'syz.0.16248': attribute type 30 has an invalid length. [ 1528.626397][T24158] netlink: 'syz.0.16248': attribute type 30 has an invalid length. [ 1528.630673][T24158] netlink: 'syz.0.16248': attribute type 30 has an invalid length. [ 1528.915021][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1529.240189][T24168] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1529.399579][T24168] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1529.535914][T24185] siw: device registration error -23 [ 1529.536251][T24185] siw: device registration error -23 [ 1529.536618][T24185] siw: device registration error -23 [ 1529.536879][T24185] siw: device registration error -23 [ 1529.537238][T24185] siw: device registration error -23 [ 1529.581286][T24185] siw: device registration error -23 [ 1529.581595][T24185] siw: device registration error -23 [ 1529.581887][T24185] siw: device registration error -23 [ 1529.582191][T24185] siw: device registration error -23 [ 1529.606340][T24185] siw: device registration error -23 [ 1529.964359][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1530.994277][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1531.149845][T24245] syzkaller0: entered promiscuous mode [ 1531.149888][T24245] syzkaller0: entered allmulticast mode [ 1531.570444][T24257] __nla_validate_parse: 43 callbacks suppressed [ 1531.570493][T24257] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.16274'. [ 1532.034634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1532.744080][T24278] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1532.925193][T24280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16285'. [ 1532.988662][T24282] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1533.084269][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1533.179228][T24258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1533.179860][T24258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1533.860068][T24258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1534.124274][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1534.259675][T24258] veth1_vlan: left allmulticast mode [ 1534.763140][T24257] netlink: 136 bytes leftover after parsing attributes in process `syz.0.16274'. [ 1534.772764][T20203] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1534.772798][T20203] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.772822][T20203] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1534.772870][T20203] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1534.772891][T20203] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.772912][T20203] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1534.772945][T20203] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1534.772968][T20203] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.772990][T20203] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1534.773023][T20203] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1534.773046][T20203] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1534.773068][T20203] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 1535.164443][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1535.520001][T24314] syzkaller0: entered promiscuous mode [ 1535.526975][T24314] syzkaller0: entered allmulticast mode [ 1535.608581][T24314] 0: reclassify loop, rule prio 0, protocol 700 [ 1535.917401][T24323] netdevsim netdevsim2: Firmware load for './file0/file0/..' refused, path contains '..' component [ 1536.066225][T24329] netlink: 60 bytes leftover after parsing attributes in process `syz.2.16297'. [ 1536.081497][T24329] syzkaller0: entered promiscuous mode [ 1536.081554][T24329] syzkaller0: entered allmulticast mode [ 1536.194428][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1536.278259][T24338] ip6tnl2: entered allmulticast mode [ 1536.473865][T20203] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1536.474119][T20203] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1536.495297][T15134] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1536.525073][T15131] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1536.960952][T24363] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16307'. [ 1537.091490][T24363] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16307'. [ 1537.103284][T24356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16304'. [ 1537.154677][T15134] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1537.216675][T24352] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16304'. [ 1537.235396][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1537.551008][T24360] hsr0 speed is unknown, defaulting to 1000 [ 1537.702223][T24379] validate_nla: 27 callbacks suppressed [ 1537.708504][T24379] netlink: 'syz.2.16309': attribute type 32 has an invalid length. [ 1537.788410][T24360] lo speed is unknown, defaulting to 1000 [ 1538.210157][T24390] netlink: 'syz.4.16312': attribute type 8 has an invalid length. [ 1538.218463][T24390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16312'. [ 1538.229309][T24391] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16313'. [ 1538.246076][T24390] veth1_to_team: entered promiscuous mode [ 1538.253312][T24390] gretap0: entered promiscuous mode [ 1538.269651][T24390] veth1_to_team: left promiscuous mode [ 1538.280975][T24390] gretap0: left promiscuous mode [ 1538.287019][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1538.400447][T24400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16314'. [ 1538.957721][T24423] openvswitch: ovs-s!: Dropping previously announced user features [ 1539.324485][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1539.507584][T24391] infiniband syz0: set active [ 1539.532059][T24391] infiniband syz0: added veth0_vlan [ 1539.590412][T24391] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1539.611503][T24391] infiniband syz0: Couldn't open port 1 [ 1539.627308][T24391] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 1539.645137][T24391] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 1539.666046][T24391] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 1539.880681][T24457] syzkaller0: entered promiscuous mode [ 1539.880722][T24457] syzkaller0: entered allmulticast mode [ 1539.915946][T20206] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1539.915992][T20206] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1539.977451][T24391] RDS/IB: syz0: added [ 1539.980968][T24391] smc: adding ib device syz0 with port count 1 [ 1539.980995][T24391] smc: ib device syz0 port 1 has no pnetid [ 1540.117400][T24461] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16330'. [ 1540.331681][T24463] bond2: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 1540.332320][T24463] bond2: (slave ip6tnl2): Error -95 calling set_mac_address [ 1540.364273][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1540.836286][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1540.882818][T24489] netlink: 'syz.1.16338': attribute type 6 has an invalid length. [ 1540.883037][T24490] netlink: 140 bytes leftover after parsing attributes in process `syz.4.16339'. [ 1540.883138][T24490] netlink: 72 bytes leftover after parsing attributes in process `syz.4.16339'. [ 1541.288633][T24497] netlink: 'syz.4.16342': attribute type 14 has an invalid length. [ 1541.292526][T24497] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1541.404272][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1541.467105][T24502] tipc: Enabled bearer , priority 0 [ 1541.485478][T24502] syzkaller0: entered promiscuous mode [ 1541.485524][T24502] syzkaller0: entered allmulticast mode [ 1541.497013][T24502] sch_tbf: burst 255 is lower than device syzkaller0 mtu (65589) ! [ 1541.656981][T24502] syzkaller0: mtu less than device minimum [ 1541.871864][T24515] netlink: 'syz.3.16347': attribute type 5 has an invalid length. [ 1541.871909][T24515] netlink: 'syz.3.16347': attribute type 9 has an invalid length. [ 1542.000364][T24524] __nla_validate_parse: 4 callbacks suppressed [ 1542.003782][T24520] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16349'. [ 1542.003869][T24520] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16349'. [ 1542.025097][T24524] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16350'. [ 1542.025222][T24524] netlink: 72 bytes leftover after parsing attributes in process `syz.1.16350'. [ 1542.434304][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1542.727894][T24544] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1542.972077][T24544] tipc: Resetting bearer [ 1542.976236][T24544] tipc: Resetting bearer [ 1542.983061][T24544] netlink: 'syz.1.16354': attribute type 16 has an invalid length. [ 1542.983083][T24544] netlink: 'syz.1.16354': attribute type 17 has an invalid length. [ 1543.097155][T24544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.105809][T24544] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.109763][T24559] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 1543.126169][T24544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1543.228852][T24544] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1543.240064][T24544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1543.257209][T24544] veth1_vlan: left promiscuous mode [ 1543.263859][T24544] veth0_vlan: left promiscuous mode [ 1543.271339][T24544] veth0_vlan: entered promiscuous mode [ 1543.279968][T24544] veth1_vlan: entered promiscuous mode [ 1543.290928][T24544] veth1_macvtap: left promiscuous mode [ 1543.298341][T24544] veth0_macvtap: left promiscuous mode [ 1543.305336][T24544] veth0_macvtap: entered promiscuous mode [ 1543.312522][T24544] veth1_macvtap: entered promiscuous mode [ 1543.325869][T24544] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1543.335195][T24544] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1543.343654][T24544] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1543.352279][T24544] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1543.368219][T24544] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1543.370726][T24544] syzkaller0: left promiscuous mode [ 1543.370747][T24544] syzkaller0: left allmulticast mode [ 1543.370971][T24544] tipc: Resetting bearer [ 1543.413879][T24544] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1543.428832][T24544] gtp0: left promiscuous mode [ 1543.428884][T24544] gtp0: left allmulticast mode [ 1543.475181][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1543.764339][T20205] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.772697][T20205] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.782310][T19007] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.791358][T19007] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.802540][T19007] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.811560][T19007] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1543.820768][T19007] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1543.820844][T19007] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1544.433084][T24583] netlink: 'syz.1.16364': attribute type 5 has an invalid length. [ 1544.514557][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1544.766337][T24590] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16366'. [ 1544.857295][T24597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16368'. [ 1545.201450][T24599] tun0: tun_chr_ioctl cmd 1074025680 [ 1545.554445][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1545.775979][T24619] netlink: 'syz.0.16376': attribute type 1 has an invalid length. [ 1546.604581][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1546.687916][T24640] 8021q: adding VLAN 0 to HW filter on device team0 [ 1546.736540][T24640] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1546.883825][T24640] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1546.916689][T24640] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1546.916740][T24640] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1546.963622][T24640] veth1_vlan: left promiscuous mode [ 1546.971304][T24640] veth0_vlan: left promiscuous mode [ 1546.982375][T24640] veth0_vlan: entered promiscuous mode [ 1546.992027][T24640] veth1_vlan: entered promiscuous mode [ 1547.003850][T24640] veth1_vlan: entered allmulticast mode [ 1547.029982][T24640] veth1_macvtap: left promiscuous mode [ 1547.037240][T24640] veth0_macvtap: left promiscuous mode [ 1547.040819][T24640] veth0_macvtap: entered promiscuous mode [ 1547.050072][T24640] veth1_macvtap: entered promiscuous mode [ 1547.088534][T24645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16383'. [ 1547.109622][T24640] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1547.122071][T24640] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1547.135470][T24640] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1547.146608][T24640] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1547.185983][T24640] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1547.186945][T24640] bridge2: left promiscuous mode [ 1547.194111][T24640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1547.229792][T20207] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.229908][T20207] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1547.231847][T20207] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.231941][T20207] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1547.495119][T20205] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.495176][T20205] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.495198][T20205] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1547.495754][T20205] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.495780][T20205] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.495802][T20205] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1547.634407][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1547.678638][T19007] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.678700][T19007] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.678723][T19007] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1547.679629][T20205] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1547.679655][T20205] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1547.679677][T20205] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1548.684464][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1549.481028][T24639] siw: device registration error -23 [ 1549.714288][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1549.804447][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1549.881025][T24674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16389'. [ 1549.881135][T24674] netlink: 40 bytes leftover after parsing attributes in process `syz.4.16389'. [ 1549.935953][T24675] netlink: 'syz.4.16389': attribute type 4 has an invalid length. [ 1549.943953][T24675] netlink: 17 bytes leftover after parsing attributes in process `syz.4.16389'. [ 1550.025328][T24645] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1550.754401][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1551.152969][T24690] netlink: 104 bytes leftover after parsing attributes in process `syz.1.16394'. [ 1551.236289][T24695] netlink: 'syz.2.16395': attribute type 21 has an invalid length. [ 1551.723791][T24725] netlink: 12 bytes leftover after parsing attributes in process `syz.2.16401'. [ 1551.794309][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1551.815758][T24725] netlink: 'syz.2.16401': attribute type 11 has an invalid length. [ 1552.664966][T24756] veth0: entered promiscuous mode [ 1552.828835][T24756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16409'. [ 1552.839250][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1553.006811][T24769] sctp: [Deprecated]: syz.4.16408 (pid 24769) Use of int in max_burst socket option. [ 1553.006811][T24769] Use struct sctp_assoc_value instead [ 1553.207739][T24776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16414'. [ 1553.207790][T24776] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16414'. [ 1553.208556][T24779] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16414'. [ 1553.208574][T24779] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16414'. [ 1553.289261][T24780] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16414'. [ 1553.377488][T24780] team0: Port device dummy0 removed [ 1553.411799][T24787] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16417'. [ 1553.512609][T24780] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16414'. [ 1553.538711][T24780] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16414'. [ 1553.538893][T24780] netlink: 14 bytes leftover after parsing attributes in process `syz.4.16414'. [ 1553.623797][T24790] netlink: 'syz.0.16415': attribute type 1 has an invalid length. [ 1553.828117][T24790] bond3: entered promiscuous mode [ 1553.840944][T24790] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1553.874315][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1554.040042][T24792] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1554.051086][T24792] bond3: (slave bond4): making interface the new active one [ 1554.051131][T24792] bond4: entered promiscuous mode [ 1554.066225][T24792] bond3: (slave bond4): Enslaving as an active interface with an up link [ 1554.915015][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1555.964268][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1556.994805][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1558.034908][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1558.665157][T24832] __nla_validate_parse: 28 callbacks suppressed [ 1558.665215][T24832] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16425'. [ 1559.074499][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1559.369296][T24844] hsr0 speed is unknown, defaulting to 1000 [ 1559.372631][T24844] lo speed is unknown, defaulting to 1000 [ 1559.470108][T24853] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1559.470204][T24853] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1559.737256][T24862] ksmbd: Unknown IPC event: 1, ignore. [ 1560.114272][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1560.198116][T24871] netlink: 'syz.4.16437': attribute type 1 has an invalid length. [ 1560.209218][T24872] netlink: 'syz.4.16437': attribute type 1 has an invalid length. [ 1560.351048][T24871] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1560.498193][T24880] bond3: (slave geneve3): making interface the new active one [ 1560.533039][T24880] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 1561.164587][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1561.275532][T24910] FAULT_INJECTION: forcing a failure. [ 1561.275532][T24910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1561.275586][T24910] CPU: 1 UID: 0 PID: 24910 Comm: syz.3.16447 Not tainted syzkaller #0 PREEMPT(full) [ 1561.275607][T24910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1561.275617][T24910] Call Trace: [ 1561.275623][T24910] [ 1561.275629][T24910] dump_stack_lvl+0xe8/0x150 [ 1561.275660][T24910] should_fail_ex+0x410/0x560 [ 1561.275692][T24910] _copy_from_user+0x2d/0xb0 [ 1561.275714][T24910] ___sys_sendmsg+0x1c6/0x360 [ 1561.275734][T24910] ? __lock_acquire+0x6df/0x2e50 [ 1561.275756][T24910] ? __pfx____sys_sendmsg+0x10/0x10 [ 1561.275804][T24910] ? __fget_files+0x2a/0x420 [ 1561.275827][T24910] ? __fget_files+0x3a2/0x420 [ 1561.275858][T24910] __x64_sys_sendmsg+0x1b1/0x290 [ 1561.275881][T24910] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1561.275920][T24910] do_syscall_64+0x166/0x520 [ 1561.275945][T24910] ? trace_irq_disable+0x3b/0x140 [ 1561.275963][T24910] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.275981][T24910] ? clear_bhb_loop+0x70/0xc0 [ 1561.276003][T24910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1561.276021][T24910] RIP: 0033:0x7f6597d9e159 [ 1561.276038][T24910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1561.276055][T24910] RSP: 002b:00007f6595ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1561.276074][T24910] RAX: ffffffffffffffda RBX: 00007f6598025fa0 RCX: 00007f6597d9e159 [ 1561.276088][T24910] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1561.276100][T24910] RBP: 00007f6595ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1561.276111][T24910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1561.276122][T24910] R13: 00007f6598026038 R14: 00007f6598025fa0 R15: 00007ffe22fc2728 [ 1561.276152][T24910] [ 1561.365414][T24912] netlink: 440 bytes leftover after parsing attributes in process `syz.2.16448'. [ 1561.839985][T24928] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16453'. [ 1562.108068][T24942] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16459'. [ 1562.194537][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1562.887878][T24936] bridge0: port 2(bridge_slave_1) entered disabled state [ 1562.888637][T24936] bridge0: port 1(bridge_slave_0) entered disabled state [ 1563.235445][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1563.403664][T24936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1563.453751][T24936] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.274942][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1564.336177][T24936] ip6gre2: left allmulticast mode [ 1564.392805][T24936] bond3: left allmulticast mode [ 1564.564570][T20200] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.564624][T20200] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.566117][T19003] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.566145][T19003] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.566179][T19003] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.566201][T19003] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.576981][T20207] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1564.577014][T20207] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1564.652648][T15134] syz0: Port: 1 Link DOWN [ 1565.193979][T24995] hsr0: entered allmulticast mode [ 1565.194028][T24995] hsr_slave_0: entered allmulticast mode [ 1565.194062][T24995] hsr_slave_1: entered allmulticast mode [ 1565.314338][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1565.341248][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16475'. [ 1565.580420][T19007] smc: removing ib device syz0 [ 1565.740566][T19007] smbdirect: ib_dev[syz0] removed [ 1565.897081][T25005] bridge0: port 3(dummy0) entered disabled state [ 1565.897294][T25005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1565.897961][T25005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1566.052255][T25028] netlink: 'syz.1.16483': attribute type 2 has an invalid length. [ 1566.052309][T25028] netlink: 228 bytes leftover after parsing attributes in process `syz.1.16483'. [ 1566.364271][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1567.075029][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1567.230203][T25005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1567.252327][T25005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1567.404281][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1567.522888][T25005] bond1: left promiscuous mode [ 1567.529502][T25005] bridge1: left promiscuous mode [ 1567.547379][T25005] bond0: left promiscuous mode [ 1567.565970][T25005] batman_adv: batadv0: Interface deactivated: macsec1 [ 1567.584649][T25005] vxlan0: left promiscuous mode [ 1567.584691][T25005] vxlan0: left allmulticast mode [ 1567.612165][T25005] bond3: left promiscuous mode [ 1567.612221][T25005] bond4: left promiscuous mode [ 1567.630979][T25007] hsr_slave_0: left promiscuous mode [ 1567.641784][T25007] hsr_slave_1: left promiscuous mode [ 1567.926230][T20206] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.926281][T20206] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.926331][T20206] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.926358][T20206] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.926391][T20206] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.926416][T20206] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1567.926447][T20206] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1567.926470][T20206] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1568.252658][T25047] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16489'. [ 1568.252707][T25047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16489'. [ 1568.435261][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1568.811031][T25069] FAULT_INJECTION: forcing a failure. [ 1568.811031][T25069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1568.811084][T25069] CPU: 0 UID: 0 PID: 25069 Comm: syz.3.16494 Not tainted syzkaller #0 PREEMPT(full) [ 1568.811104][T25069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1568.811114][T25069] Call Trace: [ 1568.811120][T25069] [ 1568.811127][T25069] dump_stack_lvl+0xe8/0x150 [ 1568.811155][T25069] should_fail_ex+0x410/0x560 [ 1568.811187][T25069] _copy_to_user+0x31/0xb0 [ 1568.811210][T25069] simple_read_from_buffer+0xe1/0x170 [ 1568.811239][T25069] proc_fail_nth_read+0x1bb/0x230 [ 1568.811263][T25069] ? common_file_perm+0x20e/0x2b0 [ 1568.811287][T25069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1568.811321][T25069] ? rw_verify_area+0x24a/0x4c0 [ 1568.811347][T25069] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1568.811373][T25069] vfs_read+0x213/0xa80 [ 1568.811403][T25069] ? __pfx___mutex_lock+0x10/0x10 [ 1568.811430][T25069] ? __pfx_vfs_read+0x10/0x10 [ 1568.811456][T25069] ? __fget_files+0x2a/0x420 [ 1568.811483][T25069] ? __fget_files+0x3a2/0x420 [ 1568.811505][T25069] ? __fget_files+0x2a/0x420 [ 1568.811536][T25069] ksys_read+0x150/0x270 [ 1568.811563][T25069] ? __pfx_ksys_read+0x10/0x10 [ 1568.811587][T25069] ? __pfx_sock_ioctl+0x10/0x10 [ 1568.811619][T25069] do_syscall_64+0x166/0x520 [ 1568.811645][T25069] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.811664][T25069] ? clear_bhb_loop+0x70/0xc0 [ 1568.811687][T25069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.811705][T25069] RIP: 0033:0x7f6597d5e98e [ 1568.811723][T25069] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1568.811739][T25069] RSP: 002b:00007f6595ff5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1568.811757][T25069] RAX: ffffffffffffffda RBX: 00007f6595ff66c0 RCX: 00007f6597d5e98e [ 1568.811771][T25069] RDX: 000000000000000f RSI: 00007f6595ff60a0 RDI: 0000000000000004 [ 1568.811783][T25069] RBP: 00007f6595ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1568.811794][T25069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1568.811805][T25069] R13: 00007f6598026038 R14: 00007f6598025fa0 R15: 00007ffe22fc2728 [ 1568.811836][T25069] [ 1569.381427][T25076] bond4: (slave dummy0): Releasing active interface [ 1569.381473][T25076] dummy0: left promiscuous mode [ 1569.395777][T25076] dummy0: left allmulticast mode [ 1569.407540][T25077] netlink: 'syz.3.16495': attribute type 1 has an invalid length. [ 1569.407579][T25077] netlink: 193500 bytes leftover after parsing attributes in process `syz.3.16495'. [ 1569.407615][T25077] netlink: 2060 bytes leftover after parsing attributes in process `syz.3.16495'. [ 1569.474554][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1569.483133][T25076] bridge_slave_0: left allmulticast mode [ 1569.483189][T25076] bridge_slave_0: left promiscuous mode [ 1569.483518][T25076] bridge0: port 1(bridge_slave_0) entered disabled state [ 1569.549274][T25076] veth1_to_bridge: left allmulticast mode [ 1569.553834][T25079] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1569.565359][T25076] veth1_to_bridge: left promiscuous mode [ 1569.565600][T25076] bridge0: port 3(veth1_to_bridge) entered disabled state [ 1569.608405][T25076] bridge_slave_1: left allmulticast mode [ 1569.614462][T25076] bridge_slave_1: left promiscuous mode [ 1569.614717][T25076] bridge0: port 2(bridge_slave_1) entered disabled state [ 1569.662796][T25076] bond0: (slave veth0_to_bond): Releasing backup interface [ 1569.684087][T25076] bond0: (slave bond_slave_0): Releasing backup interface [ 1569.746426][T25076] bond0: (slave bond_slave_1): Releasing backup interface [ 1569.792131][T25076] team0: Port device team_slave_1 removed [ 1569.792725][T25076] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1570.009097][ T99] IPVS: starting estimator thread 0... [ 1570.039477][T25091] tipc: Started in network mode [ 1570.048855][T25091] tipc: Node identity ac1414aa, cluster identity 4711 [ 1570.063268][T25091] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.070517][T25091] tipc: Enabled bearer , priority 5 [ 1570.104370][T25092] IPVS: using max 34 ests per chain, 81600 per kthread [ 1570.194466][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.334339][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.474421][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.514546][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.614320][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.754453][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1570.933751][T25116] FAULT_INJECTION: forcing a failure. [ 1570.933751][T25116] name failslab, interval 1, probability 0, space 0, times 0 [ 1570.947910][T25116] CPU: 1 UID: 0 PID: 25116 Comm: syz.3.16506 Not tainted syzkaller #0 PREEMPT(full) [ 1570.947940][T25116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1570.947953][T25116] Call Trace: [ 1570.947961][T25116] [ 1570.947969][T25116] dump_stack_lvl+0xe8/0x150 [ 1570.948003][T25116] should_fail_ex+0x410/0x560 [ 1570.948034][T25116] ? ovs_flow_alloc+0x103/0x1f0 [ 1570.948055][T25116] should_failslab+0xa8/0x100 [ 1570.948078][T25116] ? ovs_flow_alloc+0x103/0x1f0 [ 1570.948096][T25116] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1570.948123][T25116] ? ovs_flow_alloc+0x24/0x1f0 [ 1570.948141][T25116] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1570.948167][T25116] ? ovs_flow_alloc+0x103/0x1f0 [ 1570.948200][T25116] ovs_flow_alloc+0x103/0x1f0 [ 1570.948224][T25116] ovs_flow_cmd_new+0x28b/0xea0 [ 1570.948252][T25116] ? __kasan_kmalloc+0x93/0xb0 [ 1570.948275][T25116] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1570.948352][T25116] ? __kmalloc_noprof+0x38c/0x720 [ 1570.948382][T25116] ? __nla_parse+0x40/0x60 [ 1570.948408][T25116] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1570.948436][T25116] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1570.948471][T25116] genl_family_rcv_msg_doit+0x233/0x340 [ 1570.948507][T25116] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1570.948547][T25116] ? bpf_lsm_capable+0x9/0x20 [ 1570.948573][T25116] ? security_capable+0x7e/0x2c0 [ 1570.948599][T25116] genl_rcv_msg+0x614/0x7a0 [ 1570.948633][T25116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1570.948659][T25116] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1570.948697][T25116] netlink_rcv_skb+0x226/0x4a0 [ 1570.948721][T25116] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1570.948749][T25116] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1570.948788][T25116] ? down_read+0x2be/0x330 [ 1570.948811][T25116] genl_rcv+0x28/0x40 [ 1570.948835][T25116] netlink_unicast+0x7bd/0x940 [ 1570.948865][T25116] netlink_sendmsg+0x813/0xb40 [ 1570.948896][T25116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1570.948927][T25116] ? apparmor_socket_sendmsg+0x98/0x360 [ 1570.948957][T25116] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1570.948980][T25116] sock_sendmsg_nosec+0x13a/0x180 [ 1570.949008][T25116] ____sys_sendmsg+0x54e/0x850 [ 1570.949035][T25116] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1570.949065][T25116] ? import_iovec+0x73/0xa0 [ 1570.949090][T25116] ___sys_sendmsg+0x2a5/0x360 [ 1570.949110][T25116] ? __lock_acquire+0x6df/0x2e50 [ 1570.949135][T25116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1570.949210][T25116] ? __fget_files+0x2a/0x420 [ 1570.949235][T25116] ? __fget_files+0x3a2/0x420 [ 1570.949270][T25116] __x64_sys_sendmsg+0x1b1/0x290 [ 1570.949294][T25116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1570.949336][T25116] do_syscall_64+0x166/0x520 [ 1570.949361][T25116] ? trace_irq_disable+0x3b/0x140 [ 1570.949380][T25116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.949399][T25116] ? clear_bhb_loop+0x70/0xc0 [ 1570.949421][T25116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1570.949440][T25116] RIP: 0033:0x7f6597d9e159 [ 1570.949458][T25116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1570.949474][T25116] RSP: 002b:00007f6595ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1570.949500][T25116] RAX: ffffffffffffffda RBX: 00007f6598025fa0 RCX: 00007f6597d9e159 [ 1570.949513][T25116] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1570.949526][T25116] RBP: 00007f6595ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1570.949538][T25116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1570.949549][T25116] R13: 00007f6598026038 R14: 00007f6598025fa0 R15: 00007ffe22fc2728 [ 1570.949580][T25116] [ 1571.174337][T19432] tipc: Node number set to 2886997162 [ 1571.554598][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1571.568943][T25126] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16510'. [ 1571.893505][T25136] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1572.148247][T25143] netlink: 'syz.4.16514': attribute type 1 has an invalid length. [ 1572.224117][T25146] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16515'. [ 1572.397531][T25143] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1572.441237][T25145] bond4: entered allmulticast mode [ 1572.450111][T25145] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16514'. [ 1572.479117][T25148] netlink: 60 bytes leftover after parsing attributes in process `syz.0.16515'. [ 1572.601643][T25147] bond4: (slave ip6gretap1): making interface the new active one [ 1572.601686][T25147] ip6gretap1: entered allmulticast mode [ 1572.602769][T25147] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1573.197913][T25173] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16524'. [ 1573.270211][T25175] netlink: 'syz.3.16522': attribute type 1 has an invalid length. [ 1573.321785][T25168] IPVS: Scheduler module ip_vs_sip not found [ 1573.613225][T25175] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1574.280679][T25168] bond5: entered promiscuous mode [ 1574.293404][T25168] bond5: entered allmulticast mode [ 1574.686122][ C0] net_ratelimit: 11 callbacks suppressed [ 1574.686186][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1574.901392][T25201] syzkaller0: entered promiscuous mode [ 1574.909685][T25201] syzkaller0: entered allmulticast mode [ 1575.216084][T25216] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16531'. [ 1575.234291][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1575.347281][T25219] syzkaller0: entered promiscuous mode [ 1575.347326][T25219] syzkaller0: entered allmulticast mode [ 1575.362353][T25220] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.16531'. [ 1575.370179][T25219] tipc: Enabled bearer , priority 0 [ 1575.530038][T25219] syzkaller0: mtu less than device minimum [ 1575.644386][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.714273][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1575.784394][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.786606][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.924392][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1575.953572][T25235] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16535'. [ 1576.064362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.064439][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1576.124983][T25249] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16535'. [ 1576.484475][T19435] tipc: Node number set to 1494569365 [ 1576.913341][T25260] netlink: 'syz.2.16540': attribute type 12 has an invalid length. [ 1576.913392][T25260] netlink: 'syz.2.16540': attribute type 29 has an invalid length. [ 1576.913728][T25260] netlink: 148 bytes leftover after parsing attributes in process `syz.2.16540'. [ 1576.913934][T25260] netlink: 'syz.2.16540': attribute type 1 has an invalid length. [ 1576.913963][T25260] netlink: 'syz.2.16540': attribute type 2 has an invalid length. [ 1576.913980][T25260] netlink: 11 bytes leftover after parsing attributes in process `syz.2.16540'. [ 1577.665001][T25282] syzkaller0: entered promiscuous mode [ 1577.665039][T25282] syzkaller0: entered allmulticast mode [ 1577.992680][T25284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16546'. [ 1577.992726][T25284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16546'. [ 1577.992740][T25284] netlink: 28 bytes leftover after parsing attributes in process `syz.0.16546'. [ 1577.992895][T25284] netlink: 32 bytes leftover after parsing attributes in process `syz.0.16546'. [ 1578.460017][T25299] tipc: Enabling of bearer rejected, already enabled [ 1578.481143][T25305] syzkaller1: entered promiscuous mode [ 1578.488052][T25305] syzkaller1: entered allmulticast mode [ 1578.624333][T25304] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1579.433257][T25330] ip6gretap0: entered allmulticast mode [ 1579.446375][T25330] sit0: entered promiscuous mode [ 1579.446525][T25330] netlink: 'syz.3.16558': attribute type 1 has an invalid length. [ 1579.446541][T25330] netlink: 9 bytes leftover after parsing attributes in process `syz.3.16558'. [ 1579.491952][T25331] netlink: 24 bytes leftover after parsing attributes in process `syz.2.16559'. [ 1579.676641][T25337] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1579.875146][ C0] net_ratelimit: 19 callbacks suppressed [ 1579.875196][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1580.341104][T25363] netlink: 'syz.1.16569': attribute type 21 has an invalid length. [ 1580.341211][T25363] netlink: 132 bytes leftover after parsing attributes in process `syz.1.16569'. [ 1580.432037][T25373] ip_tables: iptables: counters copy to user failed while replacing table [ 1580.434379][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1580.464602][T25373] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16573'. [ 1580.514784][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.515025][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1580.891946][T25385] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1580.924952][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1581.474343][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1581.554464][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1581.616823][T25404] bridge4: entered promiscuous mode [ 1581.768060][T25408] netlink: 'syz.3.16582': attribute type 2 has an invalid length. [ 1581.783274][T25413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1581.956536][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1582.118737][T25423] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1582.281058][T25432] __nla_validate_parse: 4 callbacks suppressed [ 1582.297864][T25432] netlink: 140 bytes leftover after parsing attributes in process `syz.1.16590'. [ 1582.393208][T25437] netlink: 40 bytes leftover after parsing attributes in process `syz.3.16591'. [ 1582.421142][T25437] netlink: 'syz.3.16591': attribute type 13 has an invalid length. [ 1582.480999][T25445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16595'. [ 1582.549921][T25449] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16595'. [ 1582.565842][T25434] netlink: 14463 bytes leftover after parsing attributes in process `syz.0.16592'. [ 1582.604823][T19435] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1582.906114][T25457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16596'. [ 1583.102648][T25457] netlink: 'syz.3.16596': attribute type 1 has an invalid length. [ 1583.134549][T16372] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1583.266409][T25470] netlink: 'syz.4.16599': attribute type 2 has an invalid length. [ 1583.646181][T25465] veth5: entered allmulticast mode [ 1583.690085][T25465] bond6: (slave veth5): Enslaving as an active interface with an up link [ 1583.874869][ T5629] Bluetooth: hci1: command 0x0406 tx timeout [ 1583.998100][T25477] netlink: 'syz.0.16600': attribute type 1 has an invalid length. [ 1584.215920][T25477] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1584.591600][T25477] syzkaller0: entered promiscuous mode [ 1584.591644][T25477] syzkaller0: entered allmulticast mode [ 1584.601334][T25481] syzkaller1: entered promiscuous mode [ 1584.601356][T25481] syzkaller1: entered allmulticast mode [ 1585.074771][ C0] net_ratelimit: 13 callbacks suppressed [ 1585.074835][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1585.536526][T25508] netlink: 2 bytes leftover after parsing attributes in process `syz.3.16610'. [ 1585.634747][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1585.714356][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1585.714429][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.114319][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1586.690537][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1586.763855][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1586.924943][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1587.174512][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1587.716506][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1587.799890][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.286131][ C0] net_ratelimit: 8 callbacks suppressed [ 1590.286208][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1590.850696][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1590.934727][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1590.934824][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1591.333111][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1591.874366][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1591.961045][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1592.042216][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1592.123448][T25492] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16603'. [ 1592.364332][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1592.560347][T25525] netlink: 'syz.3.16617': attribute type 1 has an invalid length. [ 1592.763271][T25533] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16617'. [ 1592.798170][T25525] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1592.820320][T25529] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1592.916477][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1592.983408][T25537] openvswitch: netlink: Message has 4 unknown bytes. [ 1593.223250][T25539] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1593.441360][T25550] netlink: 2 bytes leftover after parsing attributes in process `syz.2.16624'. [ 1593.823367][T25566] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16630'. [ 1594.889999][T25587] gre0: entered promiscuous mode [ 1594.890046][T25587] gre0: entered allmulticast mode [ 1594.905273][T25587] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16637'. [ 1595.297694][T25601] net_ratelimit: 11 callbacks suppressed [ 1595.297740][T25601] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1595.349772][T25601] netlink: 'syz.1.16642': attribute type 1 has an invalid length. [ 1595.469463][T25601] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1595.492525][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1595.832514][T25619] netlink: 'syz.3.16643': attribute type 4 has an invalid length. [ 1596.009670][T25619] syzkaller0: entered promiscuous mode [ 1596.009723][T25619] syzkaller0: entered allmulticast mode [ 1596.025849][T25619] tipc: Started in network mode [ 1596.025907][T25619] tipc: Node identity 2eafd866616, cluster identity 4711 [ 1596.026045][T25619] tipc: Enabled bearer , priority 0 [ 1596.034364][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1596.116633][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.116715][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1596.265488][T25629] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1596.266032][T25620] tipc: Resetting bearer [ 1596.319777][T25618] tipc: Resetting bearer [ 1596.501839][T25618] tipc: Disabling bearer [ 1596.514686][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1596.831934][T25639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16649'. [ 1596.832276][T25639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16649'. [ 1596.832516][T25639] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16649'. [ 1596.855285][T25639] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16649'. [ 1596.855785][T25640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.16649'. [ 1597.074315][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1597.154948][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1597.369985][T25663] netlink: 'syz.3.16656': attribute type 1 has an invalid length. [ 1597.426167][T25653] syzkaller0: left promiscuous mode [ 1597.426217][T25653] syzkaller0: left allmulticast mode [ 1597.554815][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1598.872045][T25684] __nla_validate_parse: 1 callbacks suppressed [ 1598.879926][T25684] netlink: 60 bytes leftover after parsing attributes in process `syz.3.16662'. [ 1598.976308][T25684] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16662'. [ 1599.503360][T25691] netlink: 'syz.1.16663': attribute type 2 has an invalid length. [ 1599.503405][T25691] netlink: 'syz.1.16663': attribute type 2 has an invalid length. [ 1600.111837][T25713] bridge5: entered promiscuous mode [ 1600.128991][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16669'. [ 1600.335071][T25726] netlink: 'syz.1.16671': attribute type 6 has an invalid length. [ 1600.354972][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1600.401333][T25728] pim6reg99999999: entered allmulticast mode [ 1600.442923][T25727] netlink: 'syz.2.16673': attribute type 14 has an invalid length. [ 1600.442968][T25727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16673'. [ 1600.472871][T25727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1600.674275][ C0] net_ratelimit: 6 callbacks suppressed [ 1600.674322][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1600.709304][T25743] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16676'. [ 1600.815386][T25738] bond6: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1600.835733][T25738] bond6 (unregistering): Released all slaves [ 1601.058649][T25757] netlink: 'syz.2.16681': attribute type 14 has an invalid length. [ 1601.069481][T25757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16681'. [ 1601.234472][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1601.324954][T25767] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16683'. [ 1601.361018][T25763] macvlan2: entered promiscuous mode [ 1601.405098][T25770] Bluetooth: MGMT ver 1.23 [ 1601.724274][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1601.959989][T25795] netlink: 68 bytes leftover after parsing attributes in process `syz.1.16690'. [ 1602.080010][T25804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.16693'. [ 1602.087685][T25804] openvswitch: netlink: Multiple metadata blocks provided [ 1602.147945][T25808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16694'. [ 1602.150740][T25808] netlink: 'syz.1.16694': attribute type 1 has an invalid length. [ 1602.275360][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1602.563350][T25823] netlink: 'syz.0.16696': attribute type 14 has an invalid length. [ 1602.564845][T25823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1602.585976][T16367] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1602.650957][T16367] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1602.758426][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1602.876948][ T5629] block nbd1: Receive control failed (result -32) [ 1602.891959][ T1222] block nbd1: Receive control failed (result -32) [ 1603.211952][T25828] dummy0 (unregistering): left allmulticast mode [ 1603.211999][T25828] dummy0 (unregistering): left promiscuous mode [ 1603.213328][T25828] bridge0: port 3(dummy0) entered disabled state [ 1603.314393][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1603.442168][T25837] ÿ: renamed from bond_slave_0 (while UP) [ 1603.528851][T25846] syzkaller0: entered promiscuous mode [ 1603.537309][T25846] syzkaller0: entered allmulticast mode [ 1603.672116][T25850] openvswitch: netlink: Multiple metadata blocks provided [ 1603.700709][T25852] netlink: 'syz.4.16706': attribute type 1 has an invalid length. [ 1603.797655][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1603.931899][T25855] netlink: 'syz.3.16707': attribute type 13 has an invalid length. [ 1603.931936][T25855] __nla_validate_parse: 7 callbacks suppressed [ 1603.931962][T25855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16707'. [ 1603.932945][T25855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.282418][T25863] netlink: 292 bytes leftover after parsing attributes in process `syz.0.16708'. [ 1604.354279][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1604.425255][T25872] netlink: 68 bytes leftover after parsing attributes in process `syz.2.16710'. [ 1604.443181][T25874] netlink: 96 bytes leftover after parsing attributes in process `syz.0.16708'. [ 1604.569892][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16712'. [ 1604.569948][T25880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16712'. [ 1604.839424][T25890] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1605.155499][T25909] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16720'. [ 1605.390310][T25891] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1605.390357][T25891] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1605.390595][T25891] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 1605.544591][T25929] tipc: Started in network mode [ 1605.549713][T25929] tipc: Node identity a6e1c7fa04c5, cluster identity 4711 [ 1605.558876][T25929] tipc: Enabled bearer , priority 0 [ 1605.691429][T25912] tipc: Disabling bearer [ 1605.884304][ C0] net_ratelimit: 3 callbacks suppressed [ 1605.884357][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1606.031889][T25950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.16726'. [ 1606.434379][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1606.914288][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1607.474451][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1607.971210][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1608.514293][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1609.013752][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1609.566048][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1610.044907][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1610.594901][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1611.088787][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1611.634328][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1612.133637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1612.674385][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1613.173560][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1613.714420][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1613.890743][T25978] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 1614.076144][T25987] netlink: 9 bytes leftover after parsing attributes in process `syz.4.16738'. [ 1614.152803][T25988] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16736'. [ 1614.153096][T25991] netlink: 'syz.2.16739': attribute type 3 has an invalid length. [ 1614.153113][T25991] netlink: 152 bytes leftover after parsing attributes in process `syz.2.16739'. [ 1614.194265][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1614.387931][T26002] netlink: 296 bytes leftover after parsing attributes in process `syz.4.16742'. [ 1614.486636][T26006] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16742'. [ 1614.689188][T26008] lo: Caught tx_queue_len zero misconfig [ 1614.754365][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1614.992997][T26016] netlink: 24 bytes leftover after parsing attributes in process `syz.1.16746'. [ 1615.069357][T26008] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16744'. [ 1615.166987][T26008] hsr_slave_1 (unregistering): left promiscuous mode [ 1615.234964][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1615.307991][T26037] netlink: 24 bytes leftover after parsing attributes in process `syz.4.16752'. [ 1615.406214][T26038] openvswitch: netlink: Multiple metadata blocks provided [ 1616.284311][ C0] net_ratelimit: 1 callbacks suppressed [ 1616.284368][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1616.834356][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1616.932927][T26072] netlink: 44 bytes leftover after parsing attributes in process `syz.1.16760'. [ 1616.951826][T26072] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16760'. [ 1617.314275][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1617.468198][T26091] netlink: 'syz.3.16768': attribute type 1 has an invalid length. [ 1617.480671][T26091] netlink: 'syz.3.16768': attribute type 4 has an invalid length. [ 1617.874278][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1618.059285][T26113] bond5: entered promiscuous mode [ 1618.065130][T26113] bond5: entered allmulticast mode [ 1618.070836][T26113] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1618.159731][T26118] FAULT_INJECTION: forcing a failure. [ 1618.159731][T26118] name failslab, interval 1, probability 0, space 0, times 0 [ 1618.159790][T26118] CPU: 0 UID: 0 PID: 26118 Comm: syz.1.16776 Not tainted syzkaller #0 PREEMPT(full) [ 1618.159811][T26118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1618.159822][T26118] Call Trace: [ 1618.159830][T26118] [ 1618.159837][T26118] dump_stack_lvl+0xe8/0x150 [ 1618.159863][T26118] should_fail_ex+0x410/0x560 [ 1618.159893][T26118] should_failslab+0xa8/0x100 [ 1618.159915][T26118] ? skb_clone+0x212/0x3a0 [ 1618.159936][T26118] kmem_cache_alloc_noprof+0xa1/0x600 [ 1618.159964][T26118] ? skb_clone+0x212/0x3a0 [ 1618.159989][T26118] skb_clone+0x212/0x3a0 [ 1618.160013][T26118] __netlink_deliver_tap+0x413/0x860 [ 1618.160047][T26118] ? netlink_deliver_tap+0x2e/0x1b0 [ 1618.160070][T26118] netlink_deliver_tap+0x19c/0x1b0 [ 1618.160094][T26118] netlink_unicast+0x781/0x940 [ 1618.160124][T26118] netlink_sendmsg+0x813/0xb40 [ 1618.160155][T26118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1618.160185][T26118] ? apparmor_socket_sendmsg+0x98/0x360 [ 1618.160214][T26118] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1618.160236][T26118] sock_sendmsg_nosec+0x13a/0x180 [ 1618.160263][T26118] ____sys_sendmsg+0x54e/0x850 [ 1618.160288][T26118] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1618.160316][T26118] ? import_iovec+0x73/0xa0 [ 1618.160340][T26118] ___sys_sendmsg+0x2a5/0x360 [ 1618.160358][T26118] ? __lock_acquire+0x6df/0x2e50 [ 1618.160381][T26118] ? __pfx____sys_sendmsg+0x10/0x10 [ 1618.160435][T26118] ? __fget_files+0x2a/0x420 [ 1618.160458][T26118] ? __fget_files+0x3a2/0x420 [ 1618.160489][T26118] __x64_sys_sendmsg+0x1b1/0x290 [ 1618.160513][T26118] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1618.160553][T26118] do_syscall_64+0x166/0x520 [ 1618.160579][T26118] ? trace_irq_disable+0x3b/0x140 [ 1618.160595][T26118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.160613][T26118] ? clear_bhb_loop+0x70/0xc0 [ 1618.160636][T26118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1618.160662][T26118] RIP: 0033:0x7fc47199e159 [ 1618.160680][T26118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1618.160695][T26118] RSP: 002b:00007fc4727e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1618.160715][T26118] RAX: ffffffffffffffda RBX: 00007fc471c25fa0 RCX: 00007fc47199e159 [ 1618.160728][T26118] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1618.160741][T26118] RBP: 00007fc4727e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1618.160753][T26118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1618.160764][T26118] R13: 00007fc471c26038 R14: 00007fc471c25fa0 R15: 00007ffeddadbe48 [ 1618.160794][T26118] [ 1618.166592][T26118] openvswitch: netlink: Multiple metadata blocks provided [ 1618.364294][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1618.409695][T26120] syzkaller0: left promiscuous mode [ 1618.409719][T26120] syzkaller0: left allmulticast mode [ 1618.914684][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1619.118936][T26151] vlan0: entered promiscuous mode [ 1619.118977][T26151] gretap0: entered promiscuous mode [ 1619.273865][T26159] vlan0: entered promiscuous mode [ 1619.394263][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1619.533530][T26164] __nla_validate_parse: 5 callbacks suppressed [ 1619.533585][T26164] netlink: 48 bytes leftover after parsing attributes in process `syz.4.16787'. [ 1619.663230][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16792'. [ 1619.872677][T26188] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16798'. [ 1619.891722][T26186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16796'. [ 1619.902776][T26188] openvswitch: netlink: Multiple metadata blocks provided [ 1619.954274][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1620.527058][T26210] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16805'. [ 1620.630332][T26220] dvmrp0: entered allmulticast mode [ 1620.645114][T26220] dvmrp1: entered allmulticast mode [ 1620.653560][T26220] dvmrp0: left allmulticast mode [ 1620.658887][T26220] dvmrp1: left allmulticast mode [ 1620.776794][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16811'. [ 1620.776846][T26225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16811'. [ 1620.789367][T26223] netlink: 32 bytes leftover after parsing attributes in process `syz.2.16809'. [ 1620.810729][T26225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16811'. [ 1620.810780][T26225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16811'. [ 1621.134120][T26235] veth1: entered allmulticast mode [ 1621.139854][T26238] 8021q: VLANs not supported on ip_vti0 [ 1621.474409][ C0] net_ratelimit: 2 callbacks suppressed [ 1621.474464][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1621.632917][T26269] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1621.881937][T26280] netlink: 'syz.0.16824': attribute type 1 has an invalid length. [ 1622.034270][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1622.370058][T26295] FAULT_INJECTION: forcing a failure. [ 1622.370058][T26295] name failslab, interval 1, probability 0, space 0, times 0 [ 1622.370202][T26295] CPU: 0 UID: 0 PID: 26295 Comm: syz.3.16833 Not tainted syzkaller #0 PREEMPT(full) [ 1622.370224][T26295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1622.370236][T26295] Call Trace: [ 1622.370245][T26295] [ 1622.370253][T26295] dump_stack_lvl+0xe8/0x150 [ 1622.370284][T26295] should_fail_ex+0x410/0x560 [ 1622.370317][T26295] should_failslab+0xa8/0x100 [ 1622.370340][T26295] __kmalloc_cache_noprof+0xa3/0x600 [ 1622.370369][T26295] ? __raw_spin_lock_init+0x45/0x100 [ 1622.370388][T26295] ? ovs_flow_cmd_new+0x317/0xea0 [ 1622.370407][T26295] ? ovs_flow_cmd_new+0x317/0xea0 [ 1622.370436][T26295] ovs_flow_cmd_new+0x317/0xea0 [ 1622.370463][T26295] ? __kasan_kmalloc+0x93/0xb0 [ 1622.370486][T26295] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1622.370557][T26295] ? __kmalloc_noprof+0x38c/0x720 [ 1622.370586][T26295] ? __nla_parse+0x40/0x60 [ 1622.370610][T26295] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1622.370637][T26295] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1622.370684][T26295] genl_family_rcv_msg_doit+0x233/0x340 [ 1622.370718][T26295] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1622.370756][T26295] ? bpf_lsm_capable+0x9/0x20 [ 1622.370780][T26295] ? security_capable+0x7e/0x2c0 [ 1622.370805][T26295] genl_rcv_msg+0x614/0x7a0 [ 1622.370838][T26295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1622.370862][T26295] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1622.370900][T26295] netlink_rcv_skb+0x226/0x4a0 [ 1622.370923][T26295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1622.370950][T26295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1622.370986][T26295] ? down_read+0x2be/0x330 [ 1622.371008][T26295] genl_rcv+0x28/0x40 [ 1622.371032][T26295] netlink_unicast+0x7bd/0x940 [ 1622.371065][T26295] netlink_sendmsg+0x813/0xb40 [ 1622.371096][T26295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.371125][T26295] ? apparmor_socket_sendmsg+0x98/0x360 [ 1622.371154][T26295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1622.371174][T26295] sock_sendmsg_nosec+0x13a/0x180 [ 1622.371202][T26295] ____sys_sendmsg+0x54e/0x850 [ 1622.371227][T26295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1622.371255][T26295] ? import_iovec+0x73/0xa0 [ 1622.371278][T26295] ___sys_sendmsg+0x2a5/0x360 [ 1622.371296][T26295] ? __lock_acquire+0x6df/0x2e50 [ 1622.371318][T26295] ? __pfx____sys_sendmsg+0x10/0x10 [ 1622.371372][T26295] ? __fget_files+0x2a/0x420 [ 1622.371394][T26295] ? __fget_files+0x3a2/0x420 [ 1622.371427][T26295] __x64_sys_sendmsg+0x1b1/0x290 [ 1622.371449][T26295] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1622.371489][T26295] do_syscall_64+0x166/0x520 [ 1622.371513][T26295] ? trace_irq_disable+0x3b/0x140 [ 1622.371531][T26295] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.371550][T26295] ? clear_bhb_loop+0x70/0xc0 [ 1622.371572][T26295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1622.371591][T26295] RIP: 0033:0x7f6597d9e159 [ 1622.371609][T26295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1622.371625][T26295] RSP: 002b:00007f6595ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1622.371646][T26295] RAX: ffffffffffffffda RBX: 00007f6598025fa0 RCX: 00007f6597d9e159 [ 1622.371660][T26295] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1622.371678][T26295] RBP: 00007f6595ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1622.371690][T26295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1622.371701][T26295] R13: 00007f6598026038 R14: 00007f6598025fa0 R15: 00007ffe22fc2728 [ 1622.371732][T26295] [ 1622.524307][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1623.012470][T26317] netlink: 'syz.4.16837': attribute type 1 has an invalid length. [ 1623.074292][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1623.129906][T26322] openvswitch: netlink: Multiple metadata blocks provided [ 1623.465559][T26332] openvswitch: netlink: Multiple metadata blocks provided [ 1623.465647][T26332] FAULT_INJECTION: forcing a failure. [ 1623.465647][T26332] name failslab, interval 1, probability 0, space 0, times 0 [ 1623.467384][T26332] CPU: 0 UID: 0 PID: 26332 Comm: syz.0.16845 Not tainted syzkaller #0 PREEMPT(full) [ 1623.467409][T26332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1623.467420][T26332] Call Trace: [ 1623.467428][T26332] [ 1623.467436][T26332] dump_stack_lvl+0xe8/0x150 [ 1623.467468][T26332] should_fail_ex+0x410/0x560 [ 1623.467499][T26332] ? __alloc_skb+0x1db/0x7a0 [ 1623.467527][T26332] should_failslab+0xa8/0x100 [ 1623.467551][T26332] ? __alloc_skb+0x1db/0x7a0 [ 1623.467576][T26332] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1623.467603][T26332] ? __alloc_skb+0x18d/0x7a0 [ 1623.467630][T26332] ? __alloc_skb+0x1db/0x7a0 [ 1623.467663][T26332] __alloc_skb+0x1db/0x7a0 [ 1623.467693][T26332] netlink_ack+0x136/0xb30 [ 1623.467714][T26332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1623.467757][T26332] netlink_rcv_skb+0x2a4/0x4a0 [ 1623.467780][T26332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1623.467808][T26332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1623.467846][T26332] ? down_read+0x2be/0x330 [ 1623.467869][T26332] genl_rcv+0x28/0x40 [ 1623.467893][T26332] netlink_unicast+0x7bd/0x940 [ 1623.467925][T26332] netlink_sendmsg+0x813/0xb40 [ 1623.467957][T26332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1623.467987][T26332] ? apparmor_socket_sendmsg+0x98/0x360 [ 1623.468018][T26332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1623.468040][T26332] sock_sendmsg_nosec+0x13a/0x180 [ 1623.468069][T26332] ____sys_sendmsg+0x54e/0x850 [ 1623.468094][T26332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1623.468124][T26332] ? import_iovec+0x73/0xa0 [ 1623.468158][T26332] ___sys_sendmsg+0x2a5/0x360 [ 1623.468177][T26332] ? __lock_acquire+0x6df/0x2e50 [ 1623.468200][T26332] ? __pfx____sys_sendmsg+0x10/0x10 [ 1623.468258][T26332] ? __fget_files+0x2a/0x420 [ 1623.468285][T26332] ? __fget_files+0x3a2/0x420 [ 1623.468318][T26332] __x64_sys_sendmsg+0x1b1/0x290 [ 1623.468342][T26332] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1623.468384][T26332] do_syscall_64+0x166/0x520 [ 1623.468409][T26332] ? trace_irq_disable+0x3b/0x140 [ 1623.468426][T26332] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.468446][T26332] ? clear_bhb_loop+0x70/0xc0 [ 1623.468469][T26332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1623.468488][T26332] RIP: 0033:0x7f1d2139e159 [ 1623.468506][T26332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1623.468523][T26332] RSP: 002b:00007f1d22191028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1623.468543][T26332] RAX: ffffffffffffffda RBX: 00007f1d21625fa0 RCX: 00007f1d2139e159 [ 1623.468558][T26332] RDX: 0000000004008094 RSI: 0000200000000100 RDI: 0000000000000005 [ 1623.468571][T26332] RBP: 00007f1d22191090 R08: 0000000000000000 R09: 0000000000000000 [ 1623.468584][T26332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1623.468596][T26332] R13: 00007f1d21626038 R14: 00007f1d21625fa0 R15: 00007fff67ffbfe8 [ 1623.468627][T26332] [ 1623.564279][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1624.114289][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1624.242269][T26349] syzkaller0: entered promiscuous mode [ 1624.242314][T26349] syzkaller0: entered allmulticast mode [ 1624.594307][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1624.822924][T26369] __nla_validate_parse: 21 callbacks suppressed [ 1624.822984][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16856'. [ 1624.988916][T26369] ovs-system: left promiscuous mode [ 1625.301286][T26381] netlink: 140 bytes leftover after parsing attributes in process `syz.2.16859'. [ 1626.332559][T26415] netlink: 140 bytes leftover after parsing attributes in process `syz.0.16873'. [ 1626.428346][T26416] netlink: 'syz.2.16874': attribute type 1 has an invalid length. [ 1626.560920][T26416] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1626.620138][T26416] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16874'. [ 1626.675589][ C0] net_ratelimit: 3 callbacks suppressed [ 1626.675637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1626.706440][T26426] bond6: (slave geneve2): making interface the new active one [ 1626.716877][T26426] bond6: (slave geneve2): Enslaving as an active interface with an up link [ 1626.966730][T19003] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.082977][T19007] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.083069][T19007] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.083119][T19007] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1627.234329][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1627.298574][T26443] netlink: 4 bytes leftover after parsing attributes in process `syz.3.16883'. [ 1627.756924][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.274434][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1628.834748][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1629.115905][T26516] netlink: 332 bytes leftover after parsing attributes in process `syz.1.16900'. [ 1629.314382][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1629.401176][T26525] netlink: 'syz.0.16902': attribute type 14 has an invalid length. [ 1629.414484][T26525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16902'. [ 1629.483083][T26526] netlink: 'syz.3.16901': attribute type 1 has an invalid length. [ 1629.554236][T26526] IPVS: set_ctl: invalid protocol: 70 10.1.1.1:20001 [ 1629.823547][T26526] veth7: entered allmulticast mode [ 1629.884524][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1630.385295][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1630.520397][T26557] tls_set_device_offload_rx: netdev not found [ 1630.924680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1631.243586][T26571] netlink: 'syz.3.16914': attribute type 14 has an invalid length. [ 1631.243634][T26571] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16914'. [ 1631.394360][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1631.632107][T26590] hsr0 speed is unknown, defaulting to 1000 [ 1631.651022][T26590] lo speed is unknown, defaulting to 1000 [ 1631.862792][T26599] FAULT_INJECTION: forcing a failure. [ 1631.862792][T26599] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.862846][T26599] CPU: 0 UID: 0 PID: 26599 Comm: syz.1.16922 Not tainted syzkaller #0 PREEMPT(full) [ 1631.862866][T26599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1631.862876][T26599] Call Trace: [ 1631.862882][T26599] [ 1631.862888][T26599] dump_stack_lvl+0xe8/0x150 [ 1631.862915][T26599] should_fail_ex+0x410/0x560 [ 1631.862946][T26599] should_failslab+0xa8/0x100 [ 1631.862969][T26599] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1631.862999][T26599] ? llcp_sock_bind+0x377/0x780 [ 1631.863025][T26599] ? llcp_sock_bind+0x377/0x780 [ 1631.863054][T26599] kmemdup_noprof+0x2b/0x70 [ 1631.863075][T26599] llcp_sock_bind+0x377/0x780 [ 1631.863106][T26599] ? __pfx_llcp_sock_bind+0x10/0x10 [ 1631.863141][T26599] ? apparmor_socket_bind+0x147/0x210 [ 1631.863174][T26599] ? bpf_lsm_socket_bind+0x9/0x20 [ 1631.863200][T26599] __sys_bind+0x2e3/0x410 [ 1631.863227][T26599] ? __pfx___sys_bind+0x10/0x10 [ 1631.863264][T26599] ? __pfx_ksys_write+0x10/0x10 [ 1631.863297][T26599] __x64_sys_bind+0x7a/0x90 [ 1631.863330][T26599] do_syscall_64+0x166/0x520 [ 1631.863356][T26599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.863375][T26599] ? clear_bhb_loop+0x70/0xc0 [ 1631.863397][T26599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.863415][T26599] RIP: 0033:0x7fc47199e159 [ 1631.863432][T26599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.863448][T26599] RSP: 002b:00007fc4727e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1631.863467][T26599] RAX: ffffffffffffffda RBX: 00007fc471c25fa0 RCX: 00007fc47199e159 [ 1631.863481][T26599] RDX: 0000000000000060 RSI: 0000200000000280 RDI: 0000000000000004 [ 1631.863493][T26599] RBP: 00007fc4727e7090 R08: 0000000000000000 R09: 0000000000000000 [ 1631.863505][T26599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.863515][T26599] R13: 00007fc471c26038 R14: 00007fc471c25fa0 R15: 00007ffeddadbe48 [ 1631.863545][T26599] [ 1631.964489][ C0] net_ratelimit: 1 callbacks suppressed [ 1631.964510][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1632.122577][T26595] hsr0 speed is unknown, defaulting to 1000 [ 1632.131119][T26595] lo speed is unknown, defaulting to 1000 [ 1632.188379][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16924'. [ 1632.248137][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16924'. [ 1632.434553][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1632.828753][T26625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16928'. [ 1632.990333][T26625] bond6: entered promiscuous mode [ 1632.990404][T26625] bond6: entered allmulticast mode [ 1632.990776][T26625] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1633.005132][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1633.339857][T26633] netlink: 'syz.0.16931': attribute type 14 has an invalid length. [ 1633.360820][T26633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16931'. [ 1633.478051][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1633.699734][T26642] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16933'. [ 1633.760215][T26640] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1633.975612][T26642] bond8: option broadcast_neighbor: invalid value (3) [ 1633.989967][T26642] bond8 (unregistering): Released all slaves [ 1634.044407][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1634.259131][T26653] netlink: 140 bytes leftover after parsing attributes in process `syz.3.16938'. [ 1634.268904][T26653] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16938'. [ 1634.403610][T26657] netlink: 'syz.1.16939': attribute type 11 has an invalid length. [ 1634.403656][T26657] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16939'. [ 1634.514409][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1634.722241][T26671] netlink: 'syz.1.16944': attribute type 13 has an invalid length. [ 1634.730596][T26671] netlink: 8 bytes leftover after parsing attributes in process `syz.1.16944'. [ 1634.740953][T26671] bond0: option fail_over_mac: invalid value (155) [ 1635.084439][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 1635.434325][T26699] bridge0: port 1(veth0) entered blocking state [ 1635.441623][T26699] bridge0: port 1(veth0) entered disabled state [ 1635.451037][T26699] veth0: entered allmulticast mode [ 1635.470709][T26699] veth0: entered promiscuous mode [ 1635.476972][T26699] bridge0: port 1(veth0) entered blocking state [ 1635.477100][T26699] bridge0: port 1(veth0) entered forwarding state [ 1635.508337][T26703] bridge0: port 2(veth1) entered blocking state [ 1635.508458][T26703] bridge0: port 2(veth1) entered disabled state [ 1635.508640][T26703] veth1: entered allmulticast mode [ 1635.527919][T26703] veth1: entered promiscuous mode [ 1635.528504][T26703] bridge0: port 2(veth1) entered blocking state [ 1635.528606][T26703] bridge0: port 2(veth1) entered forwarding state [ 1635.536096][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1635.536692][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1635.537124][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.964310][ C1] net_ratelimit: 11008 callbacks suppressed [ 1636.964350][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.964365][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1636.964606][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1636.964608][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1636.964846][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.964852][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1636.965084][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1636.965137][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1636.965325][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1636.965379][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1641.974221][ C0] net_ratelimit: 40986 callbacks suppressed [ 1641.974287][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1641.974405][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1641.974548][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1641.974696][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1641.974795][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.974952][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1641.975046][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1641.975210][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1641.975307][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1641.975510][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1643.352728][ C0] sched: DL replenish lagged too much [ 1646.984243][ C1] net_ratelimit: 40644 callbacks suppressed [ 1646.984299][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1646.984358][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.984554][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1646.984611][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1646.984802][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1646.984858][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1646.985058][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1646.985107][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1646.985361][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1646.985367][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.994425][ C1] net_ratelimit: 40561 callbacks suppressed [ 1651.994438][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1651.994481][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1651.994730][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1651.994753][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1651.994991][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1651.995003][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.995240][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1651.995250][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1651.995488][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1651.995505][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1657.004238][ C1] net_ratelimit: 40701 callbacks suppressed [ 1657.004292][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1657.004321][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1657.004575][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1657.004581][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1657.004828][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1657.004854][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1657.005091][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1657.005123][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1657.005339][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1657.005476][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1660.999763][ T5629] Bluetooth: hci5: command 0x0406 tx timeout [ 1662.014337][ C0] net_ratelimit: 40606 callbacks suppressed [ 1662.014394][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1662.014443][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1662.014650][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1662.014693][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1662.014893][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1662.014987][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1662.015140][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1662.015235][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1662.015434][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1662.015480][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1667.024292][ C1] net_ratelimit: 41201 callbacks suppressed [ 1667.024303][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1667.024346][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1667.024578][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1667.024597][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1667.024827][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1667.024847][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1667.025067][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1667.025104][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1667.025308][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1667.025355][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1668.842777][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1672.034314][ C0] net_ratelimit: 40618 callbacks suppressed [ 1672.034344][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1672.034391][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1672.034651][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1672.034663][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1672.034909][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1672.034914][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1672.035159][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1672.035173][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1672.035421][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1672.035450][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1677.044313][ C1] net_ratelimit: 40991 callbacks suppressed [ 1677.044335][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1677.044366][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1677.044596][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1677.044608][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1677.044844][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1677.044850][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1677.045105][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1677.045140][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1677.045341][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1677.045397][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1682.054278][ C0] net_ratelimit: 42225 callbacks suppressed [ 1682.054301][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1682.054332][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1682.054556][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1682.054582][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1682.054787][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1682.054826][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1682.055071][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1682.055097][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1682.055318][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1682.055333][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1687.064362][ C1] net_ratelimit: 42310 callbacks suppressed [ 1687.064380][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1687.064385][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1687.064617][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1687.064633][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1687.064857][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1687.064879][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1687.065089][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1687.065132][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1687.065326][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1687.065377][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1692.074278][ C1] net_ratelimit: 40870 callbacks suppressed [ 1692.074301][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1692.074330][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1692.074566][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.074566][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1692.074848][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1692.074858][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1692.075085][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1692.075108][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1692.075320][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1692.075422][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1697.084395][ C0] net_ratelimit: 41010 callbacks suppressed [ 1697.084403][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1697.084417][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1697.084653][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1697.084692][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1697.084908][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1697.084927][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.085161][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1697.085164][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1697.085384][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1697.085410][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1702.094346][ C1] net_ratelimit: 40244 callbacks suppressed [ 1702.094352][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1702.094368][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1702.094620][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1702.094642][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1702.094864][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1702.094882][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1702.095117][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1702.095137][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1702.095363][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1702.095371][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1707.104210][ C0] net_ratelimit: 40717 callbacks suppressed [ 1707.104232][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1707.104249][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1707.104503][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1707.104508][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1707.104748][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1707.104983][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1707.105266][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1707.105536][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1707.105782][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1707.106023][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1712.114273][ C1] net_ratelimit: 39614 callbacks suppressed [ 1712.114296][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1712.114309][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1712.114548][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1712.114561][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1712.114807][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1712.114817][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1712.115075][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1712.115080][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1712.115320][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1712.115326][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.124206][ C0] net_ratelimit: 40112 callbacks suppressed [ 1717.124224][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.124258][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.124541][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1717.124560][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1717.124790][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1717.124815][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.125037][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.125082][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1717.125292][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1717.125344][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1722.134365][ C0] net_ratelimit: 40171 callbacks suppressed [ 1722.134410][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.134413][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.134678][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1722.134692][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1722.134927][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.134946][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1722.135189][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.135199][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1722.135440][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1722.135460][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1727.144274][ C0] net_ratelimit: 40851 callbacks suppressed [ 1727.144297][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.144367][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1727.144557][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1727.144619][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.144800][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.144869][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1727.145052][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1727.145122][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1727.145292][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1727.145375][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.154314][ C0] net_ratelimit: 40265 callbacks suppressed [ 1732.154337][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.154493][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1732.154590][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1732.154750][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.154824][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.155046][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1732.155081][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1732.155304][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1732.155327][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1732.155557][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.164340][ C1] net_ratelimit: 40509 callbacks suppressed [ 1737.164364][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1737.164418][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1737.164617][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.164653][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1737.164864][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.164888][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.165141][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1737.165149][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1737.165373][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1737.165388][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.174300][ C1] net_ratelimit: 40315 callbacks suppressed [ 1742.174350][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1742.174349][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1742.174591][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.174623][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.174846][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.174890][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1742.175141][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1742.175157][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1742.175391][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1742.175445][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.184440][ C1] net_ratelimit: 41045 callbacks suppressed [ 1747.184457][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.184461][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1747.184679][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.184726][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1747.184902][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.184970][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1747.185137][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1747.185229][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.185367][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1747.185482][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1752.194409][ C1] net_ratelimit: 41313 callbacks suppressed [ 1752.194409][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1752.194431][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1752.194670][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1752.194679][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.194926][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.194937][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.195203][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1752.195219][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1752.195454][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1752.195461][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.204253][ C0] net_ratelimit: 41430 callbacks suppressed [ 1757.204276][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.204299][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.204517][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1757.204539][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.204754][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.204835][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1757.204992][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1757.205077][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1757.205220][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1757.205314][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.214216][ C0] net_ratelimit: 41636 callbacks suppressed [ 1762.214239][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.214278][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1762.214482][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1762.214523][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.214719][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1762.214773][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.215000][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1762.215023][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1762.215237][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1762.215273][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.224221][ C1] net_ratelimit: 41307 callbacks suppressed [ 1767.224251][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.224249][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1767.224488][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.224491][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.224733][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1767.224740][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1767.224966][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.224966][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.225209][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1767.225243][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1772.234385][ C1] net_ratelimit: 41737 callbacks suppressed [ 1772.234407][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.234411][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.234656][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1772.234673][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1772.234899][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.234914][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.235138][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1772.235170][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1772.235378][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1772.235458][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1776.360072][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1777.244213][ C1] net_ratelimit: 42262 callbacks suppressed [ 1777.244236][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1777.244300][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1777.244486][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.244545][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.244769][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.244930][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1777.244941][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.245144][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1777.245175][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1777.245381][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.254365][ C0] net_ratelimit: 43039 callbacks suppressed [ 1782.254389][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1782.254451][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.254634][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.254712][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1782.254919][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1782.254961][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1782.255172][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1782.255221][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1782.255425][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1782.255505][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.264213][ C0] net_ratelimit: 42819 callbacks suppressed [ 1787.264236][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1787.264265][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.264468][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1787.264511][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1787.264705][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1787.264776][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.264934][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.265012][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1787.265153][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1787.265249][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.274255][ C0] net_ratelimit: 44524 callbacks suppressed [ 1792.274278][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.274285][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1792.274466][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1792.274516][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.274689][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.274759][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1792.274923][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1792.274989][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1792.275147][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1792.275223][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1797.284239][ C0] net_ratelimit: 44047 callbacks suppressed [ 1797.284262][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.284425][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1797.284574][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1797.284658][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.284826][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1797.284896][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1797.285075][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1797.285161][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.285322][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1797.285404][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1801.963913][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1802.294302][ C0] net_ratelimit: 44390 callbacks suppressed [ 1802.294325][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1802.294390][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.294568][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.294626][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1802.294848][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.295046][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1802.295211][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.295383][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1802.295585][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1802.295771][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1807.304398][ C1] net_ratelimit: 44621 callbacks suppressed [ 1807.304421][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.304658][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1807.304893][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.305122][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1807.305153][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1807.305353][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.305419][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1807.305586][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1807.305669][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1807.305824][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.314330][ C0] net_ratelimit: 44241 callbacks suppressed [ 1812.314341][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.314351][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.314535][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1812.314584][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1812.314756][ C0] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.314824][ C1] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1812.315028][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1812.315057][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:18, vlan:0) [ 1812.315281][ C0] bridge0: received packet on veth0 with own address as source address (addr:aa:aa:aa:aa:aa:19, vlan:0) [ 1812.315306][ C1] bridge0: received packet on veth1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 1813.501020][ T32] INFO: task kworker/R-nfc2_:26716 blocked for more than 143 seconds. [ 1813.501047][ T32] Not tainted syzkaller #0 [ 1813.501058][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1813.501067][ T32] task:kworker/R-nfc2_ state:D stack:30968 pid:26716 tgid:26716 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1813.501136][ T32] Call Trace: [ 1813.501144][ T32] [ 1813.501158][ T32] __schedule+0x17db/0x58f0 [ 1813.501192][ T32] ? __lock_acquire+0x6df/0x2e50 [ 1813.501223][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 1813.501246][ T32] ? lock_acquire+0x115/0x350 [ 1813.501276][ T32] ? __pfx___schedule+0x10/0x10 [ 1813.501298][ T32] ? lock_acquire+0x115/0x350 [ 1813.501326][ T32] ? schedule+0x90/0x2b0 [ 1813.501355][ T32] schedule+0x164/0x2b0 [ 1813.501382][ T32] schedule_preempt_disabled+0x13/0x30 [ 1813.501406][ T32] kthread+0x260/0x480 [ 1813.501426][ T32] ? __pfx_rescuer_thread+0x10/0x10 [ 1813.501451][ T32] ? __pfx_kthread+0x10/0x10 [ 1813.501472][ T32] ret_from_fork+0x514/0xb70 [ 1813.501495][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1813.501524][ T32] ? __switch_to+0xc89/0x1420 [ 1813.501554][ T32] ? __pfx_kthread+0x10/0x10 [ 1813.501575][ T32] ret_from_fork_asm+0x1a/0x30 [ 1813.501618][ T32] [ 1813.501646][ T32] [ 1813.501646][ T32] Showing all locks held in the system: [ 1813.501654][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 1813.501667][ T32] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.501726][ T32] locks held by kworker/0:0/9: 3, last CPU#0: [ 1813.501739][ T32] #0: ffff888056ce9940 ((wq_completion)wg-kex-wg1#37){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.501794][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.501855][ T32] #2: ffff88804e675440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 1813.501907][ T32] locks held by kworker/u8:1/13: 2, last CPU#0: [ 1813.501920][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.501969][ T32] #1: ffffc90000127c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.502021][ T32] locks held by pr/ttyS0/16: 1, last CPU#1: [ 1813.502034][ T32] #0: ffffffff8ec362b8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 1813.502090][ T32] locks held by khungtaskd/32: 1, last CPU#1: [ 1813.502103][ T32] #0: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1813.502150][ T32] locks held by kworker/u8:4/59: 5, last CPU#1: [ 1813.502163][ T32] #0: ffff888020a97940 ((wq_completion)writeback){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.502212][ T32] #1: ffffc9000200fc40 ((work_completion)(&(&wb->dwork)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.502263][ T32] #2: ffff888035adc0e8 (&type->s_umount_key#34){++++}-{4:4}, at: super_trylock_shared+0x23/0xf0 [ 1813.502317][ T32] #3: ffff888035adac98 (&sbi->s_writepages_rwsem){++++}-{0:0}, at: ext4_writepages+0x205/0x3b0 [ 1813.502369][ T32] #4: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.502422][ T32] locks held by kswapd0/86: 2, last CPU#1: [ 1813.502435][ T32] #0: ffffffff8ee8f980 (fs_reclaim){+.+.}-{0:0}, at: kswapd+0xa08/0x32c0 [ 1813.502476][ T32] #1: ffff88807fe3c0e8 (&type->s_umount_key#57){.+.+}-{4:4}, at: super_cache_scan+0x94/0x500 [ 1813.502534][ T32] locks held by kworker/u8:5/99: 4, last CPU#1: [ 1813.502547][ T32] #0: ffff8880792a2940 ((wq_completion)krds_cp_wq#8/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.502595][ T32] #1: ffffc9000201fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.502644][ T32] #2: ffff888092c6b980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.502690][ T32] #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.502760][ T32] locks held by udevd/4984: 2, last CPU#1: [ 1813.502773][ T32] #0: ffffffff8f4ef978 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1813.502826][ T32] #1: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.502877][ T32] locks held by dhcpcd/5278: 2, last CPU#1: [ 1813.502891][ T32] #0: ffffffff8f4ef978 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 1813.502949][ T32] #1: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.503001][ T32] locks held by dhcpcd/5279: 2, last CPU#0: [ 1813.503014][ T32] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.503063][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1813.503116][ T32] locks held by crond/5354: 1, last CPU#0: [ 1813.503128][ T32] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.503178][ T32] locks held by getty/5368: 2, on CPU#0: [ 1813.503191][ T32] #0: ffff888035aae0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1813.503239][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1813.503284][ T32] locks held by syz-executor/5602: 2, last CPU#0: [ 1813.503297][ T32] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.503348][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 1813.503399][ T32] locks held by kworker/u8:25/15796: 4, last CPU#1: [ 1813.503413][ T32] #0: ffff888033174940 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.503467][ T32] #1: ffffc90003257c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.503517][ T32] #2: ffff88807b70d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.503569][ T32] #3: ffff88807f295270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.503617][ T32] locks held by kworker/0:9/16361: 3, last CPU#0: [ 1813.503630][ T32] #0: ffff888056ab2540 ((wq_completion)wg-kex-wg0#24){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.503683][ T32] #1: ffffc90005ce7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.503744][ T32] #2: ffff888031bf1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 1813.503795][ T32] locks held by kworker/0:14/16367: 2, last CPU#0: [ 1813.503808][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.503855][ T32] #1: ffffc9000cf97c40 ((work_completion)(&(&gc->dwork)->work)#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.503914][ T32] locks held by kworker/u8:30/23341: 4, last CPU#1: [ 1813.503928][ T32] #0: ffff88807a6ea140 ((wq_completion)wg-kex-wg1#38){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.503981][ T32] #1: ffffc90006817c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.504031][ T32] #2: ffff88804e675440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.504125][ T32] #3: ffff88803166f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.519323][ T32] locks held by kworker/R-bond2/25062: 2, last CPU#0: [ 1813.519346][ T32] #0: ffff88802924b940 ((wq_completion)bond2#6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.519409][ T32] #1: ffffc9000d15fc20 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.519460][ T32] locks held by kworker/R-bond5/25556: 2, last CPU#0: [ 1813.519475][ T32] #0: ffff88802b5fb140 ((wq_completion)bond5#5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.519533][ T32] #1: ffffc90002e47c20 ((work_completion)(&(&bond->ad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.519591][ T32] locks held by kworker/u9:2/1222: 7, on CPU#1: [ 1813.519605][ T32] #0: ffff888052c9e940 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.519653][ T32] #1: ffffc90004717c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.519703][ T32] #2: ffff8880330c8ea0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 1813.519752][ T32] #3: ffff8880330c80b8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1813.519802][ T32] #4: ffffffff903d72c0 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 1813.519846][ T32] #5: ffff8880729582f8 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 1813.519897][ T32] #6: ffffffff8ed62aa8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770 [ 1813.519949][ T32] locks held by kworker/u8:0/4448: 4, last CPU#1: [ 1813.519963][ T32] #0: ffff888033174940 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520018][ T32] #1: ffffc9000e95fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520068][ T32] #2: ffff88807b70d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.520128][ T32] #3: ffff88807f295c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.520178][ T32] locks held by kworker/u8:2/4449: 4, last CPU#1: [ 1813.520192][ T32] #0: ffff888026698140 ((wq_completion)wg-kex-wg0#29){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520246][ T32] #1: ffffc9000e88fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520295][ T32] #2: ffff888054725440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.520345][ T32] #3: ffff88807f292ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.520395][ T32] locks held by kworker/u8:3/4450: 2, last CPU#1: [ 1813.520408][ T32] #0: ffff88801b0ab940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520457][ T32] #1: ffffc9000e867c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520520][ T32] locks held by kworker/0:15/15134: 5, last CPU#0: [ 1813.520534][ T32] #0: ffff88807e538540 ((wq_completion)wg-kex-wg1#46){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520587][ T32] #1: ffffc90006b7fc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520647][ T32] #2: ffff88803352dc58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 1813.520697][ T32] #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.520749][ T32] #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1813.520797][ T32] locks held by kworker/0:18/15137: 3, on CPU#0: [ 1813.520810][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520859][ T32] #1: ffffc90007977c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.520906][ T32] #2: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x6f/0x770 [ 1813.520957][ T32] locks held by kworker/u8:6/16519: 4, last CPU#0: [ 1813.520971][ T32] #0: ffff888026698140 ((wq_completion)wg-kex-wg0#29){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521025][ T32] #1: ffffc9001216fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521082][ T32] #2: ffff888054725440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.521133][ T32] #3: ffff8880292a2ad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.521182][ T32] locks held by kworker/u8:10/16523: 2, last CPU#1: [ 1813.521196][ T32] #0: ffff8880327ed140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521246][ T32] #1: ffffc9000f63fc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521296][ T32] locks held by kworker/u8:11/16524: 3, last CPU#0: [ 1813.521309][ T32] #0: ffff88805355e140 ((wq_completion)krds_cp_wq#18/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521357][ T32] #1: ffffc9001219fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521419][ T32] #2: ffff888092c69e80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.521469][ T32] locks held by syz-executor/17524: 1, last CPU#0: [ 1813.521482][ T32] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.521536][ T32] locks held by kworker/u8:12/18986: 4, last CPU#0: [ 1813.521548][ T32] #0: ffff88804fdb8940 ((wq_completion)wg-kex-wg0#59){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521601][ T32] #1: ffffc9000332fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521650][ T32] #2: ffff88805d265440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.521701][ T32] #3: ffff88803352f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.521751][ T32] locks held by kworker/u8:15/18989: 4, last CPU#0: [ 1813.521764][ T32] #0: ffff888063ae2940 ((wq_completion)krds_cp_wq#18/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521814][ T32] #1: ffffc9000357fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.521863][ T32] #2: ffff888092c6a180 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.521908][ T32] #3: ffff888038928260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1813.521957][ T32] locks held by kworker/u8:16/18990: 4, on CPU#0: [ 1813.521970][ T32] #0: ffff88803b2db140 ((wq_completion)wg-kex-wg0#25){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522024][ T32] #1: ffffc9000361fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522081][ T32] #2: ffff888021e99440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.522131][ T32] #3: ffff88807f290d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.522181][ T32] locks held by kworker/u8:17/18993: 4, last CPU#1: [ 1813.522195][ T32] #0: ffff888033176140 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522248][ T32] #1: ffffc9000364fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522298][ T32] #2: ffff888031b19440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.522348][ T32] #3: ffff88803166b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.522398][ T32] locks held by kworker/u8:18/18994: 4, last CPU#1: [ 1813.522412][ T32] #0: ffff888039596940 ((wq_completion)wg-kex-wg2#39){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522465][ T32] #1: ffffc90003677c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522514][ T32] #2: ffff888063a05440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.522564][ T32] #3: ffff888033529700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.522613][ T32] locks held by kworker/u8:19/18995: 4, last CPU#0: [ 1813.522627][ T32] #0: ffff88807a6ef940 ((wq_completion)wg-kex-wg0#39){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522680][ T32] #1: ffffc90003687c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522730][ T32] #2: ffff888035a69440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.522781][ T32] #3: ffff88807a5e34b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.522831][ T32] locks held by kworker/u8:20/18996: 3, last CPU#0: [ 1813.522845][ T32] #0: ffff88803f541940 ((wq_completion)wg-kex-wg2#48){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522898][ T32] #1: ffffc90003697c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.522948][ T32] #2: ffff88803352d450 (&cookie->lock){++++}-{4:4}, at: wg_cookie_add_mac_to_packet+0x3e/0x1a0 [ 1813.522997][ T32] locks held by kworker/u8:21/18998: 4, last CPU#0: [ 1813.523011][ T32] #0: ffff888031de1940 ((wq_completion)wg-kex-wg2#23){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.523064][ T32] #1: ffffc90003ebfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.523122][ T32] #2: ffff88802b725440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.523172][ T32] #3: ffff88807a5e1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.523223][ T32] locks held by kworker/u8:23/18999: 5, last CPU#1: [ 1813.523237][ T32] #0: ffff88808e019940 ((wq_completion)krds_cp_wq#22/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.523286][ T32] #1: ffffc90003367c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.523336][ T32] #2: ffff88803b61d880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.523381][ T32] #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.523433][ T32] #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1813.523479][ T32] locks held by kworker/u8:24/19001: 4, last CPU#1: [ 1813.523493][ T32] #0: ffff88803ce81940 ((wq_completion)wg-kex-wg1#58){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.523547][ T32] #1: ffffc90002ef7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.523596][ T32] #2: ffff88805d261440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.523646][ T32] #3: ffff8880556d5c58 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.523696][ T32] locks held by kworker/u8:26/19003: 4, last CPU#1: [ 1813.523710][ T32] #0: ffff888028944940 ((wq_completion)krds_cp_wq#18/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.523760][ T32] #1: ffffc90002df7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.523809][ T32] #2: ffff888092c69580 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.523855][ T32] #3: ffff888033f05360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1813.523903][ T32] locks held by kworker/u8:31/19007: 4, last CPU#0: [ 1813.523916][ T32] #0: ffff888028944140 ((wq_completion)krds_cp_wq#18/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.523965][ T32] #1: ffffc90004127c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.524015][ T32] #2: ffff888092c68f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.524061][ T32] #3: ffff8880285c60e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1813.524115][ T32] locks held by kworker/u8:32/19008: 4, last CPU#1: [ 1813.524128][ T32] #0: ffff88802bca3140 ((wq_completion)krds_cp_wq#18/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.539778][ T32] #1: ffffc90004147c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.539845][ T32] #2: ffff888092c68c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.539893][ T32] #3: ffff88808f465360 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1813.539942][ T32] locks held by kworker/u8:33/19009: 3, last CPU#1: [ 1813.539957][ T32] #0: ffff8880342da140 ((wq_completion)krds_cp_wq#6/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540006][ T32] #1: ffffc90004377c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540055][ T32] #2: ffff8880926cb660 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1813.540111][ T32] locks held by kworker/u8:34/19010: 4, last CPU#1: [ 1813.540125][ T32] #0: ffff88807d005140 ((wq_completion)wg-kex-wg2#59){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540179][ T32] #1: ffffc9000439fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540232][ T32] #2: ffff8880341a5440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.540289][ T32] #3: ffff8880556d4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.540340][ T32] locks held by kworker/u8:35/19014: 2, last CPU#1: [ 1813.540354][ T32] #0: ffff888091007140 ((wq_completion)wg-kex-wg2#25){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540408][ T32] #1: ffffc90004777c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540457][ T32] locks held by kworker/u8:36/19015: 4, last CPU#0: [ 1813.540471][ T32] #0: ffff888020382940 ((wq_completion)wg-kex-wg0#55){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540525][ T32] #1: ffffc900047e7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540574][ T32] #2: ffff88805aa09440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.540622][ T32] #3: ffff8880843ac888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.540672][ T32] locks held by kworker/u8:37/19016: 4, last CPU#0: [ 1813.540686][ T32] #0: ffff888028947940 ((wq_completion)krds_cp_wq#18/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540735][ T32] #1: ffffc90004887c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540785][ T32] #2: ffff888092c69880 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.540831][ T32] #3: ffff88803e1f9d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1813.540880][ T32] locks held by kworker/1:6/19435: 2, last CPU#1: [ 1813.540893][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540943][ T32] #1: ffffc9000e637c40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.540995][ T32] locks held by kworker/u8:38/20200: 4, last CPU#0: [ 1813.541008][ T32] #0: ffff88807f68f140 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541061][ T32] #1: ffffc90008617c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541118][ T32] #2: ffff88802a451440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.541169][ T32] #3: ffff88807f297028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.541219][ T32] locks held by kworker/u8:39/20201: 4, last CPU#1: [ 1813.541232][ T32] #0: ffff88802c071140 ((wq_completion)krds_cp_wq#23/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541281][ T32] #1: ffffc90005d37c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541330][ T32] #2: ffff88803b61c080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.541375][ T32] #3: ffff8880926cdd60 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_sock_set_nodelay+0x2a/0x180 [ 1813.541419][ T32] locks held by kworker/u8:40/20202: 3, on CPU#0: [ 1813.541433][ T32] #0: ffff888032911940 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541482][ T32] #1: ffffc900055a7c40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541531][ T32] #2: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 1813.541581][ T32] locks held by kworker/u8:41/20203: 4, last CPU#0: [ 1813.541594][ T32] #0: ffff888028941940 ((wq_completion)krds_cp_wq#18/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541644][ T32] #1: ffffc90005507c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541693][ T32] #2: ffff888092c69280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.541739][ T32] #3: ffff88807a560fe0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 1813.541785][ T32] locks held by kworker/u8:42/20204: 3, last CPU#0: [ 1813.541799][ T32] #0: ffff88805355b940 ((wq_completion)krds_cp_wq#18/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541849][ T32] #1: ffffc900054c7c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.541898][ T32] #2: ffff888092c69b80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 1813.541944][ T32] locks held by kworker/u8:43/20205: 4, last CPU#0: [ 1813.541957][ T32] #0: ffff88803b2db940 ((wq_completion)wg-kex-wg1#23){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.542012][ T32] #1: ffffc9000527fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.542062][ T32] #2: ffff88805416d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.542120][ T32] #3: ffff88807f290330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.542171][ T32] locks held by kworker/u8:44/20206: 4, last CPU#0: [ 1813.542184][ T32] #0: ffff88803a059940 ((wq_completion)wg-kex-wg1#27){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.542238][ T32] #1: ffffc9000524fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.542281][ T32] #2: ffff88807b709440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.542327][ T32] #3: ffff8880292a0330 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.542376][ T32] locks held by kworker/u8:45/20207: 4, last CPU#0: [ 1813.542390][ T32] #0: ffff888091007140 ((wq_completion)wg-kex-wg2#25){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.542443][ T32] #1: ffffc9000507fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.542493][ T32] #2: ffff888046e51440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 1813.542544][ T32] #3: ffff88802bc0c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 1813.542596][ T32] locks held by syz-executor/20900: 5, last CPU#1: [ 1813.542609][ T32] #0: ffff88802c52e460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1813.542666][ T32] #1: ffff8880337eb2c8 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_unlinkat+0x2a7/0x610 [ 1813.542721][ T32] #2: ffffffff8f4ef978 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 1813.542774][ T32] #3: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.542826][ T32] #4: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1813.542875][ T32] locks held by syz-executor/21274: 2, last CPU#0: [ 1813.542889][ T32] #0: ffff88802e601078 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1813.542935][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1813.542986][ T32] locks held by kworker/0:17/24972: 3, last CPU#0: [ 1813.543000][ T32] #0: ffff888044851d40 ((wq_completion)wg-kex-wg0#26){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.543052][ T32] #1: ffffc90004527c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1813.543121][ T32] #2: ffff88807f290d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 1813.543174][ T32] locks held by syz.2.16915/26580: 1, last CPU#1: [ 1813.543188][ T32] #0: ffff8880aee824c0 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1813.543242][ T32] locks held by syz.3.16954/26707: 1, last CPU#1: [ 1813.543260][ T32] #0: ffffffff90250960 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 1813.543314][ T32] locks held by syz.4.16956/26712: 1, last CPU#0: [ 1813.543327][ T32] #0: ffffffff8eeabc30 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 1813.543379][ T32] locks held by syz.4.16956/26714: 2, last CPU#1: [ 1813.543393][ T32] #0: ffffffff8f69c040 (misc_mtx){+.+.}-{4:4}, at: misc_open+0x51/0x350 [ 1813.543440][ T32] #1: ffffffff8ebf9040 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 1813.543485][ T32] locks held by syz.0.16955/26710: 2, last CPU#0: [ 1813.543498][ T32] #0: ffff88807fff5cf8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 1813.543547][ T32] #1: ffffffff8ed5c6e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 1813.543598][ T32] [ 1813.543604][ T32] ============================================= [ 1813.543604][ T32] [ 1813.543630][ T32] NMI backtrace for cpu 1 [ 1813.543646][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1813.543671][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1813.543682][ T32] Call Trace: [ 1813.543691][ T32] [ 1813.543700][ T32] dump_stack_lvl+0xe8/0x150 [ 1813.543728][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 1813.543751][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1813.543782][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1813.543808][ T32] sys_info+0x135/0x170 [ 1813.543827][ T32] watchdog+0xfd7/0x1030 [ 1813.543853][ T32] ? watchdog+0x1c7/0x1030 [ 1813.543878][ T32] kthread+0x38b/0x480 [ 1813.543897][ T32] ? __pfx_watchdog+0x10/0x10 [ 1813.543913][ T32] ? __pfx_kthread+0x10/0x10 [ 1813.543933][ T32] ret_from_fork+0x514/0xb70 [ 1813.543954][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1813.543983][ T32] ? __switch_to+0xc89/0x1420 [ 1813.544015][ T32] ? __pfx_kthread+0x10/0x10 [ 1813.544036][ T32] ret_from_fork_asm+0x1a/0x30 [ 1813.544087][ T32] [ 1813.544095][ T32] Sending NMI from CPU 1 to CPUs 0: [ 1813.544128][ C0] NMI backtrace for cpu 0 [ 1813.544142][ C0] CPU: 0 UID: 0 PID: 32638 Comm: kworker/R-bond1 Not tainted syzkaller #0 PREEMPT(full) [ 1813.544167][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1813.544179][ C0] Workqueue: bond19 bond_alb_monitor [ 1813.544202][ C0] RIP: 0010:unwind_next_frame+0x482/0x2550 [ 1813.544226][ C0] Code: 04 48 89 54 24 18 4c 8d 6a 05 48 89 d8 48 c1 e8 03 42 0f b6 04 20 84 c0 0f 85 b4 19 00 00 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 <84> c0 0f 85 bf 19 00 00 0f b6 43 01 83 e0 07 0f 84 7c 16 00 00 83 [ 1813.544242][ C0] RSP: 0018:ffffc90000006d00 EFLAGS: 00000a03 [ 1813.544258][ C0] RAX: 0000000000000000 RBX: ffffffff9110b22e RCX: ffffffff909271e4 [ 1813.544272][ C0] RDX: ffffffff9110b22a RSI: ffffffff9110b21e RDI: ffffffff8c6d9420 [ 1813.544287][ C0] RBP: ffffffff816cbdd3 R08: 0000000000000003 R09: 0000000000000000 [ 1813.544300][ C0] R10: 0000000000000000 R11: ffffffff8ed5c6e0 R12: dffffc0000000000 [ 1813.544315][ C0] R13: ffffffff9110b22f R14: ffffc90000006da8 R15: ffffffff909271e4 [ 1813.544331][ C0] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 1813.544347][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1813.544360][ C0] CR2: 000055559291a4e8 CR3: 000000007580a000 CR4: 00000000003526f0 [ 1813.544378][ C0] Call Trace: [ 1813.544385][ C0] [ 1813.544396][ C0] ? ret_from_fork+0x514/0xb70 [ 1813.544414][ C0] ? unwind_next_frame+0x8f/0x2550 [ 1813.544439][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1813.544468][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1813.544501][ C0] arch_stack_walk+0x11b/0x150 [ 1813.544526][ C0] ? ret_from_fork+0x514/0xb70 [ 1813.544544][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 1813.544565][ C0] stack_trace_save+0xa9/0x100 [ 1813.544604][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1813.544641][ C0] kasan_save_track+0x3e/0x80 [ 1813.544660][ C0] ? kasan_save_track+0x3e/0x80 [ 1813.544678][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1813.544699][ C0] ? kmem_cache_alloc_noprof+0x2b9/0x600 [ 1813.544727][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 1813.544745][ C0] ? br_nf_forward_ip+0xc3/0xa30 [ 1813.544769][ C0] ? nf_hook_slow+0xc5/0x220 [ 1813.544796][ C0] ? NF_HOOK+0x23e/0x3f0 [ 1813.544815][ C0] ? __br_forward+0x397/0x540 [ 1813.544834][ C0] ? br_handle_frame_finish+0x1119/0x1950 [ 1813.544857][ C0] ? br_nf_hook_thresh+0x3dd/0x4c0 [ 1813.544880][ C0] ? br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1813.544907][ C0] ? br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1813.544932][ C0] ? br_handle_frame+0x127f/0x1510 [ 1813.544954][ C0] ? __netif_receive_skb_core+0x989/0x30c0 [ 1813.544983][ C0] ? process_backlog+0x727/0x18b0 [ 1813.545012][ C0] ? __napi_poll+0xaa/0x330 [ 1813.545038][ C0] ? net_rx_action+0x61d/0xf50 [ 1813.545067][ C0] ? handle_softirqs+0x226/0x860 [ 1813.545091][ C0] ? do_softirq+0x77/0xd0 [ 1813.545115][ C0] ? __local_bh_enable_ip+0x100/0x140 [ 1813.545140][ C0] ? __dev_queue_xmit+0x1edc/0x3820 [ 1813.545164][ C0] ? alb_send_lp_vid+0x348/0x550 [ 1813.545190][ C0] ? alb_send_learning_packets+0x12c/0x300 [ 1813.545217][ C0] ? bond_alb_monitor+0x3da/0x1840 [ 1813.545243][ C0] ? process_scheduled_works+0xc3d/0x1630 [ 1813.545269][ C0] ? rescuer_thread+0x7c5/0x10e0 [ 1813.545297][ C0] ? kthread+0x38b/0x480 [ 1813.545315][ C0] ? ret_from_fork+0x514/0xb70 [ 1813.545350][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1813.545373][ C0] kmem_cache_alloc_noprof+0x2b9/0x600 [ 1813.545402][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 1813.545419][ C0] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1813.545449][ C0] ? skb_ext_add+0x1b6/0x8e0 [ 1813.545473][ C0] skb_ext_add+0x1b6/0x8e0 [ 1813.545495][ C0] ? br_nf_forward+0x478/0x18d0 [ 1813.545521][ C0] br_nf_forward_ip+0xc3/0xa30 [ 1813.545546][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 1813.545579][ C0] nf_hook_slow+0xc5/0x220 [ 1813.545609][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1813.545630][ C0] NF_HOOK+0x23e/0x3f0 [ 1813.545652][ C0] ? NF_HOOK+0xa2/0x3f0 [ 1813.545671][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1813.545693][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1813.545713][ C0] ? skb_clone+0x246/0x3a0 [ 1813.545738][ C0] ? br_flood+0x623/0x8d0 [ 1813.545758][ C0] ? br_handle_vlan+0x5e/0x530 [ 1813.545791][ C0] __br_forward+0x397/0x540 [ 1813.545810][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 1813.545834][ C0] br_handle_frame_finish+0x1119/0x1950 [ 1813.545866][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1813.545891][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 1813.545922][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 1813.545952][ C0] ? nf_hook_slow+0x176/0x220 [ 1813.545982][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1813.546006][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 1813.546030][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 1813.546066][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 1813.546090][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1813.546116][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 1813.546146][ C0] ? lock_acquire+0x115/0x350 [ 1813.546170][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 1813.546197][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1813.546225][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 1813.546252][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 1813.546279][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 1813.546307][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 1813.546334][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 1813.546363][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 1813.546391][ C0] br_handle_frame+0x127f/0x1510 [ 1813.546421][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1813.546447][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 1813.546477][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 1813.546503][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 1813.546543][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 1813.546578][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 1813.546622][ C0] ? process_backlog+0x3de/0x18b0 [ 1813.546651][ C0] ? process_backlog+0x3de/0x18b0 [ 1813.546683][ C0] process_backlog+0x727/0x18b0 [ 1813.546713][ C0] ? call_timer_fn+0xd5/0x5f0 [ 1813.546738][ C0] ? process_backlog+0x3de/0x18b0 [ 1813.546776][ C0] __napi_poll+0xaa/0x330 [ 1813.546806][ C0] net_rx_action+0x61d/0xf50 [ 1813.546844][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1813.546891][ C0] handle_softirqs+0x226/0x860 [ 1813.546919][ C0] ? do_softirq+0x77/0xd0 [ 1813.546947][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1813.546972][ C0] do_softirq+0x77/0xd0 [ 1813.546997][ C0] [ 1813.547004][ C0] [ 1813.547012][ C0] __local_bh_enable_ip+0x100/0x140 [ 1813.547038][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1813.547062][ C0] __dev_queue_xmit+0x1edc/0x3820 [ 1813.547093][ C0] ? __dev_queue_xmit+0x29b/0x3820 [ 1813.547122][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1813.547147][ C0] ? __alloc_skb+0x27a/0x7a0 [ 1813.547177][ C0] ? rcu_is_watching+0x16/0xb0 [ 1813.547201][ C0] ? __alloc_skb+0x27a/0x7a0 [ 1813.547230][ C0] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1813.547260][ C0] ? __alloc_skb+0x27a/0x7a0 [ 1813.547290][ C0] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1813.547328][ C0] ? __alloc_skb+0x4d0/0x7a0 [ 1813.547361][ C0] ? alb_send_lp_vid+0x14e/0x550 [ 1813.547392][ C0] alb_send_lp_vid+0x348/0x550 [ 1813.547424][ C0] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 1813.547456][ C0] ? __lock_acquire+0x6df/0x2e50 [ 1813.547480][ C0] alb_send_learning_packets+0x12c/0x300 [ 1813.547512][ C0] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 1813.547547][ C0] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 1813.547589][ C0] bond_alb_monitor+0x3da/0x1840 [ 1813.547621][ C0] ? bond_alb_monitor+0xf0/0x1840 [ 1813.547647][ C0] ? lock_acquire+0x115/0x350 [ 1813.547668][ C0] ? __pfx_bond_alb_monitor+0x10/0x10 [ 1813.547696][ C0] ? rcu_is_watching+0x16/0xb0 [ 1813.547721][ C0] ? process_scheduled_works+0x97a/0x1630 [ 1813.547749][ C0] process_scheduled_works+0xc3d/0x1630 [ 1813.547794][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1813.547820][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1813.547853][ C0] ? assign_work+0x3af/0x5d0 [ 1813.547882][ C0] rescuer_thread+0x7c5/0x10e0 [ 1813.547916][ C0] ? rescuer_thread+0xb8/0x10e0 [ 1813.547958][ C0] kthread+0x38b/0x480 [ 1813.547978][ C0] ? __pfx_rescuer_thread+0x10/0x10 [ 1813.548006][ C0] ? __pfx_kthread+0x10/0x10 [ 1813.548027][ C0] ret_from_fork+0x514/0xb70 [ 1813.548047][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1813.548078][ C0] ? __switch_to+0xc89/0x1420 [ 1813.548108][ C0] ? __pfx_kthread+0x10/0x10 [ 1813.548128][ C0] ret_from_fork_asm+0x1a/0x30 [ 1813.548170][ C0] [ 1813.558842][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 1817.771942][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1817.781055][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1817.791122][ T32] Call Trace: [ 1817.794409][ T32] [ 1817.797347][ T32] vpanic+0x56d/0xa60 [ 1817.801365][ T32] ? __pfx___schedule+0x10/0x10 [ 1817.806258][ T32] ? __pfx_vpanic+0x10/0x10 [ 1817.810792][ T32] panic+0xc5/0xd0 [ 1817.814520][ T32] ? __pfx_panic+0x10/0x10 [ 1817.818953][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 1817.824449][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 1817.829855][ T32] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 1817.836111][ T32] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 1817.842303][ T32] watchdog+0x1030/0x1030 [ 1817.846662][ T32] ? watchdog+0x1c7/0x1030 [ 1817.851101][ T32] kthread+0x38b/0x480 [ 1817.855182][ T32] ? __pfx_watchdog+0x10/0x10 [ 1817.859915][ T32] ? __pfx_kthread+0x10/0x10 [ 1817.864540][ T32] ret_from_fork+0x514/0xb70 [ 1817.869149][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 1817.874301][ T32] ? __switch_to+0xc89/0x1420 [ 1817.879098][ T32] ? __pfx_kthread+0x10/0x10 [ 1817.883710][ T32] ret_from_fork_asm+0x1a/0x30 [ 1817.888559][ T32] [ 1817.891936][ T32] Kernel Offset: disabled [ 1817.896277][ T32] Rebooting in 86400 seconds..