last executing test programs: 56.926580538s ago: executing program 1 (id=1440): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='b ', @ANYRESDEC], 0x1a) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(r2, 0x0) shutdown(r2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="c3920310040000000000890000000800030028146140ab78db8c9bdabde6088e2540972606000000fa2f19f3c99b13a18c90497aed395eca65d3265cf0a979780224cca71af95337f7b3a9b71fe0e995d6c57c109baa8fc1495ee0bf6500e2c8e394da647acf77dbf555c4ea7a5ca700eddbeb77b77903e403fffffffffa94015a8ee9417fbd3a99b03eb542263c99a8df843511b434e0bb4ad81a0c272cebbac11bbe177ae0b710ce628a2549dcf7fa85fc12bd7520d7ec8d8bd2485e446325f589e9fb36ec88511323da596f9a1ab4f2f6569142376e8aa3dc00c32e86ef456a01faec732f585f1b", @ANYRES32=r5, @ANYBLOB="18001d8014000080060005000e00000005000800bb000000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) accept4(r2, 0x0, 0x0, 0x80000) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r7}, 0x4) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r9}, 0x4) write(0xffffffffffffffff, &(0x7f0000000100)="3c0000003b00050001000000000000000a01000025000100534d432d425046544553542d554549442020202020202020202020202020202000000000", 0x3c) write(0xffffffffffffffff, &(0x7f0000000140)="380000003b00050002000000000000000a01000024000100534d432d425046544553542d5545494420202020202020202020202020202020", 0x38) r10 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r10, 0xa) r11 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r11, &(0x7f0000000040)={0x2, 0x5000, @loopback}, 0x10) accept(r11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x19, &(0x7f0000000740)=ANY=[@ANYRES32=r6, @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000002009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r8, @ANYBLOB="00000000010000001c00000000590000bf980000090000000df71ba176a0c94edb1eaeaba140d06731c80b43b6fd5669f520ee539b53bcb5f655dadce934a48a9b9eafa179186d780e8c78f67bd17c280d32b8842ae747a222e26e186a07cf9f10ac700f2dbfe43ced8ca678e4aac8f31cf37a20bcd9680862b9ce1f62bd567cc76624b411506d3e1b944a2137149606bb095b70d45480df205ab596a535c4d73b989b1e5953031d2a4b50d840e71def30828749eb0b1273aeb2151e259233e476d97340cec67c4b23fd36f6a410928d1c2ba805c86144b7743fc7a1179c2397f400000000000000000000003eb9342173f3ad349f776fc258f2988ab2c8acb5f9f9ceda2e2adb13600aed29"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 56.539827642s ago: executing program 2 (id=1445): gettid() socket$netlink(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x5, 0x0, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="110000001a005f0214f9f407000904001f00000000010000000000", 0x1b) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x931766f6319eed44) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x1e, 0x38, 0x64, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0x3c}, {[@generic={0x44, 0xf, "802f7f8c92fb8b1eedcbb39254"}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x4}}}}}}, 0x0) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000280)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x38, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x4, 0x2, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0x6, 0x300}, @exp_fastopen={0xfe, 0x4}, @eol]}}}}}}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000070000001000000095"], 0x0, 0x2000001, 0x0, 0x0, 0x0, 0x30, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x997}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x14, &(0x7f00000002c0)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r5, 0x2000012, 0xe, 0xf0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xc}, 0x50) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000001140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x60000, {0x0, 0x0, 0x0, r6, 0x15809}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IP6TABLES={0x5}, @IFLA_BR_PRIORITY={0x6, 0x6, 0x4}, @IFLA_BR_VLAN_DEFAULT_PVID={0xff84, 0x27, 0x4}, @IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x6}, @IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x3400c084}, 0x0) 56.521597756s ago: executing program 1 (id=1446): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x2a, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000700000000000000529c000018630000070000000000000008000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001b32500000000000852000000200000018280000", @ANYRES32, @ANYBLOB="000000000000010018110000", @ANYRES32, @ANYBLOB="d0272fa406a81e76b7080000100600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000004735b9ff080000009500000000000000"], &(0x7f0000000d80)='GPL\x00', 0x3, 0x5f, &(0x7f0000000dc0)=""/95, 0x40f00, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000010c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001100)=[{0x0, 0x4, 0x4, 0x8}, {0x0, 0x2, 0x7, 0x5}, {0x5, 0x5, 0xd, 0x7}, {0x3, 0x3, 0xd, 0x2}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x9}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r3, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 56.233466408s ago: executing program 3 (id=1450): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x8050) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket(0x28, 0x5, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) splice(r1, 0x0, r2, &(0x7f0000000080)=0x9, 0x200000000005, 0x6) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000180000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = accept4$phonet_pipe(r0, &(0x7f0000000540), &(0x7f0000000580)=0x10, 0x0) recvfrom$phonet(r6, &(0x7f00000005c0)=""/2, 0x2, 0x20, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00ebff2000010001020000000000fbbebfc200000000000d00000008000200ac1414aa050016003600001a3f519819389930c8abd932922a028285f63c421d32f22e597f5ab3ce8e0f7c4a11d4"], 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x0, 0xe, 0x0, &(0x7f0000000180)="0000000000000000000000000005", 0x0, 0x7fe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x180000) ioctl$XFS_IOC_EXCHANGE_RANGE(r4, 0x40285881, &(0x7f0000000080)={r8, 0x0, 0x58b, 0x8, 0x4, 0x2}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)={0x2, 0x15, 0x0, 0x0, 0x2}, 0x10}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f000000d1c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1410080}, 0xc, &(0x7f000000d180)={&(0x7f000000d040)={0x130, 0x14, 0x1, 0x70bd27, 0x25dfdbfb, {0x9}, [@nested={0x35, 0xb2, 0x0, 0x1, [@nested={0x4, 0xdb}, @generic="6ff5fbb317796bec258d00ba0d6f6a50ec5cec9c6739df7dc12038aba13b01f2b4f2f3565402b350b60482014d"]}, @nested={0x14, 0x152, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @fd=r8}, @typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@loopback}]}, @typed={0xc, 0x49, 0x0, 0x0, @u64=0x3af8}, @generic="4d5c0add21328f763483fa3aeb0cef2ea6f9320f029c37807329cb0b04e89d116896813508e025edf6bf517d653be54699e37ff4aab5ffcbb924c95ae056bd5886e3c4999499dfd4242c5ad557b7bba89424b012b9aa2b714229f5fa78ef25e4ac5b2b9a0d1fa6f8871d48e40761611a1bb319f8279fecb602517fd6f4db80878f48db1649f8b5724a1ffb3f2ccd195b9c2a626230d48773cf40350a6326e20ec5a51bdf201771fcf91c32cbbb5b5517ec71aba2179219f57bdd69bf136f", @nested={0x4, 0xf5}]}, 0x130}, 0x1, 0x0, 0x0, 0x800}, 0x8004) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f0000000340)=0x79c) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r11) 55.809815459s ago: executing program 1 (id=1451): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140)=0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x2, 0x0, @val=@uprobe_multi={&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000100)=[0x2, 0x1, 0x3, 0x2], 0x8, 0x0, 0x1, r1}}, 0x40) 55.802979349s ago: executing program 1 (id=1453): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '2\x00:\x00\x00\x00\x00D\x00\x00\x00\x00\x00\x00\x00\x00'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x68, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x14, 0x3, '2\x00:\x00\x00\x00\x00D\x00\x00\x00\x00\x00\x00\x00\x00'}, @TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "9ea2d328893918792a5ca222a6ad614b6f3aa3a6"}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) 55.795892096s ago: executing program 4 (id=1455): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x8000000}, 0xc) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1801000026000103000000000000000005"], 0x118}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000001500)=[{{&(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000240)=""/159, 0x9f}], 0x1, &(0x7f0000000500)=""/4096, 0x1000}, 0x436}], 0x1, 0x40000061, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7a0a0500212b0000440012800b000100697036746e6c000034000280140003000000000000000000000082620000003f14000200fe80"], 0x64}}, 0x24000000) 55.787528953s ago: executing program 3 (id=1456): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c00000004000000000000000000000300000000030000000300000000000101010000000000000c00000000010000000100000506000000010000000200000000000000005f"], 0x0, 0x58, 0x0, 0xa}, 0x28) r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x22f819be) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept4(r1, 0x0, 0x0, 0x800) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x30, r3, 0x1, 0x2, 0x25dfdbfb, {{}, {}, {0x14, 0x17, {0x14, 0x0, @l2={'ib', 0x3a, 'hsr0\x00'}}}}}, 0x30}}, 0x20042000) r4 = socket$packet(0x11, 0x2, 0x300) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) recvmsg(r5, &(0x7f0000001880)={0x0, 0x0, 0x0}, 0x3c65e5a12d2f864f) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d7fb7c27a1059ae31c6", 0xd8}, {0x0}], 0x2, 0x0, 0x0, 0x7400}, 0x4) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1983405900000004008638750f3906d9a0d0652921b200", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) ioctl$XFS_IOC_GETBMAPA(r4, 0xc020582c, &(0x7f0000000300)={0x4, 0x0, 0x9, 0xd3, 0x8}) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') socket(0x14, 0x2, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r8) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r9) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 55.786156156s ago: executing program 4 (id=1457): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000c00)="50dcfd95494e8ace50255707bb690c2f9ab90664bfff143945a7b19dce101290815d092130c3794b052e86ca4e6ec4f6da7e09370d4dc2d119f3182da59ae193409084da1a84bc94cff142d91b3816b5ba6c579203d64ba67a93a39453c257c693a999599d671d8588331ee9aefdeff4ae9cab7594caf18e0f9fbce396326999b8cb75f9d4c8ea6a657732d1c8ec14dd71a910b1396c87ac3eafdc62e349fd2f46983415e0bc1e491b30d911a26d312a234d36d8e0f07f3a9fda985b4b12843232351c838e2239202dcf2fade16bc82404b44179147d47920d46a9e641a39794f5759e9365e76152b675a24d8a52a5ea66401312afa0e6ae775ddcb28178eb006a1c4f03467cca4f1da37250e06a5cf22423366b5f4c0c03c6572c487e40a075720b0abbeca2dfa505c45ca0d2a6852524a6a7345a9da6bbe17eed88a848e7627e040d74d6a03e360299edca4f9818ef80f2ff2e3627b24185e7e7fd0c15023d2582e558ee0a4a97668db4b2aca946a865df9f2ee722bdbe170e36cf4bddedd78473861d9569c68e11215fabe7ce9993c59c31aaaf6c67bf94fa2cf0a64ed105609ec9bf734be47c24154a1d6250e88f56ae65f4be0431bb688706349039e702361f6374b069f944fb41ccd90e5e4f831c96ea4a812e112bbae48f52bb40ef31c4163af75c09b277a89bcdd9edc21b673866be954614552360b106572f3a9ada8485fe5da876f23bb80acf829d89a705065d96d9212cce3cd6a74073b91965cdc1350b33a579fcdba01c9c3b25541ae7559ba319d22984a71c1486c8550c60f5c10a63ccaceb8a0621f223b3afa3af6c69d9302b04dc10e49654970c17cd9d68cb7e88497dc1f60267dcefa26718459cf72ce6a45802438f3f182b82c3bf39c8066e01cff2616ec3ed9ed9853e0fd3c7558daa946b583bdf82294f0546c962da2449764b2e6c0137b1d6d34828bd038c72b731cc96bef15e0fc8a99ddfba177b39f008025cdb89b9ef8771b5317f2d969fe194f73fa2f809e3b825620c77f8074f928fbe126b9876a2ecb6583ecf1d61dad4c87363e4b6f02684feb123ebf162ff6d7b9f52645d70533ac3a9c46065be28bb5ddf4e27b1921651661b9422bcd93a23e125fb5b4cfb0b065521df823d6a8103ae20b1ed0b09214a02dedfbce80f5cf32e0801337b3a1dbf62101afaf7c735d41d136d939a0263fda4a42c9ba41a88b8dc77a8ce2c2d8708a4777773c0c28b02e9e7958ac4bd5a94256de3078db7a701e7d34737a849549cb8fd2948e45d6eada35b6d981c4f41da2781cd257151cc62028135a98e3e786ff39f9d5eb9e2cd2478ad73e1ae861e98d4e05e2afa280e580f1fd6e05657ecc37a564726637c5bd91eef241a99a1c82656bc921f57b20925fe2a610530092b43630d31a60bbda4813c3f2b7a2b2c71cfdc5da610d57d00", 0x401}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000800000000000000000000711033000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) pipe(&(0x7f0000000040)) (async) vmsplice(r0, &(0x7f0000000680)=[{&(0x7f0000000c00)="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", 0x401}], 0x1, 0x0) (async) 55.779792946s ago: executing program 1 (id=1458): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) syz_emit_ethernet(0x6e, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa2886dd6075e70000383afffe80000000000000000000000000000eff0200000000000ab9174fe2b65a1ba5199f6c8db5e2000000000000000001030190780b0000006915556900076cfffc000000000000000000000000000008fc000000000000000000000000000000796ee019f45e1987"], 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1200d238da000024000000080018db0f4c3f04b67e672565dc6bb51c89f86d7f869c428361f3b6199bc20061ecbb630b23675dcdd4f7e505782046d4d413105b2af84e3ccd1626c0e90e5015eda850c07579f7c6d29c1e29f418cacf8b7da45b701a0299ce6b83bc170df38d604160c1d1f60101ce47aea117cb154a725281850108b8a1225d1a0b347ab424fe61ae670e8990549e671ae68bd6fc0344af32fe4bb21f0badf166a067f265354d82dae94096d7dc0640bc51c450850b0aaca0051aac9350c287397b2adfb10484129808b664deb9f741e1fc60c9154a68f8da2bbdd39760"], 0x48) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES64=r4, @ANYRES32=r2, @ANYRESDEC=r0, @ANYRES8=r2, @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r3, @ANYRESOCT=r0], 0x50) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r9, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0x60, 0x2c, 0xd3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0xb, 0xfff2}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6248}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x4}, [@TCA_EM_META_LVALUE={0x4}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x6}, {0x5, 0x40, 0x2}}}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000380), &(0x7f0000000580)=r10}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r10, 0x702, 0xb90, 0x0, &(0x7f0000000380)="eb00140000000010000000000000", 0x0, 0x3d6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 55.779100494s ago: executing program 0 (id=1459): r0 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000000c0)={0x0, 0x0, "9e9b2c77c4d077ea141a1285cd0a705b"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r1) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000140)=0x9) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000180)={'macsec0\x00', 0x2}) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @initdev}, &(0x7f0000000200)=0x10, 0x800) getsockopt$inet_buf(r2, 0x0, 0x2c, &(0x7f0000000240)=""/202, &(0x7f0000000340)=0xca) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000380)=0x0) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000003c0)=r4) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000400)='vegas', 0x5) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000440)=0xed) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), r1) sendmsg$DEVLINK_CMD_PORT_SET(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xa4, r5, 0x400, 0x70bd27, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6, 0x4, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x6, 0x4, 0x2}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) ioctl$OCFS2_IOC_GROUP_ADD64(r2, 0x40186f03, &(0x7f0000000640)={0xd002, 0x100, 0x10, 0x2}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) getsockopt$X25_QBITINCL(r6, 0x106, 0x1, &(0x7f00000006c0), &(0x7f0000000700)=0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r7, 0x80047210, &(0x7f0000000740)) getsockopt$WPAN_SECURITY(r6, 0x0, 0x1, &(0x7f0000000780), &(0x7f00000007c0)=0x4) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000840), r6) sendmsg$DEVLINK_CMD_RATE_DEL(r1, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)={0x78, r8, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x3a, 0xa8, @random="188d4210c489b870aa1cc2c97c79236ae02c7dced0b4ba3cbc0624f032184f474c63c750e2638c0b727cfb92c0fef2b5c0ffe10d6842"}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_genetlink_get_family_id$SEG6(&(0x7f0000000980), r1) ioctl$XFS_IOC_FREE_EOFBLOCKS(r3, 0x8080583a, &(0x7f00000009c0)={0x3, 0x1000, 0x0, 0x9, 0x21a}) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r3, 0x4048587b, &(0x7f0000000c00)={{r3, &(0x7f0000000a40)=')\x00', 0x40, &(0x7f0000000a80)={@_ha_fsid={[0x2049b820, 0xfffffff8]}, {0xd958, 0x800, 0x1, 0x2}}, 0x0, &(0x7f0000000ac0)={@_ha_fsid}, &(0x7f0000000b00)=0x88}, 0x1, &(0x7f0000000bc0)=[{0x3, 0x20000000, &(0x7f0000000b40)='!\x00', &(0x7f0000000b80)="3699a144e4dbdac57426f098d7ce66a137f2c17567a803bb9f24303a23a6ecdea569", 0x22, 0x8}]}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r6, 0x84, 0x1, &(0x7f0000000c80)={0x0, 0x1, 0x4, 0x0, 0x14dc, 0x6}, &(0x7f0000000cc0)=0x14) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r9, 0x84, 0x73, &(0x7f0000000d00)={r10, 0x3, 0x30, 0x0, 0x4000000000}, &(0x7f0000000d40)=0x18) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000000d80)={0x0, @local, @broadcast}, &(0x7f0000000dc0)=0xc) 55.774108024s ago: executing program 4 (id=1460): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x100, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x80, 0xfd}]}, 0x10) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) writev(r1, &(0x7f0000005400)=[{&(0x7f0000002200)="636f6e6e656374201689", 0xa}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000400)=@newlink={0x90, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x216f3, 0x8831}, [@IFLA_LINKINFO={0x70, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x64, 0x2, 0x0, 0x1, [@IFLA_GTP_ROLE={0x8, 0x4, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IFLA_GTP_LOCAL6={0x14, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFLA_GTP_PDP_HASHSIZE={0x8, 0x3, 0x1b83}, @IFLA_GTP_ROLE={0x8}, @IFLA_GTP_LOCAL={0x8, 0x7, @multicast2}, @IFLA_GTP_LOCAL6={0x14, 0x8, @mcast2}, @IFLA_GTP_FD0={0x8}, @IFLA_GTP_LOCAL={0x8, 0x7, @local}]}}}]}, 0x90}, 0x1, 0x0, 0x0, 0x48890}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r5}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r6, &(0x7f00000002c0)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000600)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000003780)={{r7}, r8, 0x4, @inherit={0x68, &(0x7f0000000580)=ANY=[]}, @name="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"}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000280)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, &(0x7f0000000680)={{r0}, r8, 0x10, @unused=[0x0, 0x8, 0xfff, 0x2], @devid=r9}) socket$inet6_udp(0xa, 0x2, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_tcp(0xa, 0x1, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344}, 0x1, 0x0) write$tun(r10, &(0x7f0000000240)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x2, 0xe7b6, 0x14, 0x2}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x8, 0x28, 0x68, 0x0, 0x3, 0x6, 0x0, @private=0xa010100, @multicast1}, {{0x4e20, 0x4e28, 0x41424344, r12, 0x1, 0x0, 0x5, 0x10, 0x7, 0x0, 0x8}}}}, 0x36) 55.695489843s ago: executing program 0 (id=1461): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001000)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000f80), &(0x7f0000000fc0)}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001180)={0x6, 0x2a, &(0x7f0000000c00)=ANY=[@ANYBLOB="180000000700000000000000529c000018630000070000000000000008000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a50000001b32500000000000852000000200000018280000", @ANYRES32, @ANYBLOB="000000000000010018110000", @ANYRES32, @ANYBLOB="d0272fa406a81e76b7080000100600007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095000000000000004735b9ff080000009500000000000000"], &(0x7f0000000d80)='GPL\x00', 0x3, 0x5f, &(0x7f0000000dc0)=""/95, 0x40f00, 0x26, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000010c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff], &(0x7f0000001100)=[{0x0, 0x4, 0x4, 0x8}, {0x0, 0x2, 0x7, 0x5}, {0x5, 0x5, 0xd, 0x7}, {0x3, 0x3, 0xd, 0x2}, {0x1, 0x2, 0x6, 0x3}], 0x10, 0x9}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r3, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) 55.671738795s ago: executing program 3 (id=1462): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x1c, 0x1, 0x4, 0x3, 0x0, 0x0, {0xc, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)={0x18, 0x5a, 0x30d, 0x0, 0x0, "", [@nested={0x5, 0x0, 0x0, 0x1, [@generic='W']}]}, 0x18}], 0x1}, 0x0) sendmsg$OSF_MSG_REMOVE(r0, &(0x7f0000001800)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000017c0)={&(0x7f0000000500)={0x268, 0x1, 0x5, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [{{0x254, 0x1, {{0x2, 0xffffffff}, 0x1, 0x31, 0x6, 0x3, 0x14, 'syz0\x00', "d38d3b10fd21703b6bdd9cb6e21bf0cc0281844e9ee1f0dd1b2f76ffcdc93e03", "d08308703ec868808f17fb22baea3bf39a248f4725ebf74fe27225fa7a84e2e6", [{0x5, 0x6, {0x3, 0x85}}, {0x2, 0x4, {0x2, 0x4}}, {0x6, 0x9, {0x1, 0x10001}}, {0x8001, 0x47, {0x0, 0xe3a}}, {0x9, 0x6, {0x2, 0x9}}, {0x8, 0x5b7, {0x1, 0x400}}, {0x5, 0x2, {0x3, 0x4}}, {0x3, 0x8, {0x3, 0x7}}, {0x5f, 0x5, {0x0, 0x100}}, {0x7, 0xffff, {0x3, 0xa}}, {0x800, 0x800, {0x1}}, {0x5, 0x401, {0x0, 0x1}}, {0x8001, 0x1, {0x3, 0x7}}, {0x197e, 0x1, {0x0, 0x9}}, {0x7, 0x0, {0x0, 0x8}}, {0x8, 0x80, {0x0, 0x6}}, {0x4, 0x5, {0x0, 0x8}}, {0x9, 0x2, {0x2, 0xe3}}, {0xfff8, 0x0, {0x3, 0x3443}}, {0x947, 0x100, {0x2, 0x5}}, {0x8, 0x8, {0x0, 0x9}}, {0x3, 0xeb, {0x1}}, {0x2, 0x7, {0x2, 0x7}}, {0x0, 0x0, {0x1, 0xe81c}}, {0x4, 0x5, {0x3, 0x3}}, {0x0, 0xfff8, {0x1, 0x10000}}, {0x0, 0x0, {0x1, 0x81}}, {0x76a, 0xa, {0x1, 0x6}}, {0x7f, 0x2, {0x2, 0xaa8}}, {0x0, 0x9, {0x2, 0x6}}, {0x4, 0x1ff, {0x2, 0x401}}, {0x0, 0x4, {0x0, 0x8000}}, {0x3, 0x9, {0x3, 0xe}}, {0xffff, 0x4, {0x0, 0x3}}, {0x10, 0xbe, {0x3, 0x10000}}, {0x2, 0x4, {0x1, 0x4}}, {0x1ff, 0x7, {0x1, 0x5}}, {0x4, 0x9, {0x3, 0x4}}, {0x7, 0x9, {0x1, 0xfffffff9}}, {0x3ff, 0x4, {0x3, 0x8}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x1}, 0xc000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000780), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000007c0)={0x24, r5, 0x1, 0xffa5, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x800}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffff0}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10040}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x48, r5, 0x10, 0x70bd26, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xa900}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x9}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xfa48}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfff}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4008040) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r6, 0x0, 0xc8, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x580, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000000c0)={r7, 0x3, 0x30}, &(0x7f00000003c0)=0xc) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r8 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x240007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r8, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="91f8a984851bdef38491bbc4173c3c6f357d028feff84ab17c417789f9fc9b8572c98172b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c", 0xa6}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e", 0x28}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r8, &(0x7f00000007c0)=[{&(0x7f0000000140)="6c988855d6f7ee87c14169555d04716c2492a39f83707c2efe841c8aa2bd8fbf60180b65b12ebf7602986f8dc37931c1a60e45afb52fd9e1194a7216a8f86e902b921a5015cd84eed2b851e6368cf3e55c2a08e6d078b15d1021445cb199bc7e89a072f5aa6e1d07ec7a6416910f142fac825e6f8304c5e0a52de88cf4b154736689b4c556a5b59bb73c9b8817a17618604f98090fad1948f8502772233a7e66993184286c74081ce947bb1253e571f7e251afed056fba5cbb8705ce8e8b607e0c72ddedd5dbc5d6fadc8a8b4a9b92f7f645278428653770c5", 0xd9}, {&(0x7f00000002c0)="e6ed7e297fddb5fa64e59ae5c39948c92fa802f2fcda7c14b765100354e31c83b3651512112d48b2921e61371e4e65ec6ae0e5deaf65e50086328f35e33659f82475728a7590ac3606f7f3267c9b6400bdc0b3a130204e3e89103adafd5cb545a854f062056ab7943c9174d79c04995427c57bb98c31edbff2db1152484e1e790b5d217daee4fdbcfd11e35a77", 0x8d}, {&(0x7f0000000380)="b704ee9d685bdef1565e991eeb07c007a81af7ced96e9fbcf855d88a21dbb4a1f2653dd18367c8f404914d85a8cfc547b87bf23abacdc8e41db9607a94f6617f682d264413688b978b90e1607f761c2c77c56299d20ca546423bce", 0x5b}, {&(0x7f0000000400)="3fe3a3a70465018d6f66510bf4b02f53608791072afecedf59abfc74291a75baed28d67be03c956b10e2eeb57be2ca07d7fef7f46585c12d7c71939ff3919741216b05e112abb262e512d82086a1a2e7f72a", 0x52}, {&(0x7f0000000500)="72bef51f42bcd387eaafff845220df654188287b3df95e6bccb67b8c8fffe4016650ebb37fac50e9457ba3c8040d6b719f267a68d59d9c8a463041e206ecb01a51b07ab9ae015b316e", 0x49}, {&(0x7f0000000580)="fb411a9c85180744d674", 0xa}, {&(0x7f0000000640)="1cc96615eecaacfeb350b8076b6c81828f6cdf330cb6539f08559aac557883119bb42271c062c2b26c2ad805621611135174ea1fda23d1b3307077", 0x3b}], 0x7) write(r8, &(0x7f0000001e00)="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", 0x349) 55.597460547s ago: executing program 1 (id=1463): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="020000000400000006000000aa0b001000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r0}, 0x38) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000000010000fd0000000900000001"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000000), 0xcff5, r1}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0x0, &(0x7f0000000040)=""/141, &(0x7f0000000500), &(0x7f0000000280), 0x4, r1}, 0x38) r2 = socket(0x10, 0x80002, 0x0) socket$kcm(0x29, 0x7, 0x0) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@cswp={0x57, 0x114, 0x7, {{}, &(0x7f0000000100), 0x0}}], 0x58}, 0x0) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'\x00', 0x2}) ioctl$TUNSETDEBUG(r5, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETLINK(r5, 0x400454cd, 0x306) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x40, r8, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x209, 0x79, 0x7, 0x6, 0x3, 0x4, 0x1, 0x7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x3}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000015c0)={&(0x7f00000014c0)={0xd0, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x113e, 0x4e}}}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x5eb}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xc, 0xbd, [0xad9, 0xbc4, 0x1, 0x81]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x68, 0xbe, "a7deeebe6879a8f33cb2a0c55ea40e89a1f98e5766c63d1c580f78c7cb413597d978910995624f402c8472e2dcd300f21b640737d96b00184a36862b64a27fd21e2e0a6c001cab8dcd523d9c07f3492b49f420596111002d6c5d480b2c5fa9ae61307e2f"}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xb}, @NL80211_ATTR_STA_PLINK_ACTION={0x5}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xfa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xc}]}, 0xd0}, 0x1, 0x0, 0x0, 0x2c000}, 0x24000000) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r9, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) sendmsg$inet(r9, &(0x7f00000005c0)={&(0x7f00000003c0)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000140)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb35", 0x6}], 0x2, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}, 0x40004) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) recvmmsg$unix(r2, &(0x7f0000009a80)=[{{0x0, 0x0, &(0x7f0000004140)=[{0x0}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f0000001f80)=""/4096, 0x1000}], 0x3}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000056c0)}}], 0x2, 0x0, 0x0) 55.567962383s ago: executing program 0 (id=1464): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000ffffff7f95000000000000006828de3a51ee0754509041df0a05483685d81ca7742fb37837b6fc0f349edc0668979235ea0e2b830a73361fe089f793d18a23987900090197aab49874b30c0b4409720c92b867d49d1d48e49763dc9948ac1085faf5d4514f7400778a"], &(0x7f00000000c0)='syzkaller\x00', 0x7, 0xa, &(0x7f0000000100)=""/10, 0x41100, 0x66, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)=[{0x2, 0x3, 0x8, 0xc}]}, 0x94) pwrite64(r0, &(0x7f00000003c0)="2b40130122e69d5372c5418cea5b8f6bc1d0c9b545052d85d3f664be31d83f620f153f8f0f9c9f97cbbdcdc981659a33517ce0d67139789578ad5a552c9a3af803391efc9eb2f298f21b53e74889401189592673e5327b5c96484586172888830b88590f7ee16338767ffa5c1be09bcc10120be31354dd792db75a66b80b34c04838dbfc83df3058a804902b14db6751c9001152c17331c810b36135414db90263c4d71762558b0617890150731743dfe7f6cf402085eea4ec58ec87762850", 0xbf, 0x7) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000002440)={0x0}, 0x1, 0x0, 0x0, 0x20044800}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="00000400"/18, @ANYRES32], 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000000d061b01000000000000000007000003f9000100070000000e0003006269746d61703a69700000000500050001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x4040000) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r5 = socket$inet6(0xa, 0x80000, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0x1a0, 0x270, 0xffffffff, 0xffffffff, 0xd0, 0x1a0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x7, 0x5a0}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000c00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0xfffb, @loopback, 0x41}, 0x1c) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000600000a2c000000060a0104000000000000006781e61b2bd57225231d88007fa06e000a00000a0900010073797a31000000000500020073797a320000000020000000000a01080000000000000000050000010900010073797a310000000034000000080a030004001f00000000000a00000608000940000000010900020073797a32000000000900010073797a3100000000140000001500010000000000000000000200000a525b5fd4cb59f3bb00ac2e0ebee6b007c0baf691ada0379aff85230dff5ca674882f2574a7beb1374c6a3e3f2ff2a2e0307bfb8ac331d63ccbb19d163e98f62aa4bc9c9a5d7dcbc64c73ca7eafc4cb33104f5c1301b6409b9aad70f2d5fa76035cf149d6a21ec16fc8ee8c97e0565e9b4631b14b41f25172ba2e1ad1c77314da92b2"], 0xa8}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x703d28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x4, 0xa}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x37f}]}, 0x2c}}, 0x0) r7 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r7, 0x29, 0x14, &(0x7f0000000100), 0x120) setsockopt$sock_attach_bpf(r7, 0x29, 0x15, &(0x7f00000000c0), 0xb9) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0) socket$kcm(0x21, 0x2, 0x2) r8 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000001200)=0xe095, 0x4) 55.565085771s ago: executing program 2 (id=1465): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$nci(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffff5f}]}, 0x24}}, 0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r9}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x1000) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000c40), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0x34, r10, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan3\x00'}, @NL802154_ATTR_EXTENDED_ADDR={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008080}, 0x20004000) 55.454864291s ago: executing program 4 (id=1466): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r1, 0x40047440, &(0x7f00000000c0)=0xfff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000005e00010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x1c}}, 0x884) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x400452c8, &(0x7f0000000100)) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000001f00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001f40)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x968}, 0x1, 0x0, 0x0, 0x4ccf121fbb019e87}, 0x20000000) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x9, 0x7ff}, @sack_perm, @sack_perm, @mss={0x2, 0x4}, @window={0x3, 0x800, 0x6}, @window={0x3, 0x1, 0x10}, @sack_perm], 0x8) write$ppp(r1, &(0x7f0000000100)="229d", 0x2) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r9 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r9}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 55.298259717s ago: executing program 3 (id=1467): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)=0x9) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xf, &(0x7f0000000380)=ANY=[@ANYRESHEX=r4, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b70300003f0000008500000083000000bf0920000000000055090100000000009500000000000000bf91"], 0x0, 0x17a, 0x0, 0x0, 0x41000, 0xc, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010100}, {0x2, 0x4a2c, @remote}, {0x2, 0x4e25, @multicast2}, 0x204, 0x0, 0x0, 0x0, 0x2008, 0x0, 0x200003, 0x2, 0x2}) write$tun(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) writev(r1, &(0x7f0000000640), 0x0) close(r0) 54.889103184s ago: executing program 0 (id=1468): socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x34, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r3 = socket(0x2, 0x80805, 0x0) (async) close(0x3) (async, rerun: 64) r4 = socket(0x2, 0x80805, 0x0) (async, rerun: 64) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) (async) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r5, 0x84, 0x7a, &(0x7f0000000340)={r6, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) (async) sendmmsg$inet_sctp(r4, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x5}, 0x8) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fdfffffffcffffff1d00000008000300", @ANYRES32=r2, @ANYBLOB="50002f800c0002000201aaaaaaaaaaaa38000380080001000000000005000300000000002400038006000300a1aa000008000200020000000600010003000000080002000200000008"], 0x6c}, 0x1, 0x0, 0x0, 0xd49920d352514f42}, 0x4000000) 54.645991s ago: executing program 2 (id=1469): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xfffffeff, 0xfff, 0x4, 0x21200, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x8, 0x4}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000100)=ANY=[], 0x342) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r4, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000080), &(0x7f00000000c0)=0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f00000007c0), 0x0}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.stat\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0xc, 0x0, 0xfffffffffffffffd, 0x2758, 0x2000000001a0, 0x9], 0x0, 0x0, 0x0}, 0x108) write$cgroup_subtree(r5, &(0x7f0000000200)=ANY=[], 0x10448) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r6, 0x1, 0x1d, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYRES8=0x0], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000018000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001c006000100d9030000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x40408d4}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c000000100001052bbd7400ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="01600000400000001c0012800800010067726500100002800400120006000e0001000000172e9d3e4652cedeeef913f42f5d"], 0x3c}}, 0x84000) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x1f, 0x140f, 0x1, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xa, 0x45, 'ipoib\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x1}]}, 0x2c}}, 0x84) socket$l2tp(0x2, 0x2, 0x73) 54.354059254s ago: executing program 4 (id=1470): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000002c0)={r0, &(0x7f0000000140), 0x0}, 0x20) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x64, 0x5f, 0x600, 0x101, 0x8cb8}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x3}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x70}}, 0x0) 54.294789453s ago: executing program 3 (id=1471): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x40}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) unshare(0x6020400) ioctl$FITHAW(0xffffffffffffffff, 0xc0045878) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0xffff5c73, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x3}], 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(r3) r7 = socket$inet6(0xa, 0x5, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x5a0, 0x0, 0xffffff80, 0x178, 0xd0040000, 0x178, 0x4d0, 0x22b, 0x258, 0x4d0, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x368, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{0x94}, {0x25, 0x0, 0x1}, {0x0, 0x40}, {}, {0x0, 0x7, 0x8}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x4}, {}, {0x6}, {}, {0x9}, {}, {}, {}, {0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0x80000000}, {0x870}, {}, {}, {}, {0x2, 0xfe}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x3, 0x10}, {}, {}, {0xfffe, 0x7, 0x4}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {0x8, 0x8, 0x0, 0xfffffffc}, {}, {0x0, 0xfc, 0xe4}, {0x0, 0x0, 0xff}, {}, {0x3}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0x0, 0x0, 0xffffffff}, {}, {0x4, 0x8a}, {}, {}, {}, {0x0, 0x4}]}}, @common=@inet=@socket1={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1c, 0x7, 0x279, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x170}}}}, {{@ipv6={@private2, @empty, [0xff, 0x0, 0xffffff00, 0xff000000], [0xff000000, 0xff000000, 0xffffff00], 'vlan1\x00', 'pim6reg1\x00', {}, {0xff}, 0x0, 0x9, 0x1, 0x12}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x11, 0x0, 0x0, 0x0, 'syz1\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r6, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 54.274307318s ago: executing program 0 (id=1472): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0x9, @private0, 0xa5c}}, 0xff, 0xff}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="700000002f0009002abd700000000000040000005a001180e796bd5ad42541affac6ff415af85ab494e09d498fc605baa5fe20e0f8a725f9f47392b70f555def59af68eb7e22475186e591e23ad38a08862df02baf33ef122e5cfef41fc97744a294179b97276a3f82efacb820bb0000"], 0x70}, 0x1, 0x0, 0x0, 0x42804}, 0x8088) 54.14946465s ago: executing program 4 (id=1473): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x10000000}) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000002c0)) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x20, 0x0, 0x1, 0x70bd2d, 0x0, {0x3}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0xfffffffffffffceb, 0x1, 'eth\x00'}]}, @TIPC_NLA_NODE={0x0, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "8a650b63b6d09b67c77615d195d78a574d32f04051c2609d00d9ef"}}, @TIPC_NLA_NODE_ADDR={0x0, 0x1, 0x4}, @TIPC_NLA_NODE_REKEYING={0x0, 0x6, 0x4}, @TIPC_NLA_NODE_KEY={0x0, 0x4, {'gcm(aes)\x00', 0x0, "67e41bd0cbed193b5cd7880b647626f11c92df55e6f4ad8e648feb"}}, @TIPC_NLA_NODE_ID={0x0, 0x3, "a54045041580293ecca74d9c718d8989ffffac1b93479d45b254a8f4401cbd22cc85e6eab9161c074523933b9f2b7f1055cbb71254b0a532c73bb10977cbbb85240ef1acc8457d01cc0a087f05319ff9ba4c53702d5dfe25f8607f941fa135f03bdd32b11b0d7dc6c38f71394bbf9548f5bf891ba93d847168788a41db06aa40eef8b8300a3bb231ac8ccb8ad96859189cf3dd0ea6e46ffd967d614d2c4bfb913499fae9f7fe3965f27006d96c43861ef288f555768e9b27f1b801ea44e99e60f9b00ceb1c96166dd2b860a5a3b79388976c069b4bb0a165119e5674"}, @TIPC_NLA_NODE_ID={0x0, 0x3, "4d16236a7438fcca745e463a1fb6bf2a9c1bccd7e8f72610cb9100e53d2c7e13bf1be3a4db69668028ba086d61a94f89f14290b04e69bfe6138011f58898023428b91d38d0856ec9b8"}, @TIPC_NLA_NODE_ID={0x0, 0x3, "119c8ca8b67c86f767"}, @TIPC_NLA_NODE_REKEYING={0x0, 0x6, 0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20040086}, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x3, @remote, 'ip6_vti0\x00'}}, 0x1e) r5 = socket(0x10, 0x3, 0x0) write(r5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r5, 0x84, 0x12, &(0x7f0000000080)=0x9, 0x4) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000040)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r6, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r6, 0x4004743a, &(0x7f00000000c0)) read(r0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x44, r8, 0xd55319eec59dfa33, 0xfffffffd, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x0, 0x2000067}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'caif0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x40c2010) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x944}, 0x4004050) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x502}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r6, 0x941c, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r12 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r11, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r12, @ANYRES32=r12], 0x44}}, 0x2000800) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r3) sendmsg$NL80211_CMD_NEW_MPATH(r12, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x58, r13, 0x400, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x22}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0x0, 0x1a, @device_b}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20000014}, 0x50) 54.075328557s ago: executing program 0 (id=1474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000280)={0x206, 0x0, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x7fffffff, 0x0, 0x8001, 0x40, 0x10000}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x1a, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0xdacda28c0bed779f, 0xa, 0xdf4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) 53.435615568s ago: executing program 2 (id=1475): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltclass={0x24, 0x29, 0x800, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff3}, {0xb, 0xfff1}, {0x6, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x48008}, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x8}}}, 0x24}}, 0x4000) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x29, 0xb8, 0x0, 0x7c2, 0xa, @remote, @dev={0xfe, 0x80, '\x00', 0x22}, 0x20, 0x700, 0xfffffffd, 0x4}}) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000400)={r1, 0x1, 0x6, @random="dc7f131c88e0"}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="007ad81d2a087f2a495e59e5b8a70bcf7024657e5de494e0cd8ed26470f9a37f239347e03d9553d99f5912559a7ecff746bb6a03edce7179138229aee4cdf342d4726eea48eb9bc3e5b6cc36e5764e4714cd1eb2670c164ed210666890ff5f38f5246acc", @ANYRES16=r2, @ANYBLOB="00012abd7000ffdbdf253b0000000c009900ffffff7f7300000004006c00"], 0x24}, 0x1, 0x0, 0x0, 0x4040084}, 0x4000040) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x200140, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000240)={'netdevsim0\x00', @remote}) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="00042d526fd9abb63271712742ab3192e9b98da37cbd70146510cef322a4e52902b4f24bac"], 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x2080) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 52.915782366s ago: executing program 3 (id=1476): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000000002010200000000000000000a00000004000380300002802c00018014000300fc01000000000000000000000000000114000400fc010000000000000c00000000000001"], 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001300)={0x0, 0x0, &(0x7f00000012c0)={&(0x7f0000000200)={0x60, 0x30, 0x2, 0x70bd28, 0x25dfdbfb, {0x1d}, [@typed={0x49, 0x96, 0x0, 0x0, @binary="6611c5ff80d2f2d6dcbf86885c539d93b9d9550be4b78ebf467871c533a227c18f95099e67d30421b00a6445b07f2af6e2d00a8e42227a6fcd5b343a80f357f34b2aaa38d2"}]}, 0x60}}, 0x20040000) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x6484c2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) close(r2) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaab0c942034375886445000028002200000006"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r4, 0x1, 0xd8, 0x6, @broadcast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 52.849146587s ago: executing program 2 (id=1477): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000080)=0xfffffffd, 0x4) r1 = socket$kcm(0x2, 0x5, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in=@private=0xa010101, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e21, 0x0, 0x4e24, 0xfffc, 0x2, 0x0, 0x0, 0x5c}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffd, 0x3}, {0x800000000000, 0x3, 0x1ffffffffffd}, 0x0, 0x0, 0x1, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000001000000000000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000048500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x50, 0x6, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x4855}, 0x20004000) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000140)=r6, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x2, &(0x7f0000000240)=@raw=[@map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x5835}], &(0x7f0000000280)='GPL\x00', 0x7f, 0xe5, &(0x7f00000003c0)=""/229, 0x41000, 0x20, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x4, 0x1, 0x4, 0x88af}, 0x10, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000580)=[r5, r5, r5, r5, r5, r1, r5, r3], &(0x7f00000005c0)=[{0x5, 0x3, 0x6, 0x7}, {0x5, 0x1, 0x0, 0x2}, {0x4, 0x4, 0xa, 0x4}, {0x4, 0x5, 0x0, 0x3}, {0x4, 0x5, 0x8, 0x4}, {0x4, 0x2, 0x3, 0x2}, {0x5, 0x3, 0x3, 0x3}, {0x0, 0x3, 0xb, 0x7}], 0x10, 0xffff}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000700)=@o_path={&(0x7f0000000200)='./file0\x00', r7, 0x4000, r4}, 0x18) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x800) sendmsg$inet(r1, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r8, 0x84, 0x79, 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r8, &(0x7f0000000800)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r9, 0x0, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x991c) sendmsg$NFT_MSG_GETSET(r6, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x20, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x1) 52.635665635s ago: executing program 2 (id=1478): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000020c0)={0x20, 0x26, 0x301, 0x270bd1d, 0x25dfdbf7, {0x5}, [@nested={0xc, 0x138, 0x0, 0x1, [@nested={0x8, 0x103, 0x0, 0x1, [@nested={0x4, 0xa3}]}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c4}, 0x0) 0s ago: executing program 32 (id=1474): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SYNC_WAIT(0xffffffffffffffff, 0x40109441, &(0x7f0000000280)={0x206, 0x0, 0x6}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x2, 0x4010, 0xffffffffffffffff, 0x21d63000) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[], 0x50) r2 = socket$l2tp(0x2, 0x2, 0x73) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[], 0x9}, 0x1, 0x0, 0x0, 0x14}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000380)=@filter={'filter\x00', 0x42, 0x4, 0x311, 0xffffffff, 0x1d8, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {0xff}}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x4}}, @common=@unspec=@limit={{0x48}, {0xfffffffa, 0xb, 0x0, 0x0, 0x0, 0xfffffffc}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x1278]}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x0, 0x3, 0x1, 0x2, 0x0, 0x5], 0x1, 0x4}, {0xffffffffffffffff, [0x7, 0x4, 0x4, 0x5], 0x6, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3a0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000300)) getsockopt$inet_opts(r2, 0x0, 0x16, &(0x7f0000000180)=""/171, &(0x7f0000000240)=0xab) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r4, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010400ffbe8c5ee17688a20032e80101000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000eaffff00000000000062068f5ee50ce5af9b1c5683ffffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8) syz_emit_ethernet(0x3e, &(0x7f0000000200)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb0800450000300000000000019078ac1e0001ac1414aa040090780008000045a60007006600810229100000200000e0000001"], 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r1, 0x40406f06, &(0x7f0000000140)={0x33, 0x4, 0x7, 0x4}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000040)={0x7fffffff, 0x0, 0x8001, 0x40, 0x10000}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'veth0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl(r6, 0x1a, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100"/40) ioctl(r6, 0x890b, &(0x7f0000000100)="000000010000000000000000020000000f0000006c6170623000000000000000000000000000000000000000000000000000000000000000e000000000000000") sendmsg$kcm(0xffffffffffffffff, 0x0, 0x4000) close(0x3) socket(0xdacda28c0bed779f, 0xa, 0xdf4) connect$inet(r0, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) kernel console output (not intermixed with test programs): .471480][ T143] IPVS: starting estimator thread 0... [ 136.544903][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz.0.524'. [ 136.544928][ T8128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.544944][ T8128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.546652][ T8128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.546673][ T8128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.557923][ T8121] IPVS: using max 32 ests per chain, 76800 per kthread [ 136.591451][ T8135] netlink: 24 bytes leftover after parsing attributes in process `syz.1.523'. [ 136.591484][ T8135] netlink: 16 bytes leftover after parsing attributes in process `syz.1.523'. [ 136.654067][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.523'. [ 136.863417][ T8145] xt_ecn: cannot match TCP bits for non-tcp packets [ 137.145076][ T8160] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.527'. [ 137.606258][ T8187] xt_IDLETIMER: label is empty or not nul-terminated [ 137.743126][ T7867] block nbd64: NBD_DISCONNECT [ 138.213767][ T7867] udevd[7867]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 138.363332][ T8237] netlink: zone id is out of range [ 138.363348][ T8237] netlink: zone id is out of range [ 138.363355][ T8237] netlink: zone id is out of range [ 138.363363][ T8237] netlink: zone id is out of range [ 138.363371][ T8237] netlink: zone id is out of range [ 138.363379][ T8237] netlink: zone id is out of range [ 138.363386][ T8237] netlink: zone id is out of range [ 138.363397][ T8237] netlink: zone id is out of range [ 138.363404][ T8237] netlink: zone id is out of range [ 138.363412][ T8237] netlink: zone id is out of range [ 138.498716][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 139.792804][ T8298] netlink: 'syz.4.561': attribute type 1 has an invalid length. [ 139.792825][ T8298] __nla_validate_parse: 10 callbacks suppressed [ 139.792836][ T8298] netlink: 1 bytes leftover after parsing attributes in process `syz.4.561'. [ 139.972039][ T8306] debugfs: '.PÑè'óG!DEÒSˆ' already exists in 'ieee80211' [ 140.033820][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.034005][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.058796][ T8306] sysfs: cannot create duplicate filename '/class/ieee80211/.PÑè'óG!DEÒSˆ' [ 140.058832][ T8306] CPU: 0 UID: 0 PID: 8306 Comm: syz.3.563 Not tainted syzkaller #0 PREEMPT(full) [ 140.058853][ T8306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.058870][ T8306] Call Trace: [ 140.058878][ T8306] [ 140.058886][ T8306] dump_stack_lvl+0xe8/0x150 [ 140.058927][ T8306] sysfs_warn_dup+0x8e/0xa0 [ 140.058966][ T8306] sysfs_do_create_link_sd+0xc0/0x110 [ 140.058998][ T8306] device_add_class_symlinks+0x1cf/0x240 [ 140.059023][ T8306] device_add+0x467/0xb80 [ 140.059046][ T8306] wiphy_register+0x1fc8/0x2ff0 [ 140.059083][ T8306] ? __pfx_wiphy_register+0x10/0x10 [ 140.059102][ T8306] ? __pfx_netdev_run_todo+0x10/0x10 [ 140.059125][ T8306] ? minstrel_ht_alloc+0x6e0/0x7e0 [ 140.059149][ T8306] ? ieee80211_init_rate_ctrl_alg+0x55d/0x5d0 [ 140.059176][ T8306] ieee80211_register_hw+0x3d7c/0x4b40 [ 140.059208][ T8306] ? ieee80211_register_hw+0x19d1/0x4b40 [ 140.059245][ T8306] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 140.059266][ T8306] ? __asan_memset+0x22/0x50 [ 140.059280][ T8306] ? __hrtimer_setup+0x1b7/0x260 [ 140.059299][ T8306] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 140.059319][ T8306] mac80211_hwsim_new_radio+0x3264/0x5720 [ 140.059358][ T8306] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 140.059374][ T8306] ? kstrndup+0xbd/0x160 [ 140.059393][ T8306] ? kstrndup+0xbd/0x160 [ 140.059409][ T8306] hwsim_new_radio_nl+0xd8b/0xf90 [ 140.059438][ T8306] genl_family_rcv_msg_doit+0x233/0x340 [ 140.059463][ T8306] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.059492][ T8306] ? bpf_lsm_capable+0x9/0x20 [ 140.059505][ T8306] ? security_capable+0x7e/0x2c0 [ 140.059528][ T8306] genl_rcv_msg+0x614/0x7a0 [ 140.059551][ T8306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.059568][ T8306] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 140.059595][ T8306] netlink_rcv_skb+0x226/0x4a0 [ 140.059610][ T8306] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.059629][ T8306] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.059656][ T8306] ? down_read+0x2be/0x330 [ 140.059673][ T8306] genl_rcv+0x28/0x40 [ 140.059690][ T8306] netlink_unicast+0x7bd/0x940 [ 140.059720][ T8306] netlink_sendmsg+0x813/0xb40 [ 140.059743][ T8306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.059765][ T8306] ? apparmor_socket_sendmsg+0x98/0x360 [ 140.059784][ T8306] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.059798][ T8306] sock_sendmsg_nosec+0x14e/0x190 [ 140.059819][ T8306] ____sys_sendmsg+0x54e/0x850 [ 140.059843][ T8306] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.059870][ T8306] ? import_iovec+0x73/0xa0 [ 140.059892][ T8306] ___sys_sendmsg+0x2a5/0x360 [ 140.059912][ T8306] ? __lock_acquire+0x747/0x2de0 [ 140.059938][ T8306] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.059986][ T8306] ? __fget_files+0x2a/0x420 [ 140.060007][ T8306] ? __fget_files+0x3a2/0x420 [ 140.060036][ T8306] __x64_sys_sendmsg+0x1b1/0x290 [ 140.060060][ T8306] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 140.060102][ T8306] do_syscall_64+0x166/0x520 [ 140.060125][ T8306] ? trace_irq_disable+0x3b/0x140 [ 140.060139][ T8306] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.060154][ T8306] ? clear_bhb_loop+0x70/0xc0 [ 140.060172][ T8306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.060186][ T8306] RIP: 0033:0x7f0ee259e159 [ 140.060209][ T8306] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.060225][ T8306] RSP: 002b:00007f0ee33e7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.060246][ T8306] RAX: ffffffffffffffda RBX: 00007f0ee2825fa0 RCX: 00007f0ee259e159 [ 140.060258][ T8306] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 140.060269][ T8306] RBP: 00007f0ee263506b R08: 0000000000000000 R09: 0000000000000000 [ 140.060278][ T8306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.060287][ T8306] R13: 00007f0ee2826038 R14: 00007f0ee2825fa0 R15: 00007ffd1771df38 [ 140.060313][ T8306] [ 140.065462][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.065637][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.065787][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.065947][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.066103][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.066265][ T8307] netlink: 72 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.072732][ T8308] netlink: 72 bytes leftover after parsing attributes in process `syz.3.563'. [ 140.137497][ T8312] netlink: 'syz.4.564': attribute type 1 has an invalid length. [ 140.266085][ T8312] bond1: entered promiscuous mode [ 140.266599][ T8312] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.280855][ T8315] ipvlan2: entered allmulticast mode [ 140.280875][ T8315] bond1: entered allmulticast mode [ 140.307027][ T8316] ipvlan3: entered allmulticast mode [ 140.488547][ T8312] bond1: (slave bridge1): making interface the new active one [ 140.488571][ T8312] bridge1: entered promiscuous mode [ 140.488758][ T8312] bridge1: entered allmulticast mode [ 140.536800][ T8312] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 140.743643][ T8337] syzkaller0: entered promiscuous mode [ 140.743666][ T8337] syzkaller0: entered allmulticast mode [ 140.746846][ T8332] tipc: Started in network mode [ 140.746876][ T8332] tipc: Node identity 7e9007c5d609, cluster identity 4711 [ 140.747203][ T8332] tipc: Enabled bearer , priority 0 [ 140.879797][ T8332] tipc: Resetting bearer [ 140.940092][ T8332] tipc: Disabling bearer [ 140.965231][ T8344] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 142.040589][ T8361] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 142.084011][ T1364] bond6: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 142.084238][ T1364] bond6: (slave veth5): making interface the new active one [ 142.112012][ T1364] bond6: active interface up! [ 142.276148][ T8361] tap0: tun_chr_ioctl cmd 1074025677 [ 142.276246][ T8361] tap0: linktype set to 805 [ 142.276402][ T8363] tap0: tun_chr_ioctl cmd 1074025677 [ 142.276451][ T8363] tap0: linktype set to 805 [ 142.344450][ T8375] netlink: 'syz.3.579': attribute type 1 has an invalid length. [ 142.449034][ T8375] 8021q: adding VLAN 0 to HW filter on device bond7 [ 142.468836][ T8382] bond7: (slave geneve2): making interface the new active one [ 142.474233][ T8382] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 142.553452][ T8384] syzkaller0: entered promiscuous mode [ 142.553477][ T8384] syzkaller0: entered allmulticast mode [ 142.559084][ T8358] sit0: entered promiscuous mode [ 142.559243][ T8358] netlink: 'syz.1.573': attribute type 1 has an invalid length. [ 142.627495][ T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.627542][ T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.627577][ T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.627610][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.869625][ T8403] netlink: 'syz.0.587': attribute type 8 has an invalid length. [ 142.894390][ T8395] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.894850][ T8395] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.038199][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.064465][ T8395] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.365226][ T8395] batman_adv: batadv0: Interface deactivated: gretap1 [ 143.488490][ T143] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.488573][ T143] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.488609][ T143] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.490069][ T8399] netlink: 'syz.2.586': attribute type 12 has an invalid length. [ 143.490090][ T8399] netlink: 'syz.2.586': attribute type 29 has an invalid length. [ 143.540654][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 143.687440][ T43] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.888625][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.888647][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.962613][ T8439] netlink: 'syz.4.592': attribute type 1 has an invalid length. [ 144.026960][ T8439] net_ratelimit: 377 callbacks suppressed [ 144.026990][ T8439] netlink: Failed to add GPL helper -22 [ 144.027037][ T8439] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.089455][ T8444] netlink: 'syz.1.595': attribute type 2 has an invalid length. [ 144.193286][ T4935] Bluetooth: hci4: link tx timeout [ 144.193304][ T4935] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 144.195658][ T4935] Bluetooth: hci4: link tx timeout [ 144.195675][ T4935] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 144.796576][ T8474] bond3 (unregistering): Released all slaves [ 145.108192][ T8498] __nla_validate_parse: 16 callbacks suppressed [ 145.108211][ T8498] netlink: 72 bytes leftover after parsing attributes in process `syz.1.608'. [ 145.326762][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 145.442936][ T8517] netlink: 4 bytes leftover after parsing attributes in process `syz.3.610'. [ 145.766826][ T8543] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 146.146829][ T8565] syzkaller0: entered promiscuous mode [ 146.146854][ T8565] syzkaller0: entered allmulticast mode [ 146.259736][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 146.384550][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz.1.625'. [ 146.386172][ T8587] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.548277][ T8559] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.548317][ T8559] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.548346][ T8559] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.608395][ T1377] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.776490][ T8611] validate_nla: 1 callbacks suppressed [ 146.776511][ T8611] netlink: 'syz.2.631': attribute type 39 has an invalid length. [ 147.394904][ T8628] bridge0: port 4(bond0) entered disabled state [ 147.395997][ T8628] bridge0: port 3(veth0) entered disabled state [ 147.396336][ T8628] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.397023][ T8628] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.443356][ T1377] tipc: Subscription rejected, illegal request [ 147.620320][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.639'. [ 147.647737][ T13] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.647758][ T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.647781][ T13] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.647803][ T13] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.647836][ T13] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.647859][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.647889][ T13] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.647913][ T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.835425][ T8659] netlink: 16 bytes leftover after parsing attributes in process `syz.0.643'. [ 147.881691][ T8662] ªªªªªª: renamed from vlan0 [ 147.952426][ T8664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.645'. [ 148.174961][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 148.297513][ T5629] Bluetooth: hci4: unexpected cc 0x2003 length: 0 < 9 [ 148.297549][ T5629] Bluetooth: hci4: unexpected event for opcode 0x2003 [ 148.320355][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.4.650'. [ 148.332060][ T8672] bridge0: entered promiscuous mode [ 148.332108][ T8672] bridge0: entered allmulticast mode [ 148.348749][ T8672] bond3: (slave bridge0): Enslaving as an active interface with an up link [ 148.440678][ T8688] netlink: 'syz.2.652': attribute type 1 has an invalid length. [ 148.440700][ T8688] netlink: 576 bytes leftover after parsing attributes in process `syz.2.652'. [ 148.568926][ T8693] TC_ACT_REPEAT abuse ? [ 148.577418][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 148.598847][ T8701] TC_ACT_REPEAT abuse ? [ 148.985013][ T8731] tipc: Started in network mode [ 148.985045][ T8731] tipc: Node identity ac14142f, cluster identity 4711 [ 148.988626][ T8731] tipc: Enabled bearer , priority 10 [ 149.608818][ T8754] netlink: 'syz.2.671': attribute type 21 has an invalid length. [ 149.608933][ T8754] netlink: 'syz.2.671': attribute type 4 has an invalid length. [ 150.123870][ T5745] tipc: Node number set to 2886997039 [ 150.289333][ T8793] __nla_validate_parse: 74 callbacks suppressed [ 150.289353][ T8793] netlink: 32 bytes leftover after parsing attributes in process `syz.2.684'. [ 150.295604][ T8793] xt_policy: output policy not valid in PREROUTING and INPUT [ 150.376324][ T8799] netlink: 12 bytes leftover after parsing attributes in process `syz.0.686'. [ 150.432723][ T8799] bond4: entered promiscuous mode [ 150.433110][ T8799] 8021q: adding VLAN 0 to HW filter on device bond4 [ 150.895800][ T8838] netlink: 80 bytes leftover after parsing attributes in process `syz.4.694'. [ 151.003908][ T151] nci: nci_rx_work: unknown MT 0x6 [ 151.483590][ T8862] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 151.527005][ T8855] syzkaller0: entered promiscuous mode [ 151.527031][ T8855] syzkaller0: entered allmulticast mode [ 151.541857][ T8865] netlink: 'syz.3.699': attribute type 10 has an invalid length. [ 151.542978][ T8862] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.545448][ T8862] team0: Port device netdevsim1 added [ 151.572614][ T8865] team0: Port device netdevsim1 removed [ 151.576142][ T8865] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 151.581759][ T8865] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 151.584113][ T8859] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 151.702036][ T8872] netlink: 28 bytes leftover after parsing attributes in process `syz.3.702'. [ 151.702739][ T8872] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 151.702772][ T8872] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 152.977974][ T5629] Bluetooth: hci4: command 0x0405 tx timeout [ 153.617559][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 153.736867][ T8831] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 153.935844][ T8891] netlink: 40 bytes leftover after parsing attributes in process `syz.3.706'. [ 153.941469][ T8891] Set syz0 is full, maxelem 0 reached [ 153.948502][ T8888] block nbd2: server does not support multiple connections per device. [ 153.968418][ T8894] netlink: 32 bytes leftover after parsing attributes in process `syz.0.705'. [ 153.982710][ T8888] block nbd2: shutting down sockets [ 155.467416][ T8896] bond0: (slave team0): Releasing backup interface [ 155.470686][ T8896] bridge_slave_0: left allmulticast mode [ 155.470711][ T8896] bridge_slave_0: left promiscuous mode [ 155.470969][ T8896] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.522173][ T8896] bridge_slave_1: left allmulticast mode [ 155.522199][ T8896] bridge_slave_1: left promiscuous mode [ 155.522421][ T8896] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.556161][ T8896] bond0: (slave bond_slave_0): Releasing backup interface [ 155.576159][ T8896] bond0: (slave bond_slave_1): Releasing backup interface [ 155.589046][ T8896] team0: Port device team_slave_0 removed [ 155.591458][ T8896] team0: Port device team_slave_1 removed [ 155.591825][ T8896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 155.596371][ T8896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 155.597075][ T8896] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 155.620699][ T8888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 155.620723][ T8888] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 155.694345][ T8888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 155.703464][ T8888] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 155.703946][ T8912] netlink: 'syz.3.711': attribute type 1 has an invalid length. [ 155.772674][ T8888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 155.772697][ T8888] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 155.843606][ T8888] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 155.843702][ T8888] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 156.121960][ T8933] netlink: 4 bytes leftover after parsing attributes in process `syz.1.715'. [ 156.298851][ T8937] veth0_vlan: entered allmulticast mode [ 156.299128][ T8937] veth0_vlan: left allmulticast mode [ 156.314447][ T8943] netlink: 44 bytes leftover after parsing attributes in process `syz.1.720'. [ 156.314471][ T8943] netlink: 43 bytes leftover after parsing attributes in process `syz.1.720'. [ 156.314485][ T8943] netlink: 'syz.1.720': attribute type 6 has an invalid length. [ 156.314497][ T8943] netlink: 'syz.1.720': attribute type 5 has an invalid length. [ 156.314509][ T8943] netlink: 43 bytes leftover after parsing attributes in process `syz.1.720'. [ 156.332673][ T8939] bridge0: port 3(batadv1) entered blocking state [ 156.333184][ T8939] bridge0: port 3(batadv1) entered disabled state [ 156.333335][ T8939] batadv1: entered allmulticast mode [ 156.338545][ T8939] batadv1: entered promiscuous mode [ 156.489100][ T8950] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.524208][ T8949] netlink: 64 bytes leftover after parsing attributes in process `syz.0.723'. [ 156.786385][ T8923] ip6gre1: entered promiscuous mode [ 156.786409][ T8923] ip6gre1: entered allmulticast mode [ 156.800648][ T8921] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 156.830046][ T8559] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 156.830065][ T8559] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 156.933758][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.4.727'. [ 157.023006][ T8976] netlink: 'syz.2.729': attribute type 4 has an invalid length. [ 157.178375][ T8961] bond3: option lacp_active: invalid value (5) [ 157.180371][ T8961] bond3 (unregistering): Released all slaves [ 157.361727][ T8991] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 157.364704][ T8559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.364836][ T8559] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.389552][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.390034][ T8991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.731'. [ 157.435167][ T8995] tipc: Enabled bearer , priority 0 [ 157.435858][ T8995] syzkaller0: entered promiscuous mode [ 157.435877][ T8995] syzkaller0: entered allmulticast mode [ 157.456138][ T8995] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 157.477456][ T8997] netlink: 'syz.3.734': attribute type 1 has an invalid length. [ 157.553899][ T8995] tipc: Resetting bearer [ 157.567892][ T8994] tipc: Resetting bearer [ 157.606355][ T8994] tipc: Disabling bearer [ 157.615888][ T9001] netlink: 'syz.2.735': attribute type 4 has an invalid length. [ 157.728450][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 157.753107][ T9014] netlink: 'syz.0.738': attribute type 1 has an invalid length. [ 157.786048][ T9014] bond6: entered promiscuous mode [ 157.786459][ T9014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.834358][ T9014] 8021q: adding VLAN 0 to HW filter on device bond6 [ 157.836437][ T9014] bond6: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 157.836459][ T9014] bond6: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 157.855902][ T9014] bond6: (slave ip6gre1): making interface the new active one [ 157.855927][ T9014] ip6gre1: entered promiscuous mode [ 157.877606][ T9014] bond6: (slave ip6gre1): Enslaving as an active interface with an up link [ 157.898857][ T9014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.738'. [ 157.914831][ T9014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.738'. [ 157.962511][ T8419] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 158.092164][ T9036] netlink: 24 bytes leftover after parsing attributes in process `syz.4.746'. [ 158.272267][ T9048] netlink: 'syz.1.749': attribute type 16 has an invalid length. [ 158.272288][ T9048] netlink: 'syz.1.749': attribute type 17 has an invalid length. [ 158.312677][ T9048] sit0: left promiscuous mode [ 158.343568][ T9048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.471797][ T9048] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 158.471821][ T9048] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.481460][ T9048] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 158.550241][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.550347][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.563718][ T50] bridge0: port 2() entered blocking state [ 158.563821][ T50] bridge0: port 2() entered forwarding state [ 158.641286][ T9073] openvswitch: netlink: Missing key (keys=40, expected=100) [ 158.657393][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 158.762743][ T9071] ip6tnl2: entered promiscuous mode [ 158.762765][ T9071] ip6tnl2: entered allmulticast mode [ 158.795298][ T9075] tipc: Started in network mode [ 158.795338][ T9075] tipc: Node identity fc020000000000000000000000000001, cluster identity 4711 [ 158.795393][ T9075] tipc: Enabling of bearer rejected, failed to enable media [ 158.847476][ T9075] tipc: Enabling of bearer rejected, failed to enable media [ 158.867316][ T9083] tap0: tun_chr_ioctl cmd 2148553947 [ 158.883019][ T9083] pim6reg: entered allmulticast mode [ 159.022197][ T9082] pim6reg: left allmulticast mode [ 159.193467][ T9097] syzkaller0: left promiscuous mode [ 159.193490][ T9097] syzkaller0: left allmulticast mode [ 159.472074][ T13] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.473232][ T13] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.473268][ T13] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.473299][ T13] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 160.234609][ T9154] syzkaller0: entered promiscuous mode [ 160.234632][ T9154] syzkaller0: entered allmulticast mode [ 160.256662][ T9154] tipc: Enabled bearer , priority 0 [ 160.293815][ T9152] netlink: Unknown conntrack attr (type=246, max=9) [ 160.356153][ T9153] tipc: Resetting bearer [ 160.439727][ T9153] tipc: Disabling bearer [ 160.512255][ T9168] bridge0: left promiscuous mode [ 160.512282][ T9168] bridge0: left allmulticast mode [ 160.780280][ T9185] batman_adv: batadv0: Adding interface: syzkaller0 [ 160.780299][ T9185] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 160.780507][ T9185] batman_adv: batadv0: Interface activated: syzkaller0 [ 160.833772][ T9188] vxcan0: entered allmulticast mode [ 161.141922][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 161.254889][ T9185] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.260620][ T9185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.303757][ T9185] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.303775][ T9185] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.306428][ T9185] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 161.401982][ T9175] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 161.447050][ T9175] batman_adv: batadv0: Removing interface: syzkaller0 [ 161.906639][ T9231] __nla_validate_parse: 13 callbacks suppressed [ 161.906659][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.3.799'. [ 161.945664][ T9231] 8021q: adding VLAN 0 to HW filter on device bond8 [ 161.960877][ T9226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.798'. [ 161.963108][ T9231] validate_nla: 2 callbacks suppressed [ 161.963126][ T9231] netlink: 'syz.3.799': attribute type 10 has an invalid length. [ 161.963140][ T9231] netlink: 40 bytes leftover after parsing attributes in process `syz.3.799'. [ 161.963465][ T9231] Bluetooth: hci0: unsupported parameter 1280 [ 161.963480][ T9231] Bluetooth: hci0: invalid length 0, exp 4 for type 32 [ 162.392790][ T9256] netlink: 20 bytes leftover after parsing attributes in process `syz.2.807'. [ 162.469468][ T9257] team0: Port device syz_tun removed [ 162.538362][ T9266] 8021q: VLANs not supported on ipvlan0 [ 162.706106][ T9281] netlink: NAT flags may be given only when NAT range (SRC or DST) is also specified. [ 162.706139][ T9281] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 163.516868][ T9315] netlink: 'syz.2.820': attribute type 1 has an invalid length. [ 163.622821][ T9321] netlink: 16410 bytes leftover after parsing attributes in process `syz.2.820'. [ 163.686066][ T9315] bond6: entered promiscuous mode [ 163.687054][ T9315] 8021q: adding VLAN 0 to HW filter on device bond6 [ 163.700427][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 163.910832][ T9331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.824'. [ 164.011596][ T9337] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 164.013335][ T9337] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 164.085244][ T6764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 164.307662][ T9355] netlink: Conntrack attr has 8 unknown bytes [ 164.307696][ T9355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 164.334397][ T9350] macsec0: entered promiscuous mode [ 164.334426][ T9350] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 164.334667][ T9350] macsec0: entered allmulticast mode [ 164.335057][ T9350] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 164.366911][ T9350] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 164.643374][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.834'. [ 165.238620][ T9403] netlink: 52 bytes leftover after parsing attributes in process `syz.1.840'. [ 165.238646][ T9403] netlink: 16 bytes leftover after parsing attributes in process `syz.1.840'. [ 165.372340][ T9410] netlink: 56 bytes leftover after parsing attributes in process `syz.3.841'. [ 165.437595][ T9411] nbd: must specify at least one socket [ 165.781509][ T9416] macvtap1: entered promiscuous mode [ 165.781530][ T9416] vlan2: entered promiscuous mode [ 165.781543][ T9416] bond4: entered promiscuous mode [ 165.803023][ T9416] macvtap1: entered allmulticast mode [ 165.803043][ T9416] vlan2: entered allmulticast mode [ 165.803054][ T9416] bond4: entered allmulticast mode [ 165.835519][ T9433] netlink: 'syz.2.846': attribute type 1 has an invalid length. [ 165.872636][ T9417] vlan2: left allmulticast mode [ 165.872657][ T9417] bond4: left allmulticast mode [ 165.872675][ T9417] vlan2: left promiscuous mode [ 165.872685][ T9417] bond4: left promiscuous mode [ 165.877064][ T9417] macvtap1: left promiscuous mode [ 165.877087][ T9417] macvtap1: left allmulticast mode [ 166.526347][ T9455] ip_tables: iptables: counters copy to user failed while replacing table [ 167.001883][ T9477] __nla_validate_parse: 71 callbacks suppressed [ 167.001903][ T9477] netlink: 666 bytes leftover after parsing attributes in process `syz.3.851'. [ 167.008944][ T9475] netlink: 68 bytes leftover after parsing attributes in process `syz.0.855'. [ 167.199410][ T9482] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.275001][ T9494] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.288302][ T9494] netlink: 13695 bytes leftover after parsing attributes in process `syz.1.856'. [ 167.422260][ T9501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.860'. [ 167.529609][ T9510] netlink: 16 bytes leftover after parsing attributes in process `syz.0.862'. [ 167.663893][ T9516] netlink: 196 bytes leftover after parsing attributes in process `syz.2.865'. [ 167.826963][ T9520] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.836550][ T9519] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 167.991756][ T9529] netlink: 56 bytes leftover after parsing attributes in process `syz.2.869'. [ 168.408852][ T9553] netlink: 28 bytes leftover after parsing attributes in process `syz.0.876'. [ 168.449761][ T9554] netlink: 4 bytes leftover after parsing attributes in process `syz.4.875'. [ 168.473703][ T9553] gretap1: entered allmulticast mode [ 168.577543][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 168.737407][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 168.761278][ T9541] netlink: 'syz.1.872': attribute type 16 has an invalid length. [ 168.761300][ T9541] netlink: 'syz.1.872': attribute type 17 has an invalid length. [ 168.810922][ T9541] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.012942][ T9583] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 169.189438][ T9594] netlink: 'syz.2.880': attribute type 1 has an invalid length. [ 169.246890][ T9591] syzkaller0: entered promiscuous mode [ 169.246911][ T9591] syzkaller0: entered allmulticast mode [ 169.315020][ T9602] syzkaller0: entered promiscuous mode [ 169.315044][ T9602] syzkaller0: entered allmulticast mode [ 169.529969][ T9613] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 169.572768][ T9613] netlink: 48 bytes leftover after parsing attributes in process `syz.0.885'. [ 170.564522][ T9665] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 170.951259][ T9679] syzkaller0: entered promiscuous mode [ 170.951283][ T9679] syzkaller0: entered allmulticast mode [ 170.970050][ T9679] TC_ACT_REPEAT abuse ? [ 171.004939][ T9683] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 171.232479][ T9697] netdevsim netdevsim3 €Â: renamed from netdevsim0 [ 171.333589][ T9699] sch_tbf: burst 3 is lower than device ip6tnl0 mtu (1452) ! [ 171.416149][ T59] IPVS: starting estimator thread 0... [ 171.516203][ T9708] IPVS: using max 37 ests per chain, 88800 per kthread [ 172.010781][ T9738] xt_policy: too many policy elements [ 172.010942][ T9738] xt_policy: too many policy elements [ 172.011063][ T9738] xt_policy: too many policy elements [ 172.011200][ T9738] xt_policy: too many policy elements [ 172.011335][ T9738] xt_policy: too many policy elements [ 172.011462][ T9738] xt_policy: too many policy elements [ 172.011590][ T9738] xt_policy: too many policy elements [ 172.011719][ T9738] xt_policy: too many policy elements [ 172.011840][ T9738] xt_policy: too many policy elements [ 172.015924][ T9738] xt_policy: too many policy elements [ 172.016845][ T9739] __nla_validate_parse: 11 callbacks suppressed [ 172.016859][ T9739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.920'. [ 172.293992][ T9752] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 172.296133][ T9752] netlink: 'syz.4.924': attribute type 1 has an invalid length. [ 172.296151][ T9752] netlink: 224 bytes leftover after parsing attributes in process `syz.4.924'. [ 172.492529][ T9765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.927'. [ 172.495238][ T9765] netlink: 'syz.1.927': attribute type 10 has an invalid length. [ 172.495623][ T9765] bridge0: port 2() entered disabled state [ 172.496270][ T9765] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.538584][ T9765] bridge0: port 2() entered blocking state [ 172.538714][ T9765] bridge0: port 2() entered forwarding state [ 172.539192][ T9765] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.539316][ T9765] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.579900][ T9765] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 172.616544][ T9757] netlink: 'syz.3.921': attribute type 8 has an invalid length. [ 172.922057][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz.2.934'. [ 172.923188][ T9784] netlink: 'syz.2.934': attribute type 1 has an invalid length. [ 172.973563][ T9784] bond7: entered promiscuous mode [ 172.974752][ T9784] 8021q: adding VLAN 0 to HW filter on device bond7 [ 173.040999][ T9784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.934'. [ 173.041085][ T9784] bond7: entered allmulticast mode [ 173.119670][ T9784] bond7: (slave bridge3): making interface the new active one [ 173.119696][ T9784] bridge3: entered promiscuous mode [ 173.119887][ T9784] bridge3: entered allmulticast mode [ 173.161420][ T9784] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 173.361304][ T9811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 173.479871][ T9819] IPVS: set_ctl: invalid protocol: 12 172.20.20.187:20002 [ 173.484628][ T9806] tipc: Enabled bearer , priority 0 [ 173.556799][ T9805] tipc: Disabling bearer [ 173.580700][ T9823] vlan3: entered promiscuous mode [ 173.580716][ T9823] bridge0: entered promiscuous mode [ 173.675782][ T9825] bond3 (unregistering): Released all slaves [ 173.777408][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 174.650249][ T9866] xt_cgroup: path and classid specified [ 174.804288][ T9877] syzkaller0: entered promiscuous mode [ 174.804312][ T9877] syzkaller0: entered allmulticast mode [ 174.918539][ T9880] netlink: 12 bytes leftover after parsing attributes in process `syz.2.958'. [ 175.070729][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.4.959'. [ 175.216362][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 175.216387][ T9899] netlink: 4 bytes leftover after parsing attributes in process `syz.2.964'. [ 175.268965][ T9899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.964'. [ 175.710408][ T9922] netlink: 'syz.3.969': attribute type 10 has an invalid length. [ 175.742430][ T9922] team0: Port device vxcan0 added [ 175.931420][ T9939] netlink: 'syz.3.976': attribute type 1 has an invalid length. [ 176.076711][ T9949] bond9: (slave gretap2): making interface the new active one [ 176.086974][ T9949] bond9: (slave gretap2): Enslaving as an active interface with an up link [ 176.133788][ T9939] 8021q: adding VLAN 0 to HW filter on device bond9 [ 176.907876][ T9993] syzkaller1: entered promiscuous mode [ 176.907899][ T9993] syzkaller1: entered allmulticast mode [ 178.817501][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 183.297469][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 183.857460][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 188.897524][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 193.937490][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 194.181399][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 198.977601][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 204.019216][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 212.097543][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 227.118288][ T6764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 250.390671][T10067] __nla_validate_parse: 9 callbacks suppressed [ 250.390691][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.2.994'. [ 250.394040][T10074] netlink: 4 bytes leftover after parsing attributes in process `syz.4.997'. [ 250.855598][T10074] team0: Port device team_slave_0 removed [ 251.129158][T10095] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1001'. [ 251.656742][T10130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1009'. [ 251.829048][T10137] ip_tables: iptables: counters copy to user failed while replacing table [ 251.930076][T10145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1012'. [ 251.930106][T10145] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1012'. [ 251.940821][T10141] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1011'. [ 252.363056][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1013'. [ 253.130924][T10195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1022'. [ 253.130957][T10195] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 253.357168][T10203] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1023'. [ 254.045310][T10218] wlan1: mtu less than device minimum [ 254.061479][T10215] pimreg: entered allmulticast mode [ 254.152516][T10222] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 254.176639][T10215] pimreg: left allmulticast mode [ 254.289741][T10228] bridge0: entered allmulticast mode [ 255.205349][T10290] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:8188 [ 255.211271][T10292] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 255.211331][T10291] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 255.622279][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 255.655289][T10320] netlink: 'syz.0.1057': attribute type 1 has an invalid length. [ 255.665457][T10322] __nla_validate_parse: 8 callbacks suppressed [ 255.665474][T10322] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1057'. [ 255.686009][T10294] dummy0 speed is unknown, defaulting to 1000 [ 256.365991][T10322] 8021q: adding VLAN 0 to HW filter on device bond7 [ 256.401811][T10321] bond7: (slave geneve2): making interface the new active one [ 256.402819][T10321] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 256.403021][T10294] dummy0 speed is unknown, defaulting to 1000 [ 256.508618][ T9891] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.508695][ T9891] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.662899][T10328] bond9: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 256.665607][T10328] bond9 (unregistering): Released all slaves [ 256.768850][ T9891] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.768899][ T9891] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 256.962533][T10359] netlink: 'syz.0.1064': attribute type 1 has an invalid length. [ 256.976202][T10294] dummy0 speed is unknown, defaulting to 1000 [ 257.010711][T10294] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 257.010749][T10294] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 257.010788][T10294] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 257.153523][T10365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1064'. [ 257.344712][T10362] 8021q: adding VLAN 0 to HW filter on device bond9 [ 257.354701][T10362] bond8: (slave bond9): making interface the new active one [ 257.355151][T10362] bond8: (slave bond9): Enslaving as an active interface with an up link [ 257.416388][T10364] bond8: (slave gretap1): Enslaving as a backup interface with an up link [ 257.425360][T10365] 8021q: adding VLAN 0 to HW filter on device bond8 [ 257.435596][T10294] dummy0 speed is unknown, defaulting to 1000 [ 257.569626][T10294] dummy0 speed is unknown, defaulting to 1000 [ 257.576116][T10294] dummy0 speed is unknown, defaulting to 1000 [ 257.607921][T10294] dummy0 speed is unknown, defaulting to 1000 [ 257.612356][T10294] dummy0 speed is unknown, defaulting to 1000 [ 257.625945][T10294] dummy0 speed is unknown, defaulting to 1000 [ 257.655854][T10391] netlink: 'syz.1.1072': attribute type 2 has an invalid length. [ 257.711012][T10389] ip6tnl3: entered allmulticast mode [ 258.260693][T10427] tipc: Enabling of bearer rejected, media not registered [ 258.402675][T10438] tipc: Enabling of bearer rejected, failed to enable media [ 258.633468][T10454] netlink: 316 bytes leftover after parsing attributes in process `syz.1.1082'. [ 259.402998][T10490] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1094'. [ 259.413749][T10490] netlink: 296 bytes leftover after parsing attributes in process `syz.0.1094'. [ 259.438490][T10490] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 259.442365][T10490] bond10 (unregistering): Released all slaves [ 259.788759][T10509] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1102'. [ 260.287156][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 260.290845][T10545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 260.345977][T10547] xt_CT: You must specify a L4 protocol and not use inversions on it [ 260.385855][T10537] lo: entered promiscuous mode [ 260.625358][T10537] tunl0: entered promiscuous mode [ 260.633715][T10537] gre0: entered promiscuous mode [ 260.669278][T10537] gretap0: entered promiscuous mode [ 260.689056][T10537] erspan0: entered promiscuous mode [ 260.697119][T10537] ip_vti0: entered promiscuous mode [ 260.712080][T10537] ip6_vti0: entered promiscuous mode [ 260.712304][T10537] sit0: entered promiscuous mode [ 260.714851][T10537] ip6tnl0: entered promiscuous mode [ 260.715581][T10537] ip6gre0: entered promiscuous mode [ 260.770990][T10537] syz_tun: entered promiscuous mode [ 260.841981][T10537] ip6gretap0: entered promiscuous mode [ 260.845501][T10537] bond0: entered promiscuous mode [ 260.845524][T10537] bond_slave_1: entered promiscuous mode [ 260.845743][T10537] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 260.875976][T10537] team0: entered promiscuous mode [ 260.876000][T10537] team_slave_0: entered promiscuous mode [ 260.876255][T10537] team_slave_1: entered promiscuous mode [ 260.896357][T10537] nlmon0: entered promiscuous mode [ 260.916789][T10537] veth0: entered promiscuous mode [ 260.929978][T10537] veth1: entered promiscuous mode [ 260.954011][T10537] wg0: entered promiscuous mode [ 260.956480][T10537] wg1: entered promiscuous mode [ 260.975243][T10537] wg2: entered promiscuous mode [ 260.984177][T10537] veth0_to_bridge: entered promiscuous mode [ 260.991697][T10537] bridge_slave_0: entered promiscuous mode [ 261.014134][T10537] veth1_to_bridge: entered promiscuous mode [ 261.017646][T10537] bridge_slave_1: entered promiscuous mode [ 261.022305][T10537] veth1_to_bond: entered promiscuous mode [ 261.036069][T10537] veth0_to_team: entered promiscuous mode [ 261.050190][T10537] veth1_to_team: entered promiscuous mode [ 261.065671][T10537] veth0_to_batadv: entered promiscuous mode [ 261.080207][T10537] batadv_slave_0: entered promiscuous mode [ 261.095917][T10537] veth1_to_batadv: entered promiscuous mode [ 261.101811][T10537] batadv_slave_1: entered promiscuous mode [ 261.132582][T10537] xfrm0: entered promiscuous mode [ 261.141774][T10560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1108'. [ 261.144189][T10537] veth1_to_hsr: entered promiscuous mode [ 261.168574][T10537] hsr0: entered promiscuous mode [ 261.173072][T10537] veth1_virt_wifi: entered promiscuous mode [ 261.180683][T10537] veth0_virt_wifi: entered promiscuous mode [ 261.187649][T10537] virt_wifi0: entered promiscuous mode [ 261.201655][T10537] vlan0: entered promiscuous mode [ 261.210404][T10537] vlan1: entered promiscuous mode [ 261.228819][T10537] macvlan0: entered promiscuous mode [ 261.246511][T10537] macvlan1: entered promiscuous mode [ 261.255070][T10537] ipvlan0: entered promiscuous mode [ 261.255183][T10537] ipvlan1: entered promiscuous mode [ 261.289948][T10537] macvtap0: entered promiscuous mode [ 261.291406][T10537] macsec0: entered promiscuous mode [ 261.308310][T10537] geneve0: entered promiscuous mode [ 261.325938][T10537] geneve1: entered promiscuous mode [ 261.342693][T10537] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 261.373701][T10537] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 261.381231][T10537] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 261.387615][T10537] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 261.387796][T10537] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 261.388029][T10537] pimreg9: entered promiscuous mode [ 261.388579][T10537] netdevsim0.1: entered promiscuous mode [ 261.388830][T10537] ip6tnl1: entered promiscuous mode [ 261.388937][T10537] syztnl0: entered promiscuous mode [ 261.394365][T10537] bond1: entered promiscuous mode [ 261.394508][T10537] gre1: entered promiscuous mode [ 261.450632][T10537] veth2: entered promiscuous mode [ 261.450736][T10537] veth3: entered promiscuous mode [ 261.450817][T10537] bond2: entered promiscuous mode [ 261.450882][T10537] bond3: entered promiscuous mode [ 261.450890][T10537] bridge0: entered promiscuous mode [ 261.457257][T10537] bridge1: entered promiscuous mode [ 261.474767][T10537] bond5: entered promiscuous mode [ 261.474901][T10537] gtp0: entered promiscuous mode [ 261.487665][T10537] mac80211_hwsim hwsim26 wlan2: entered promiscuous mode [ 261.487822][T10537] gre2: entered promiscuous mode [ 261.491353][T10537] bond7: entered promiscuous mode [ 261.491372][T10537] geneve2: entered promiscuous mode [ 261.512364][T10537] bond8: entered promiscuous mode [ 261.512386][T10537] bond9: entered promiscuous mode [ 261.543119][T10537] gretap1: entered promiscuous mode [ 261.545749][T10537] ip6tnl3: entered promiscuous mode [ 261.553299][T10537] vlan2: entered promiscuous mode [ 261.557370][ T9892] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.557402][ T9892] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.557425][ T9892] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.568166][ T9889] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.568199][ T9889] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.568229][ T9889] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.568268][ T9889] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.568292][ T9889] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.568314][ T9889] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.568347][ T9889] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.568370][ T9889] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.568393][ T9889] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 261.572380][T10534] syzkaller1: entered promiscuous mode [ 261.572400][T10534] syzkaller1: entered allmulticast mode [ 261.982232][T10584] batman_adv: batadv0: Adding interface: syzkaller0 [ 261.982249][T10584] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 261.982350][T10584] batman_adv: batadv0: Interface activated: syzkaller0 [ 262.346599][T10611] bond0: Device is already in use. [ 262.507992][T10622] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1123'. [ 262.508338][T10622] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 262.563183][T10622] bond3: entered promiscuous mode [ 262.564881][T10622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.613658][T10622] 8021q: adding VLAN 0 to HW filter on device bond3 [ 262.614025][T10622] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 262.614042][T10622] bond3: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 262.636430][T10622] bond3: (slave xfrm1): making interface the new active one [ 262.636454][T10622] xfrm1: entered promiscuous mode [ 262.641896][T10626] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1123'. [ 262.643430][T10627] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 262.685388][T10622] xfrm1: left promiscuous mode [ 262.720172][T10580] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 262.745588][T10580] batman_adv: batadv0: Removing interface: syzkaller0 [ 262.770365][T10631] bond3: (slave xfrm1): The slave device specified does not support setting the MAC address [ 262.772750][T10631] bond3: (slave xfrm1): making interface the new active one [ 262.810887][T10635] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1125'. [ 262.829003][T10633] netlink: 'syz.2.1124': attribute type 16 has an invalid length. [ 262.829024][T10633] netlink: 'syz.2.1124': attribute type 17 has an invalid length. [ 262.914439][T10653] netlink: 'syz.2.1124': attribute type 16 has an invalid length. [ 262.914461][T10653] netlink: 'syz.2.1124': attribute type 17 has an invalid length. [ 262.928129][T10633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.929563][T10633] bridge0: port 4(bond0) entered blocking state [ 262.929679][T10633] bridge0: port 4(bond0) entered forwarding state [ 262.932616][T10633] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.001207][T10633] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 263.001233][T10633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 263.004994][T10633] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 263.007149][T10638] netlink: 260 bytes leftover after parsing attributes in process `syz.1.1125'. [ 263.088419][T10653] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 263.103418][ T9889] bridge0: port 3(veth0) entered blocking state [ 263.103557][ T9889] bridge0: port 3(veth0) entered forwarding state [ 263.105786][ T9889] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.105909][ T9889] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.119272][ T9889] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.119397][ T9889] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.194928][T10661] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1129'. [ 263.451096][T10690] tipc: Started in network mode [ 263.451114][T10690] tipc: Node identity , cluster identity 4711 [ 263.451129][T10690] tipc: Failed to obtain node identity [ 263.451151][T10690] tipc: Enabling of bearer rejected, failed to enable media [ 263.452024][T10673] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1134'. [ 263.512061][T10695] netlink: 'syz.2.1135': attribute type 10 has an invalid length. [ 263.531551][T10673] ipvlan1: entered promiscuous mode [ 263.533901][T10698] SET target dimension over the limit! [ 263.541150][T10673] ipvlan1: left promiscuous mode [ 263.600134][T10695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 263.605036][T10695] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 263.605347][T10695] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 263.631053][T10695] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 264.065283][T10737] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1149'. [ 264.065309][T10737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1149'. [ 264.065326][T10737] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1149'. [ 264.181905][T10741] tipc: Started in network mode [ 264.181923][T10741] tipc: Node identity , cluster identity 4711 [ 264.181936][T10741] tipc: Failed to obtain node identity [ 264.181965][T10741] tipc: Enabling of bearer rejected, failed to enable media [ 264.233310][T10741] ipvlan1: entered promiscuous mode [ 264.244584][T10741] ipvlan1: left promiscuous mode [ 264.725283][T10766] bond11: Removing last ns target with arp_interval on [ 265.100379][T10786] batadv_slave_1: entered promiscuous mode [ 265.126645][T10784] batadv_slave_1: left promiscuous mode [ 265.154647][T10790] x_tables: duplicate underflow at hook 2 [ 265.361859][T10805] netlink: 'syz.2.1165': attribute type 1 has an invalid length. [ 265.657000][T10823] PKCS7: Unknown OID: [4] (bad) [ 265.657018][T10823] PKCS7: Only support pkcs7_signedData type [ 266.205553][T10843] __nla_validate_parse: 9 callbacks suppressed [ 266.205574][T10843] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1171'. [ 266.228965][T10821] dummy0 speed is unknown, defaulting to 1000 [ 266.257523][T10846] netlink: 'syz.3.1172': attribute type 1 has an invalid length. [ 266.257545][T10846] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1172'. [ 266.565507][T10850] bond0: mtu greater than device maximum [ 266.582161][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'. [ 266.880955][T10872] Bluetooth: hci0: invalid length 0, exp 2 for type 26 [ 266.903492][T10873] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 266.990938][T10876] syzkaller0: entered promiscuous mode [ 266.990958][T10876] syzkaller0: entered allmulticast mode [ 267.160030][T10893] syz.3.1180: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 267.160377][T10893] CPU: 0 UID: 0 PID: 10893 Comm: syz.3.1180 Not tainted syzkaller #0 PREEMPT(full) [ 267.160403][T10893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 267.160416][T10893] Call Trace: [ 267.160423][T10893] [ 267.160432][T10893] dump_stack_lvl+0xe8/0x150 [ 267.160467][T10893] warn_alloc+0x24d/0x270 [ 267.160489][T10893] ? kasan_save_track+0x4f/0x80 [ 267.160511][T10893] ? kasan_save_track+0x3e/0x80 [ 267.160536][T10893] ? __pfx_warn_alloc+0x10/0x10 [ 267.160554][T10893] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 267.160582][T10893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.160622][T10893] __vmalloc_node_range_noprof+0x127/0x1540 [ 267.160683][T10893] ? rcu_is_watching+0x16/0xb0 [ 267.160714][T10893] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 267.160745][T10893] ? __kmalloc_cache_noprof+0x321/0x600 [ 267.160767][T10893] ? __kmalloc_cache_noprof+0x14d/0x600 [ 267.160788][T10893] ? xskq_create+0x56/0x220 [ 267.160820][T10893] xskq_create+0x148/0x220 [ 267.160847][T10893] ? xsk_init_queue+0x8a/0xe0 [ 267.160876][T10893] xsk_init_queue+0x8a/0xe0 [ 267.160905][T10893] xsk_setsockopt+0x52a/0x960 [ 267.160933][T10893] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.160959][T10893] ? __pfx_aa_sk_perm+0x10/0x10 [ 267.160995][T10893] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 267.161022][T10893] ? __pfx_xsk_setsockopt+0x10/0x10 [ 267.161049][T10893] do_sock_setsockopt+0x17c/0x1b0 [ 267.161081][T10893] __x64_sys_setsockopt+0x13d/0x1b0 [ 267.161114][T10893] do_syscall_64+0x166/0x520 [ 267.161144][T10893] ? trace_irq_disable+0x3b/0x140 [ 267.161165][T10893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.161185][T10893] ? clear_bhb_loop+0x70/0xc0 [ 267.161211][T10893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.161232][T10893] RIP: 0033:0x7f0ee259e159 [ 267.161251][T10893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 267.161270][T10893] RSP: 002b:00007f0ee33e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 267.161291][T10893] RAX: ffffffffffffffda RBX: 00007f0ee2825fa0 RCX: 00007f0ee259e159 [ 267.161307][T10893] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 267.161320][T10893] RBP: 00007f0ee263506b R08: 0000000000000004 R09: 0000000000000000 [ 267.161333][T10893] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.161346][T10893] R13: 00007f0ee2826038 R14: 00007f0ee2825fa0 R15: 00007ffd1771df38 [ 267.161379][T10893] [ 267.161513][T10893] Mem-Info: [ 267.161526][T10893] active_anon:5705 inactive_anon:0 isolated_anon:0 [ 267.161526][T10893] active_file:0 inactive_file:43295 isolated_file:0 [ 267.161526][T10893] unevictable:0 dirty:181 writeback:0 [ 267.161526][T10893] slab_reclaimable:11664 slab_unreclaimable:103407 [ 267.161526][T10893] mapped:29359 shmem:520 pagetables:1216 [ 267.161526][T10893] sec_pagetables:0 bounce:0 [ 267.161526][T10893] kernel_misc_reclaimable:0 [ 267.161526][T10893] free:1314413 free_pcp:15900 free_cma:0 [ 267.161583][T10893] Node 0 active_anon:22820kB inactive_anon:0kB active_file:0kB inactive_file:172976kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117436kB dirty:724kB writeback:0kB shmem:2080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15116kB pagetables:4732kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 267.161640][T10893] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 267.161700][T10893] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.161766][T10893] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 267.161805][T10893] Node 0 DMA32 free:1298716kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:22820kB inactive_anon:0kB active_file:0kB inactive_file:172976kB unevictable:0kB writepending:724kB zspages:0kB present:3129332kB managed:2547096kB mlocked:0kB bounce:0kB free_pcp:62596kB local_pcp:34124kB free_cma:0kB [ 267.161868][T10893] lowmem_reserve[]: 0 0 0 0 0 [ 267.161905][T10893] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 267.161964][T10893] lowmem_reserve[]: 0 0 0 0 0 [ 267.161998][T10893] Node 1 Normal free:3943576kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:1004kB local_pcp:0kB free_cma:0kB [ 267.162083][T10893] lowmem_reserve[]: 0 0 0 0 0 [ 267.162119][T10893] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 267.162240][T10893] Node 0 DMA32: 845*4kB (UME) 473*8kB (ME) 152*16kB (M) 815*32kB (UME) 206*64kB (UME) 91*128kB (UME) 47*256kB (UME) 25*512kB (UME) 9*1024kB (UM) 4*2048kB (UM) 292*4096kB (UM) = 1298780kB [ 267.162404][T10893] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 267.162499][T10893] Node 1 Normal: 1*4kB (M) 1*8kB (M) 2*16kB (UM) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 962*4096kB (UM) = 3943628kB [ 267.162833][T10893] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 267.162850][T10893] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 267.162866][T10893] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 267.162884][T10893] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 267.162901][T10893] 43811 total pagecache pages [ 267.162914][T10893] 0 pages in swap cache [ 267.162922][T10893] Free swap = 124996kB [ 267.162930][T10893] Total swap = 124996kB [ 267.162939][T10893] 2097051 pages RAM [ 267.162946][T10893] 0 pages HighMem/MovableOnly [ 267.162953][T10893] 428661 pages reserved [ 267.162961][T10893] 0 pages cma reserved [ 267.963217][T10908] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1185'. [ 268.035045][T10914] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 268.212327][T10916] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1187'. [ 268.329430][T10926] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 268.329452][T10926] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1191'. [ 269.228714][T10977] netlink: 'syz.0.1200': attribute type 16 has an invalid length. [ 269.228741][T10977] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1200'. [ 269.232290][T10977] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'. [ 269.805818][T11000] Bluetooth: hci0: unsupported parameter 5135 [ 269.805855][T11000] Bluetooth: hci0: unsupported parameter 8192 [ 269.805868][T11000] Bluetooth: hci0: unsupported parameter 5135 [ 269.805880][T11000] Bluetooth: hci0: unsupported parameter 8192 [ 269.842796][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 269.842972][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 269.843133][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 269.846562][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 269.846898][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 269.847181][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 269.849631][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 269.849933][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 269.850207][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 269.850471][T11010] ip_tables: iptables: counters copy to user failed while replacing table [ 270.086041][ T1220] dummy0 speed is unknown, defaulting to 1000 [ 270.893621][T11064] netlink: 'syz.3.1217': attribute type 1 has an invalid length. [ 270.916737][T11064] 8021q: adding VLAN 0 to HW filter on device bond10 [ 270.917818][T11063] tipc: Cannot configure node identity twice [ 270.951679][T11064] bond10: (slave veth0_to_bond): making interface the new active one [ 270.953190][T11064] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 271.003592][T11064] bond10: entered promiscuous mode [ 271.003616][T11064] veth0_to_bond: entered promiscuous mode [ 271.003879][T11064] bond10: entered allmulticast mode [ 271.003893][T11064] veth0_to_bond: entered allmulticast mode [ 271.066162][T11066] tipc: Enabled bearer , priority 0 [ 271.070369][T11066] syzkaller0: entered promiscuous mode [ 271.070388][T11066] syzkaller0: entered allmulticast mode [ 271.070665][T11066] tipc: Resetting bearer [ 271.083051][T11066] tipc: Resetting bearer [ 271.441020][T11083] __nla_validate_parse: 37 callbacks suppressed [ 271.441040][T11083] netlink: 83 bytes leftover after parsing attributes in process `syz.2.1221'. [ 271.976573][T11116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1226'. [ 272.141961][T11119] netlink: 'syz.4.1228': attribute type 8 has an invalid length. [ 272.141983][T11119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1228'. [ 272.144037][T11119] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.145129][T11119] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.322613][T11126] netlink: 'syz.0.1227': attribute type 2 has an invalid length. [ 272.368997][T11132] dummy0 speed is unknown, defaulting to 1000 [ 272.526244][T11133] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1230'. [ 272.703071][T11143] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 272.703093][T11143] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1231'. [ 272.703108][T11143] netlink: 'syz.4.1231': attribute type 1 has an invalid length. [ 272.703120][T11143] netlink: 'syz.4.1231': attribute type 2 has an invalid length. [ 273.066921][T11165] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1236'. [ 273.161987][T11161] netlink: 67 bytes leftover after parsing attributes in process `syz.3.1235'. [ 273.195577][T11165] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1236'. [ 273.220148][T11172] netlink: 'syz.2.1236': attribute type 32 has an invalid length. [ 273.322575][T10574] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 273.625853][T11195] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1239'. [ 273.791434][T11201] tipc: Enabled bearer , priority 10 [ 273.792432][T11201] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1240'. [ 273.831286][T11201] ipvlan1: entered promiscuous mode [ 273.833739][T11201] ipvlan1: left promiscuous mode [ 274.079354][T11222] bridge_slave_0: left promiscuous mode [ 274.183612][T11217] bridge0: port 4(veth1_to_bridge) entered blocking state [ 274.183700][T11217] bridge0: port 4(veth1_to_bridge) entered disabled state [ 274.183856][T11217] veth1_to_bridge: entered allmulticast mode [ 274.193917][T11217] veth1_to_bridge: entered promiscuous mode [ 274.210941][T10574] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 274.296842][T11232] netlink: 'syz.0.1250': attribute type 16 has an invalid length. [ 274.296865][T11232] netlink: 'syz.0.1250': attribute type 3 has an invalid length. [ 274.361350][T11233] bridge1: entered promiscuous mode [ 274.361373][T11233] bridge1: entered allmulticast mode [ 274.370478][T11233] team0: Device bridge1 is of different type [ 274.384635][T11236] netlink: 'syz.0.1250': attribute type 3 has an invalid length. [ 274.818455][T11254] bond6: option broadcast_neighbor: invalid value (3) [ 274.825328][T11254] bond6 (unregistering): Released all slaves [ 274.889074][T11257] sit0: entered promiscuous mode [ 274.922960][ T1220] tipc: Node number set to 2828601285 [ 275.191327][T11269] tipc: Started in network mode [ 275.191344][T11269] tipc: Node identity , cluster identity 4711 [ 275.211082][T11269] tipc: Failed to obtain node identity [ 275.211117][T11269] tipc: Enabling of bearer rejected, failed to enable media [ 275.238018][T11269] ipvlan1: entered promiscuous mode [ 275.239224][T11269] ipvlan1: left promiscuous mode [ 275.874084][T11298] tc_dump_action: action bad kind [ 276.098261][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 276.216537][T11323] netlink: 'syz.0.1268': attribute type 2 has an invalid length. [ 276.459814][T11335] xt_IDLETIMER: label is empty or not nul-terminated [ 276.477671][T11335] __nla_validate_parse: 8 callbacks suppressed [ 276.477690][T11335] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1272'. [ 276.776613][T11348] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1273'. [ 277.234389][T11372] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.1277'. [ 277.431723][T11379] netlink: 'syz.1.1280': attribute type 83 has an invalid length. [ 277.482360][T11382] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1281'. [ 277.482383][T11382] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1281'. [ 277.527790][T11384] netlink: 400 bytes leftover after parsing attributes in process `syz.2.1283'. [ 277.691379][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 277.721950][T11388] vxlan1: entered promiscuous mode [ 277.721974][T11388] vxlan1: entered allmulticast mode [ 277.747998][T11391] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 277.810756][T11391] vxlan1: entered promiscuous mode [ 277.810782][T11391] vxlan1: entered allmulticast mode [ 278.069124][T11393] dummy0 speed is unknown, defaulting to 1000 [ 278.242353][T11401] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1287'. [ 278.322077][T11401] geneve3: entered promiscuous mode [ 278.357441][T10685] netdevsim netdevsim3 €Â: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.360840][T10687] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.360885][T10687] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.360919][T10687] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.506538][T11411] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1290'. [ 278.518849][T11411] netlink: 'syz.3.1290': attribute type 62 has an invalid length. [ 278.543973][T11414] tipc: Enabled bearer , priority 10 [ 279.237688][T11439] netlink: 'syz.3.1300': attribute type 4 has an invalid length. [ 279.320840][T11443] netlink: 'syz.3.1300': attribute type 4 has an invalid length. [ 279.573045][T11456] tipc: Enabled bearer , priority 10 [ 279.657358][ T8411] tipc: Node number set to 4227989505 [ 279.713008][T11466] netlink: 'syz.0.1307': attribute type 11 has an invalid length. [ 279.853605][T11475] netlink: 'syz.0.1308': attribute type 32 has an invalid length. [ 279.860763][T11476] netlink: 'syz.0.1308': attribute type 1 has an invalid length. [ 279.919921][T11476] 8021q: adding VLAN 0 to HW filter on device bond12 [ 279.935522][T11475] bond12: (slave erspan1): making interface the new active one [ 279.962640][T11475] bond12: (slave erspan1): Enslaving as an active interface with an up link [ 280.685831][T11522] tipc: Enabling of bearer rejected, already enabled [ 280.699719][ T8411] tipc: Node number set to 3163076923 [ 281.546479][T11578] __nla_validate_parse: 6 callbacks suppressed [ 281.546499][T11578] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1328'. [ 281.868967][T11594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'. [ 281.869006][T11594] bond0: left promiscuous mode [ 281.993553][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1337'. [ 282.153487][T11619] ip6tnl1: entered allmulticast mode [ 282.352461][T11625] net_ratelimit: 57 callbacks suppressed [ 282.352481][T11625] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 282.353868][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1341'. [ 282.354119][T11626] netlink: 660 bytes leftover after parsing attributes in process `syz.0.1341'. [ 282.542064][T11632] veth1_to_team: entered promiscuous mode [ 282.563155][T11632] veth1_to_team: left promiscuous mode [ 282.672438][T11637] netlink: 'syz.0.1344': attribute type 3 has an invalid length. [ 282.685263][T11637] netlink: 'syz.0.1344': attribute type 1 has an invalid length. [ 282.685286][T11637] netlink: 'syz.0.1344': attribute type 268 has an invalid length. [ 282.685301][T11637] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1344'. [ 282.734266][T11639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1345'. [ 283.034414][T11640] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1345'. [ 283.048403][T11654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1347'. [ 283.110215][T11662] netlink: 276 bytes leftover after parsing attributes in process `syz.0.1350'. [ 283.187964][T11664] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.213017][T11664] x_tables: duplicate underflow at hook 1 [ 283.229518][T11664] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 283.272478][T11667] netlink: 'syz.1.1351': attribute type 30 has an invalid length. [ 283.403240][T11676] gretap1: entered promiscuous mode [ 283.523370][T11678] ip_tables: iptables: counters copy to user failed while replacing table [ 283.763398][T10681] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.763458][T10681] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.763484][T10681] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.763510][T10681] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 283.950666][T11698] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 283.954369][T11702] netlink: 'syz.2.1364': attribute type 1 has an invalid length. [ 284.131123][T11708] netlink: 'syz.1.1369': attribute type 1 has an invalid length. [ 284.219490][T11708] bond7: entered promiscuous mode [ 284.221167][T11708] 8021q: adding VLAN 0 to HW filter on device bond7 [ 284.289966][T11717] netlink: 'syz.0.1371': attribute type 1 has an invalid length. [ 284.323711][T11708] veth3: entered allmulticast mode [ 284.346849][T11708] bond7: (slave veth3): making interface the new active one [ 284.346876][T11708] veth3: entered promiscuous mode [ 284.364918][T11708] bond7: (slave veth3): Enslaving as an active interface with an up link [ 284.365524][T11710] syzkaller0: entered promiscuous mode [ 284.365544][T11710] syzkaller0: entered allmulticast mode [ 284.426844][T11721] tipc: Started in network mode [ 284.426877][T11721] tipc: Node identity 82edbad61ef1, cluster identity 4711 [ 284.427113][T11721] tipc: Enabled bearer , priority 0 [ 284.486839][T11709] tipc: Resetting bearer [ 284.550076][T11709] tipc: Disabling bearer [ 284.620880][T11731] netlink: 'syz.2.1375': attribute type 21 has an invalid length. [ 284.620906][T11731] netlink: 'syz.2.1375': attribute type 20 has an invalid length. [ 284.632714][T11737] openvswitch: netlink: Flow actions attr not present in new flow. [ 285.006532][T11761] tipc: Enabled bearer , priority 10 [ 285.330734][T11777] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 285.347578][T10681] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 285.347623][T10681] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 285.347656][T10681] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 285.347686][T10681] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 285.851815][T11801] tipc: Enabled bearer , priority 10 [ 285.924645][T11805] tipc: Resetting bearer [ 285.972628][T11805] netlink: 'syz.2.1398': attribute type 8 has an invalid length. [ 285.973979][T11807] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 286.269687][T11829] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 286.406618][T11838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.653641][T11852] __nla_validate_parse: 144 callbacks suppressed [ 286.653660][T11852] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1407'. [ 286.957392][T10574] tipc: Node number set to 2619128534 [ 287.128215][T11880] netlink: 'syz.1.1414': attribute type 1 has an invalid length. [ 287.130130][T11880] netlink: 'syz.1.1414': attribute type 23 has an invalid length. [ 287.342766][T11889] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1416'. [ 287.456372][T11897] netlink: 'syz.1.1420': attribute type 1 has an invalid length. [ 287.490056][T11897] bond8: entered promiscuous mode [ 287.491044][T11902] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1419'. [ 287.491333][T11897] 8021q: adding VLAN 0 to HW filter on device bond8 [ 287.552377][T11895] x_tables: duplicate entry at hook 1 [ 288.164509][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 288.164545][T11934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1425'. [ 288.178356][T11934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1425'. [ 288.178388][T11934] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1425'. [ 288.294171][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1426'. [ 288.298756][T11937] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 288.381621][T11937] 8021q: adding VLAN 0 to HW filter on device bond11 [ 288.404396][T11942] x_tables: duplicate underflow at hook 1 [ 288.431691][T10689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.431714][T10689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.636055][T11956] netlink: 'syz.4.1432': attribute type 21 has an invalid length. [ 288.636474][T11956] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1432'. [ 288.850019][T11963] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1434'. [ 288.941127][T11966] ip_tables: iptables: counters copy to user failed while replacing table [ 289.044958][T11978] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.045789][T11974] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 289.644963][T11970] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 289.683082][T11970] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 290.119216][T12018] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 290.166271][T12013] tipc: Enabling of bearer rejected, already enabled [ 290.393106][ T6764] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 290.488424][T12036] ip6tnl3: entered allmulticast mode [ 290.506750][T12039] tipc: Enabled bearer , priority 20 [ 290.824130][T12060] tipc: Enabling of bearer rejected, already enabled [ 291.151442][T12072] tap0: tun_chr_ioctl cmd 1074025677 [ 291.151556][T12072] tap0: linktype set to 774 [ 291.451494][T12087] syzkaller1: entered promiscuous mode [ 291.451517][T12087] syzkaller1: entered allmulticast mode [ 292.524012][T12118] xt_bpf: check failed: parse error [ 292.593583][T12120] bridge0: port 4(veth1_to_bridge) entered blocking state [ 292.593708][T12120] bridge0: port 4(veth1_to_bridge) entered forwarding state [ 292.595507][T12120] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.595634][T12120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.595883][T12120] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.596012][T12120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.638006][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.638292][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.638539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.638778][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.639082][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 292.639366][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.947275][ C1] net_ratelimit: 4773 callbacks suppressed [ 293.947299][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.947521][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.947600][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.947904][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.948031][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.948214][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.948499][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.948539][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.948842][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 293.949002][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.957248][ C0] net_ratelimit: 29213 callbacks suppressed [ 298.957271][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.957395][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.957679][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.957693][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.957990][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.958075][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.958292][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.958580][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.958879][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 298.959195][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.967373][ C0] net_ratelimit: 29363 callbacks suppressed [ 303.967397][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.967490][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.967796][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.967797][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.968094][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.968200][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.968390][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.968595][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.968733][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 303.969024][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.977265][ C1] net_ratelimit: 30080 callbacks suppressed [ 308.977288][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.977312][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.977586][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.977753][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.977890][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.978155][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.978227][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.978531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.978565][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 308.978833][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.987390][ C0] net_ratelimit: 29277 callbacks suppressed [ 313.987399][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.987413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.987776][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.987827][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.988156][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.988235][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.988540][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.988672][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.988915][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 313.989088][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.997246][ C0] net_ratelimit: 29387 callbacks suppressed [ 318.997269][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.997422][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.997658][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.998039][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.998434][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.998852][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.999231][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.999615][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 318.999991][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.000367][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 319.311686][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 324.007229][ C0] net_ratelimit: 29856 callbacks suppressed [ 324.007253][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.007377][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.007655][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.007696][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.008016][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.008062][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.008299][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.008496][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.008587][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 324.008864][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.017362][ C1] net_ratelimit: 30967 callbacks suppressed [ 329.017385][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.017598][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.017669][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.017959][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.018006][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.018280][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.018457][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.018561][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.018849][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 329.018864][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.027270][ C1] net_ratelimit: 31069 callbacks suppressed [ 334.027294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.027354][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.027581][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.027790][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.027856][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.028134][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.028411][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.028720][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.028992][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 334.029266][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.037361][ C0] net_ratelimit: 31117 callbacks suppressed [ 339.037369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.037389][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.037701][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.037837][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.038017][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.038236][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 339.038294][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.038567][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.038669][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 339.038882][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.047465][ C1] net_ratelimit: 30808 callbacks suppressed [ 344.047487][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.047597][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.047771][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.047992][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.048053][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.048335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.048377][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.048624][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.048763][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 344.048905][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.057408][ C1] net_ratelimit: 29879 callbacks suppressed [ 349.057433][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.057443][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.057732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.057838][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.058036][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.058238][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.058375][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.058636][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 349.058672][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 349.058977][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 351.363703][ C0] sched: DL replenish lagged too much [ 354.067343][ C1] net_ratelimit: 30694 callbacks suppressed [ 354.067348][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.067365][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.067654][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.067787][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.067935][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.068195][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.068218][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.068508][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 354.068598][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 354.068790][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.077216][ C1] net_ratelimit: 30688 callbacks suppressed [ 359.077239][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.077272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.077519][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.077686][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.077799][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.078081][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.078087][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.078403][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.078482][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 359.078680][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.087248][ C0] net_ratelimit: 29527 callbacks suppressed [ 364.087272][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.087453][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.087676][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.087750][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.088055][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.088067][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 364.088351][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.088514][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 364.088670][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 364.088897][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.097257][ C1] net_ratelimit: 28753 callbacks suppressed [ 369.097279][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.097462][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.097577][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.097857][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.097871][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.098215][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.098505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.098802][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.099108][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 369.099143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 374.107203][ C1] net_ratelimit: 26690 callbacks suppressed [ 374.107227][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.107550][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.107826][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.108164][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.108350][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 374.108459][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.108719][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 374.108754][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.109056][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 374.109166][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.117209][ C1] net_ratelimit: 25970 callbacks suppressed [ 379.117234][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.117303][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.117655][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.118065][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.118475][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.118518][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 379.118881][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 379.118895][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.119249][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 379.119302][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 381.353882][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 384.127300][ C1] net_ratelimit: 26490 callbacks suppressed [ 384.127324][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.127326][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.127635][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.127930][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.128225][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.128519][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.128770][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 384.128806][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.129103][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 384.129169][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 389.137482][ C1] net_ratelimit: 25605 callbacks suppressed [ 389.137505][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.137728][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 389.137814][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.138102][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 389.138148][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.138446][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.138470][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.138753][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.138847][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 389.139050][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 393.865498][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.147323][ C0] net_ratelimit: 25869 callbacks suppressed [ 394.147347][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.147434][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.147732][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.147755][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.148034][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.148165][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.148328][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.148631][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.148974][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 394.149268][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.157360][ C0] net_ratelimit: 26320 callbacks suppressed [ 399.157383][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.157406][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.157749][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.157815][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.158090][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.158247][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.158391][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.158742][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.159048][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 399.159350][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.167262][ C0] net_ratelimit: 26432 callbacks suppressed [ 404.167285][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 404.167400][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.167649][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.167710][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.167993][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.168027][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.168271][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.168413][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.168551][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 404.168824][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.177267][ C1] net_ratelimit: 25887 callbacks suppressed [ 409.177290][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.177377][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 409.177590][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.177783][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 409.177925][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.178179][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.178227][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.178559][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.178624][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 409.178851][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.187211][ C0] net_ratelimit: 26717 callbacks suppressed [ 414.187235][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.187385][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.187701][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.188009][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.188353][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.188519][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 414.188668][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.188885][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 414.189027][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 414.189257][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.197231][ C1] net_ratelimit: 26421 callbacks suppressed [ 419.197255][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.197560][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.197650][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 419.197868][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.198034][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 419.198200][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.198425][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.198496][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.198807][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 419.198829][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.207208][ C1] net_ratelimit: 25395 callbacks suppressed [ 424.207240][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.207298][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.207531][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.207851][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.208137][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.208432][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.208526][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 424.208784][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 424.208889][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 424.209070][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.217328][ C1] net_ratelimit: 25944 callbacks suppressed [ 429.217352][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.217411][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.217763][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.217787][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.218156][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.218161][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.218529][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.218572][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.218966][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 429.219369][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.227185][ C0] net_ratelimit: 25872 callbacks suppressed [ 434.227209][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 434.227463][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.227592][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 434.227749][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.227983][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.228032][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.228319][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.228412][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.228611][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 434.228802][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.237340][ C1] net_ratelimit: 25628 callbacks suppressed [ 439.237370][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.237667][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.237773][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 439.238005][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.238160][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 439.238300][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.238563][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.238587][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.238882][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 439.238970][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.247313][ C1] net_ratelimit: 26126 callbacks suppressed [ 444.247335][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.247629][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.247952][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.248143][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:f2:ec:e1:00:ec:6c, vlan:0) [ 444.248314][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.248528][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 444.248610][ C1] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.248910][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.248918][ C0] bridge0: received packet on veth1_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 444.249205][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 447.126361][ T32] INFO: task kworker/0:10:8411 blocked for more than 145 seconds. [ 447.126386][ T32] Not tainted syzkaller #0 [ 447.126396][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.126406][ T32] task:kworker/0:10 state:D stack:25832 pid:8411 tgid:8411 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 447.126460][ T32] Workqueue: events netdev_work_proc [ 447.126495][ T32] Call Trace: [ 447.126502][ T32] [ 447.126523][ T32] __schedule+0x17db/0x58f0 [ 447.126554][ T32] ? update_protect_slice+0x128/0x210 [ 447.126599][ T32] ? do_raw_spin_unlock+0xf5/0x200 [ 447.126634][ T32] ? __pfx___schedule+0x10/0x10 [ 447.126670][ T32] ? schedule+0x90/0x2b0 [ 447.126698][ T32] schedule+0x164/0x2b0 [ 447.126727][ T32] schedule_preempt_disabled+0x13/0x30 [ 447.126753][ T32] __mutex_lock+0x7c1/0x1550 [ 447.126786][ T32] ? __mutex_lock+0x5d4/0x1550 [ 447.126818][ T32] ? netdev_work_proc+0x209/0x780 [ 447.126840][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 447.126867][ T32] ? kthread+0x38b/0x480 [ 447.126885][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 447.126909][ T32] ? preempt_schedule_common+0x7f/0xd0 [ 447.126936][ T32] ? netdev_work_proc+0x12b/0x780 [ 447.126954][ T32] ? preempt_schedule_thunk+0x16/0x40 [ 447.126983][ T32] netdev_work_proc+0x209/0x780 [ 447.127006][ T32] ? __pfx_netdev_work_proc+0x10/0x10 [ 447.127028][ T32] ? rcu_is_watching+0x16/0xb0 [ 447.127054][ T32] ? process_scheduled_works+0x97a/0x1630 [ 447.127080][ T32] process_scheduled_works+0xc3d/0x1630 [ 447.140510][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 447.140556][ T32] ? assign_work+0x3cf/0x5d0 [ 447.140588][ T32] worker_thread+0xa47/0xfb0 [ 447.140642][ T32] kthread+0x38b/0x480 [ 447.140662][ T32] ? __pfx_worker_thread+0x10/0x10 [ 447.140686][ T32] ? __pfx_kthread+0x10/0x10 [ 447.140706][ T32] ret_from_fork+0x514/0xb70 [ 447.140739][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 447.140769][ T32] ? __switch_to+0xc89/0x1420 [ 447.140799][ T32] ? __pfx_kthread+0x10/0x10 [ 447.140819][ T32] ret_from_fork_asm+0x1a/0x30 [ 447.140865][ T32] [ 447.140894][ T32] INFO: task kworker/u8:21:10675 blocked for more than 145 seconds. [ 447.140910][ T32] Not tainted syzkaller #0 [ 447.140919][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.140929][ T32] task:kworker/u8:21 state:D stack:27808 pid:10675 tgid:10675 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 447.140985][ T32] Workqueue: ipv6_addrconf addrconf_dad_work [ 447.141008][ T32] Call Trace: [ 447.141015][ T32] [ 447.141028][ T32] __schedule+0x17db/0x58f0 [ 447.141070][ T32] ? ret_from_fork_asm+0x1a/0x30 [ 447.141097][ T32] ? unwind_next_frame+0x8f/0x2550 [ 447.141129][ T32] ? __pfx___schedule+0x10/0x10 [ 447.141165][ T32] ? schedule+0x90/0x2b0 [ 447.141194][ T32] schedule+0x164/0x2b0 [ 447.141223][ T32] schedule_preempt_disabled+0x13/0x30 [ 447.141249][ T32] __mutex_lock+0x7c1/0x1550 [ 447.141284][ T32] ? __mutex_lock+0x5d4/0x1550 [ 447.141316][ T32] ? addrconf_dad_work+0x116/0x15c0 [ 447.141341][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 447.141390][ T32] addrconf_dad_work+0x116/0x15c0 [ 447.141423][ T32] ? __pfx_addrconf_dad_work+0x10/0x10 [ 447.141456][ T32] ? rcu_is_watching+0x16/0xb0 [ 447.141482][ T32] ? process_scheduled_works+0x97a/0x1630 [ 447.141516][ T32] process_scheduled_works+0xc3d/0x1630 [ 447.141573][ T32] ? __pfx_process_scheduled_works+0x10/0x10 [ 447.141606][ T32] ? assign_work+0x3cf/0x5d0 [ 447.141637][ T32] worker_thread+0xa47/0xfb0 [ 447.141690][ T32] kthread+0x38b/0x480 [ 447.141709][ T32] ? __pfx_worker_thread+0x10/0x10 [ 447.141733][ T32] ? __pfx_kthread+0x10/0x10 [ 447.141753][ T32] ret_from_fork+0x514/0xb70 [ 447.141785][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 447.141815][ T32] ? __switch_to+0xc89/0x1420 [ 447.141844][ T32] ? __pfx_kthread+0x10/0x10 [ 447.141864][ T32] ret_from_fork_asm+0x1a/0x30 [ 447.141910][ T32] [ 447.141932][ T32] INFO: task syz.3.1476:12129 blocked for more than 145 seconds. [ 447.141947][ T32] Not tainted syzkaller #0 [ 447.141956][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.141965][ T32] task:syz.3.1476 state:D stack:28808 pid:12129 tgid:12125 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 447.142018][ T32] Call Trace: [ 447.142024][ T32] [ 447.142036][ T32] __schedule+0x17db/0x58f0 [ 447.142082][ T32] ? do_raw_spin_lock+0x12b/0x2f0 [ 447.142116][ T32] ? __pfx___schedule+0x10/0x10 [ 447.142151][ T32] ? schedule+0x90/0x2b0 [ 447.142181][ T32] schedule+0x164/0x2b0 [ 447.142210][ T32] schedule_preempt_disabled+0x13/0x30 [ 447.142235][ T32] __mutex_lock+0x7c1/0x1550 [ 447.142269][ T32] ? __mutex_lock+0x5d4/0x1550 [ 447.142307][ T32] ? dev_ioctl+0x7a4/0x1150 [ 447.142333][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 447.142362][ T32] ? apparmor_capable+0x126/0x170 [ 447.142403][ T32] ? dev_load+0x21/0x1f0 [ 447.142429][ T32] dev_ioctl+0x7a4/0x1150 [ 447.142458][ T32] sock_do_ioctl+0x23e/0x320 [ 447.142481][ T32] ? __pfx_sock_do_ioctl+0x10/0x10 [ 447.142511][ T32] ? hook_file_ioctl+0x1f2/0x600 [ 447.142552][ T32] sock_ioctl+0x57a/0x7e0 [ 447.142585][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 447.142615][ T32] ? __fget_files+0x2a/0x420 [ 447.142642][ T32] ? __fget_files+0x3a2/0x420 [ 447.142668][ T32] ? __fget_files+0x2a/0x420 [ 447.142698][ T32] ? bpf_lsm_file_ioctl+0x9/0x20 [ 447.142727][ T32] ? __pfx_sock_ioctl+0x10/0x10 [ 447.142757][ T32] __se_sys_ioctl+0xfc/0x170 [ 447.142781][ T32] do_syscall_64+0x166/0x520 [ 447.142814][ T32] ? trace_irq_disable+0x3b/0x140 [ 447.142833][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.142854][ T32] ? clear_bhb_loop+0x70/0xc0 [ 447.155961][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.156006][ T32] RIP: 0033:0x7f0ee259e159 [ 447.156030][ T32] RSP: 002b:00007f0ee33c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 447.156051][ T32] RAX: ffffffffffffffda RBX: 00007f0ee2826090 RCX: 00007f0ee259e159 [ 447.156066][ T32] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 447.156080][ T32] RBP: 00007f0ee263506b R08: 0000000000000000 R09: 0000000000000000 [ 447.156093][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.156105][ T32] R13: 00007f0ee2826128 R14: 00007f0ee2826090 R15: 00007ffd1771df38 [ 447.156138][ T32] [ 447.156147][ T32] INFO: task syz.3.1476:12133 blocked for more than 145 seconds. [ 447.156163][ T32] Not tainted syzkaller #0 [ 447.156173][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 447.156182][ T32] task:syz.3.1476 state:D stack:27232 pid:12133 tgid:12125 ppid:5619 task_flags:0x400140 flags:0x00080002 [ 447.156234][ T32] Call Trace: [ 447.156241][ T32] [ 447.156254][ T32] __schedule+0x17db/0x58f0 [ 447.156309][ T32] ? __pfx___schedule+0x10/0x10 [ 447.156345][ T32] ? schedule+0x90/0x2b0 [ 447.156375][ T32] schedule+0x164/0x2b0 [ 447.156403][ T32] schedule_preempt_disabled+0x13/0x30 [ 447.156429][ T32] __mutex_lock+0x7c1/0x1550 [ 447.156463][ T32] ? __mutex_lock+0x5d4/0x1550 [ 447.156495][ T32] ? rtnetlink_rcv_msg+0x767/0xc00 [ 447.156529][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 447.156559][ T32] ? lock_acquire+0x115/0x350 [ 447.156596][ T32] rtnetlink_rcv_msg+0x767/0xc00 [ 447.156625][ T32] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 447.156649][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 447.156677][ T32] ? __copy_skb_header+0xa3/0x4a0 [ 447.156716][ T32] netlink_rcv_skb+0x226/0x4a0 [ 447.156738][ T32] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 447.156766][ T32] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 447.156800][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.156819][ T32] ? netlink_deliver_tap+0x2e/0x1b0 [ 447.156845][ T32] netlink_unicast+0x7bd/0x940 [ 447.156886][ T32] netlink_sendmsg+0x813/0xb40 [ 447.156917][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.156946][ T32] ? apparmor_socket_sendmsg+0x98/0x360 [ 447.156972][ T32] ? __pfx_netlink_sendmsg+0x10/0x10 [ 447.156992][ T32] sock_sendmsg_nosec+0x14e/0x190 [ 447.157015][ T32] ____sys_sendmsg+0x54e/0x850 [ 447.157047][ T32] ? __pfx_____sys_sendmsg+0x10/0x10 [ 447.157084][ T32] ? import_iovec+0x73/0xa0 [ 447.157114][ T32] ___sys_sendmsg+0x2a5/0x360 [ 447.170347][ T32] ? __lock_acquire+0x747/0x2de0 [ 447.170385][ T32] ? __pfx____sys_sendmsg+0x10/0x10 [ 447.170418][ T32] ? tomoyo_path_number_perm+0x219/0x5f0 [ 447.170471][ T32] ? __fget_files+0x2a/0x420 [ 447.170498][ T32] ? __fget_files+0x3a2/0x420 [ 447.170544][ T32] __x64_sys_sendmsg+0x1b1/0x290 [ 447.170575][ T32] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 447.170600][ T32] ? kfree+0x4d/0x650 [ 447.170636][ T32] ? __pfx_kcov_ioctl+0x10/0x10 [ 447.170666][ T32] do_syscall_64+0x166/0x520 [ 447.170695][ T32] ? trace_irq_disable+0x3b/0x140 [ 447.170715][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.170735][ T32] ? clear_bhb_loop+0x70/0xc0 [ 447.170759][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 447.170780][ T32] RIP: 0033:0x7f0ee259e159 [ 447.170797][ T32] RSP: 002b:00007f0ee3384028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 447.170819][ T32] RAX: ffffffffffffffda RBX: 00007f0ee2826270 RCX: 00007f0ee259e159 [ 447.170835][ T32] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000006 [ 447.170848][ T32] RBP: 00007f0ee263506b R08: 0000000000000000 R09: 0000000000000000 [ 447.170860][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 447.170872][ T32] R13: 00007f0ee2826308 R14: 00007f0ee2826270 R15: 00007ffd1771df38 [ 447.170906][ T32] [ 447.170930][ T32] [ 447.170930][ T32] Showing all locks held in the system: [ 447.170940][ T32] locks held by kworker/0:0/9: 4, last CPU#0: [ 447.170954][ T32] #0: ffff888056e93d40 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.171012][ T32] #1: ffffc900000e7c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.171077][ T32] #2: ffff88807cbdd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 447.171136][ T32] #3: ffff888035b0d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 447.171195][ T32] locks held by pr/ttyS0/16: 1, last CPU#0: [ 447.171209][ T32] #0: ffffffff8ec364d8 (console_srcu){....}-{0:0}, at: console_srcu_read_lock+0x30/0x60 [ 447.171260][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 447.171274][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 447.171334][ T32] locks held by kworker/u8:5/98: 4, last CPU#0: [ 447.171349][ T32] #0: ffff88807f88f140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.171405][ T32] #1: ffffc90002517c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.171458][ T32] #2: ffff88802c3ad440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.171522][ T32] #3: ffff888035b0b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.171582][ T32] locks held by kworker/u8:6/143: 4, last CPU#0: [ 447.171596][ T32] #0: ffff88807f88f940 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.171652][ T32] #1: ffffc90002d87c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.171706][ T32] #2: ffff88807fca1440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.171763][ T32] #3: ffff88807a2db4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.171821][ T32] locks held by kworker/u8:8/167: 5, last CPU#1: [ 447.171835][ T32] #0: ffff888012bb7140 ((wq_completion)krds_cp_wq#0/7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.171887][ T32] #1: ffffc90002e27c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.171939][ T32] #2: ffff88807a7f3c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 447.171996][ T32] #3: ffff888030909d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 447.172040][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: process_backlog+0x3de/0x18b0 [ 447.172095][ T32] locks held by kworker/0:3/1228: 3, on CPU#0: [ 447.172109][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.172160][ T32] #1: ffffc900056cfc40 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.172211][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 447.172269][ T32] locks held by kworker/u8:9/1358: 2, on CPU#0: [ 447.172282][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.172333][ T32] #1: ffffc90005c3fc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.172386][ T32] locks held by kworker/u8:10/1364: 4, last CPU#0: [ 447.172399][ T32] #0: ffff88807f274940 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.172455][ T32] #1: ffffc90005bffc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.172516][ T32] #2: ffff88807d98d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.172573][ T32] #3: ffff888035b0aad0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.172632][ T32] locks held by kworker/u8:11/1377: 4, last CPU#0: [ 447.172647][ T32] #0: ffff888031bf0940 ((wq_completion)wg-kex-wg2#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.172702][ T32] #1: ffffc90005b8fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.172754][ T32] #2: ffff88807d985440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.172811][ T32] #3: ffff888030f8a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.172882][ T32] locks held by klogd/4976: 2, last CPU#0: [ 447.172895][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.172942][ T32] #1: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 447.172991][ T32] locks held by udevd/4987: 3, last CPU#0: [ 447.173005][ T32] #0: ffffffff8f4f2938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 447.173053][ T32] #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.173099][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 447.173149][ T32] locks held by dhcpcd/5281: 1, last CPU#0: [ 447.173163][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.173209][ T32] locks held by dhcpcd/5282: 1, last CPU#0: [ 447.173223][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.173269][ T32] locks held by crond/5358: 1, last CPU#1: [ 447.173283][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.173329][ T32] locks held by getty/5377: 2, on CPU#1: [ 447.173342][ T32] #0: ffff88802c0ab0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 447.173398][ T32] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 447.173450][ T32] locks held by syz-executor/5606: 1, last CPU#0: [ 447.173463][ T32] #0: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.173526][ T32] locks held by kworker/0:7/5807: 3, last CPU#0: [ 447.173540][ T32] #0: ffff88801c69c140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.173597][ T32] #1: ffffc900050cfc40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.173661][ T32] #2: ffff88807fa29440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 447.173720][ T32] locks held by kworker/u8:12/5999: 4, last CPU#0: [ 447.173734][ T32] #0: ffff88802a1bc940 ((wq_completion)krds_cp_wq#8/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.173786][ T32] #1: ffffc90005b1fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.173838][ T32] #2: ffff88807b2a6780 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 447.173893][ T32] #3: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.173942][ T32] locks held by kworker/1:9/8405: 4, on CPU#1: [ 447.173956][ T32] #0: ffff888056e93d40 ((wq_completion)wg-kex-wg2#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174012][ T32] #1: ffffc9000b477c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174076][ T32] #2: ffff88807cbdd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x1a2/0x9b0 [ 447.174135][ T32] #3: ffff888035b0d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_consume_initiation+0x59c/0x9b0 [ 447.174193][ T32] locks held by kworker/1:10/8406: 3, last CPU#1: [ 447.174207][ T32] #0: ffff88801c69c140 ((wq_completion)wg-kex-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174262][ T32] #1: ffffc9000b067c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174326][ T32] #2: ffff88807a2d8d18 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbf0 [ 447.174385][ T32] locks held by kworker/0:8/8409: 2, last CPU#0: [ 447.174398][ T32] #0: ffff88802a4df540 ((wq_completion)wg-kex-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174454][ T32] #1: ffffc9000a457c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174526][ T32] locks held by kworker/0:9/8410: 4, last CPU#0: [ 447.174539][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174590][ T32] #1: ffffc9000a437c40 ((work_completion)(&data->dm_alert_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174642][ T32] #2: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 447.174688][ T32] #3: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __page_table_check_zero+0x6c/0x430 [ 447.174737][ T32] locks held by kworker/0:10/8411: 3, on CPU#0: [ 447.174751][ T32] #0: ffff88801b06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174802][ T32] #1: ffffc9000a427c40 (netdev_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174852][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: netdev_work_proc+0x209/0x780 [ 447.174899][ T32] locks held by kworker/u8:14/9295: 4, last CPU#0: [ 447.174913][ T32] #0: ffff88807f889140 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.174970][ T32] #1: ffffc90006d7fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.175021][ T32] #2: ffff88807fa29440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.175073][ T32] #3: ffff88807a2d9700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.175131][ T32] locks held by kworker/u8:15/9889: 2, last CPU#0: [ 447.175145][ T32] #0: ffff88807f88e940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.175196][ T32] #1: ffffc900034c7c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.175250][ T32] locks held by kworker/u8:18/9892: 4, on CPU#1: [ 447.175264][ T32] #0: ffff888076b42140 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.175320][ T32] #1: ffffc90003487c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.175372][ T32] #2: ffff88807cbdd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.175429][ T32] #3: ffff888035b0d270 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.175487][ T32] locks held by kworker/u8:19/9894: 4, last CPU#0: [ 447.175508][ T32] #0: ffff88807f274940 ((wq_completion)wg-kex-wg0#8){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.175563][ T32] #1: ffffc90003457c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.175615][ T32] #2: ffff88807d98d440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.175674][ T32] #3: ffff888030f8bea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.175732][ T32] locks held by kworker/u8:20/9895: 4, last CPU#0: [ 447.175746][ T32] #0: ffff888031bf2140 ((wq_completion)wg-kex-wg1#9){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.175802][ T32] #1: ffffc90003427c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.175854][ T32] #2: ffff88807d989440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.175912][ T32] #3: ffff888030f8b4b8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.175971][ T32] locks held by kworker/1:18/10574: 2, last CPU#1: [ 447.175986][ T32] #0: ffff88801b069d40 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176036][ T32] #1: ffffc90006b9fc40 ((work_completion)(&(&tbl->managed_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176089][ T32] locks held by kworker/u8:21/10675: 3, on CPU#0: [ 447.176103][ T32] #0: ffff88803259f140 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176155][ T32] #1: ffffc9000501fc40 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176207][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x116/0x15c0 [ 447.176257][ T32] locks held by kworker/u8:22/10676: 4, last CPU#0: [ 447.176271][ T32] #0: ffff888076b40940 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176322][ T32] #1: ffffc90005697c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176374][ T32] #2: ffff888035585440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 447.176433][ T32] #3: ffff88807a2dbea0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 447.176491][ T32] locks held by kworker/u8:23/10677: 2, last CPU#0: [ 447.176513][ T32] #0: ffff88801b0ab940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176565][ T32] #1: ffffc90005687c40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176619][ T32] locks held by kworker/u8:24/10678: 2, last CPU#0: [ 447.176632][ T32] #0: ffff888032c65140 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176683][ T32] #1: ffffc900055dfc40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176736][ T32] locks held by kworker/u8:25/10679: 4, last CPU#0: [ 447.176751][ T32] #0: ffff888012b90940 ((wq_completion)krds_cp_wq#0/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176803][ T32] #1: ffffc90006947c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.176854][ T32] #2: ffff888035988680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 447.176911][ T32] #3: ffff88805547ee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 447.176956][ T32] locks held by kworker/u8:26/10680: 4, last CPU#0: [ 447.176971][ T32] #0: ffff88807f88f140 ((wq_completion)wg-kex-wg1#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.177026][ T32] #1: ffffc900055cfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 447.177079][ T32] #2: ffff88802c3ad440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 448.239036][ T1312] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 448.256587][ T32] #3: ffff88807a2da0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 448.256666][ T32] locks held by kworker/u8:27/10681: 4, last CPU#1: [ 448.256681][ T32] #0: ffff888076b42140 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.256739][ T32] #1: ffffc900055bfc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.256792][ T32] #2: ffff88807cbdd440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 448.256847][ T32] #3: ffff888035b0c888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 448.256904][ T32] locks held by kworker/u8:28/10682: 4, last CPU#1: [ 448.256919][ T32] #0: ffff88807f88e940 ((wq_completion)wg-kex-wg0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.256968][ T32] #1: ffffc900055afc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.257020][ T32] #2: ffff88802c3a9440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 448.257077][ T32] #3: ffff88807a2df028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 448.276667][ T32] locks held by kworker/u8:29/10683: 4, last CPU#0: [ 448.276690][ T32] #0: ffff888012b90140 ((wq_completion)krds_cp_wq#0/5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.276752][ T32] #1: ffffc9000559fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.276805][ T32] #2: ffff888035988380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 448.276860][ T32] #3: ffff8880549f0260 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30 [ 448.276906][ T32] locks held by kworker/u8:30/10684: 3, last CPU#1: [ 448.276921][ T32] #0: ffff888012b92140 ((wq_completion)krds_cp_wq#0/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.276972][ T32] #1: ffffc9000558fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.277023][ T32] #2: ffff888035988f80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 448.277080][ T32] locks held by kworker/u8:31/10685: 2, last CPU#0: [ 448.277093][ T32] #0: ffff88807f889140 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.287313][ T32] #1: ffffc9000552fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.287369][ T32] locks held by kworker/u8:32/10686: 3, last CPU#1: [ 448.287385][ T32] #0: ffff888012bb7940 ((wq_completion)krds_cp_wq#0/6){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.287444][ T32] #1: ffffc90004effc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.287496][ T32] #2: ffff888035988080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 448.287554][ T32] locks held by kworker/u8:33/10687: 3, last CPU#0: [ 448.287568][ T32] #0: ffff888012b91940 ((wq_completion)krds_cp_wq#0/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.287621][ T32] #1: ffffc90003cbfc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.287673][ T32] #2: ffff888035988c80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 448.287729][ T32] locks held by kworker/u8:34/10688: 3, last CPU#0: [ 448.287743][ T32] #0: ffff888012b87140 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.287795][ T32] #1: ffffc9000556fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.287846][ T32] #2: ffff888035989280 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 448.287902][ T32] locks held by kworker/u8:35/10689: 2, on CPU#1: [ 448.287917][ T32] #0: ffff88801b0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.287968][ T32] #1: ffffc90004edfc40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.288020][ T32] locks held by kworker/u8:36/10693: 3, last CPU#0: [ 448.288033][ T32] #0: ffff888012b91140 ((wq_completion)krds_cp_wq#0/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.288086][ T32] #1: ffffc9000509fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 448.288138][ T32] #2: ffff888035988980 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920 [ 448.288196][ T32] locks held by syz.1.1463/12064: 1, last CPU#1: [ 448.288210][ T32] #0: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_handle+0x5a/0x580 [ 448.288261][ T32] locks held by syz.4.1473/12114: 1, on CPU#1: [ 448.288275][ T32] #0: ffffffff8ed62b38 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 448.288324][ T32] locks held by syz.0.1474/12113: 3, on CPU#0: [ 448.288338][ T32] #0: ffff8880767e6f80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 448.288389][ T32] #1: ffffffff902b6f08 ((netlink_chain).rwsem){++++}-{4:4}, at: blocking_notifier_call_chain+0x54/0x90 [ 448.288453][ T32] #2: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: wiphy_unregister+0x274/0xb20 [ 448.288502][ T32] locks held by syz.3.1476/12126: 3, last CPU#1: [ 448.288516][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3da/0x1e70 [ 448.288565][ T32] #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 448.288613][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 448.288661][ T32] locks held by syz.3.1476/12129: 1, on CPU#0: [ 448.288675][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 448.288725][ T32] locks held by syz.3.1476/12133: 1, on CPU#0: [ 448.288740][ T32] #0: ffffffff90254aa0 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x767/0xc00 [ 448.288791][ T32] locks held by modprobe/12134: 3, last CPU#1: [ 448.288805][ T32] #0: ffff88801b094cc0 (&mm->mmap_lock){++++}-{4:4}, at: vm_mmap_pgoff+0x1dd/0x4e0 [ 448.288853][ T32] #1: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 448.288898][ T32] #2: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: __update_page_owner_free_handle+0x2e/0x4a0 [ 448.288949][ T32] locks held by syz-executor/12135: 5, last CPU#1: [ 448.288963][ T32] #0: ffff88802a75e460 (sb_writers#5){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 448.289013][ T32] #1: ffff88805318dd00 (&type->i_mutex_dir_key#5/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 448.289070][ T32] #2: ffffffff8f4f2938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_perm+0x251/0x560 [ 448.289119][ T32] #3: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 448.289164][ T32] #4: ffffffff8ed5c8a0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 448.289218][ T32] locks held by kworker/u8:35/12136: 3, last CPU#1: [ 448.289232][ T32] #0: ffff888030b122e0 (&sig->cred_guard_mutex){+.+.}-{4:4}, at: bprm_execve+0xbc/0x1590 [ 448.289288][ T32] #1: ffffffff8f4f2938 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_bprm_check_security+0xef/0x180 [ 448.289343][ T32] #2: ffffffff8eeac630 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 448.289391][ T32] [ 448.289397][ T32] ============================================= [ 448.289397][ T32] [ 448.289419][ T32] NMI backtrace for cpu 1 [ 448.289444][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 448.289485][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.289506][ T32] Call Trace: [ 448.289521][ T32] [ 448.289537][ T32] dump_stack_lvl+0xe8/0x150 [ 448.289588][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 448.289612][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 448.289644][ T32] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 448.289670][ T32] sys_info+0x135/0x170 [ 448.289690][ T32] watchdog+0xfd7/0x1030 [ 448.289717][ T32] ? watchdog+0x1c7/0x1030 [ 448.289743][ T32] kthread+0x38b/0x480 [ 448.289762][ T32] ? __pfx_watchdog+0x10/0x10 [ 448.289780][ T32] ? __pfx_kthread+0x10/0x10 [ 448.289799][ T32] ret_from_fork+0x514/0xb70 [ 448.289831][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 448.289858][ T32] ? __switch_to+0xc89/0x1420 [ 448.289887][ T32] ? __pfx_kthread+0x10/0x10 [ 448.289906][ T32] ret_from_fork_asm+0x1a/0x30 [ 448.289948][ T32] [ 448.289955][ T32] Sending NMI from CPU 1 to CPUs 0: [ 448.289993][ C0] NMI backtrace for cpu 0 [ 448.290005][ C0] CPU: 0 UID: 0 PID: 10678 Comm: kworker/u8:24 Not tainted syzkaller #0 PREEMPT(full) [ 448.290026][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 448.290038][ C0] Workqueue: bat_events batadv_tt_purge [ 448.290061][ C0] RIP: 0010:lock_acquire+0x110/0x350 [ 448.290081][ C0] Code: ff c0 89 85 a8 0b 00 00 4c 89 e7 44 89 f6 8b 54 24 04 44 89 e9 41 89 d8 50 6a 00 6a 00 6a 00 ff b4 24 b0 00 00 00 ff 74 24 30 db 02 00 00 48 83 c4 30 48 c7 c7 6a 8e 68 8e e8 0b bd 42 0a b8 [ 448.290097][ C0] RSP: 0018:ffffc90000006e68 EFLAGS: 00000006 [ 448.290111][ C0] RAX: 0000000001920465 RBX: 0000000000000000 RCX: 0000000000000002 [ 448.290123][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffff8ed5c8a0 [ 448.290135][ C0] RBP: ffff88804c5d0000 R08: 0000000000000000 R09: 0000000000000000 [ 448.290148][ C0] R10: 0000000000000003 R11: ffffffff8abead30 R12: ffffffff8ed5c8a0 [ 448.290160][ C0] R13: 0000000000000002 R14: 0000000000000000 R15: 0000000000000246 [ 448.290172][ C0] FS: 0000000000000000(0000) GS:ffff888124cda000(0000) knlGS:0000000000000000 [ 448.290187][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 448.290200][ C0] CR2: 00007ff16cfaedc0 CR3: 00000000348b8000 CR4: 00000000003526f0 [ 448.290216][ C0] Call Trace: [ 448.290222][ C0] [ 448.290229][ C0] ? net_generic+0x1e/0x240 [ 448.290251][ C0] ? net_generic+0x1e/0x240 [ 448.290267][ C0] net_generic+0x3a/0x240 [ 448.290282][ C0] ? net_generic+0x1e/0x240 [ 448.290298][ C0] br_nf_forward_finish+0x1ad/0xea0 [ 448.290320][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 448.290343][ C0] ? NF_HOOK+0xa2/0x6e0 [ 448.290359][ C0] ? NF_HOOK+0xa2/0x6e0 [ 448.290375][ C0] NF_HOOK+0x64e/0x6e0 [ 448.290393][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 448.290408][ C0] ? net_generic+0x1e/0x240 [ 448.290425][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 448.290444][ C0] ? net_generic+0x1e/0x240 [ 448.290459][ C0] ? net_generic+0x1e/0x240 [ 448.290477][ C0] br_nf_forward_ip+0x7e7/0xa30 [ 448.290494][ C0] ? __pfx_br_nf_forward_finish+0x10/0x10 [ 448.290512][ C0] ? __pfx_br_nf_forward+0x10/0x10 [ 448.290530][ C0] nf_hook_slow+0xc5/0x220 [ 448.290552][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 448.290576][ C0] NF_HOOK+0x23e/0x3f0 [ 448.290601][ C0] ? NF_HOOK+0xa2/0x3f0 [ 448.290623][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 448.290648][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 448.290672][ C0] ? __skb_clone+0x449/0x6c0 [ 448.290697][ C0] ? br_handle_vlan+0x60/0x580 [ 448.290720][ C0] __br_forward+0x41e/0x5d0 [ 448.290743][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 448.290769][ C0] br_flood+0x402/0x650 [ 448.290795][ C0] br_handle_frame_finish+0x11fc/0x1ae0 [ 448.290828][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.290855][ C0] ? ip6t_do_table+0x1d1/0x15b0 [ 448.290877][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 448.290898][ C0] ? nf_hook_slow+0x176/0x220 [ 448.290919][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.290952][ C0] br_nf_hook_thresh+0x3dd/0x4c0 [ 448.290969][ C0] ? __pfx_nf_nat_ipv6_fn+0x10/0x10 [ 448.290991][ C0] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 448.291009][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.291036][ C0] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 448.291054][ C0] ? lock_acquire+0x115/0x350 [ 448.291074][ C0] br_nf_pre_routing_finish_ipv6+0x90c/0xc40 [ 448.291093][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.291123][ C0] br_nf_pre_routing_ipv6+0x382/0x6f0 [ 448.291143][ C0] ? br_nf_pre_routing_ipv6+0x43d/0x6f0 [ 448.291162][ C0] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 448.291182][ C0] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 448.291202][ C0] ? br_nf_pre_routing+0x720/0x14b0 [ 448.291222][ C0] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 448.291238][ C0] br_handle_frame+0x1329/0x1600 [ 448.291261][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 448.291279][ C0] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 448.291305][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 448.291323][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 448.291351][ C0] ? __pfx_br_handle_frame+0x10/0x10 [ 448.291367][ C0] __netif_receive_skb_core+0x989/0x30c0 [ 448.291395][ C0] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 448.291414][ C0] ? ip6_rcv_finish+0x265/0x280 [ 448.291439][ C0] ? NF_HOOK+0x336/0x3c0 [ 448.291471][ C0] ? process_backlog+0x3de/0x18b0 [ 448.291491][ C0] ? process_backlog+0x3de/0x18b0 [ 448.291513][ C0] process_backlog+0x727/0x18b0 [ 448.291535][ C0] ? process_backlog+0x3de/0x18b0 [ 448.291561][ C0] __napi_poll+0xaa/0x330 [ 448.291581][ C0] net_rx_action+0x61d/0xf50 [ 448.291606][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 448.291638][ C0] handle_softirqs+0x226/0x860 [ 448.291662][ C0] ? do_softirq+0x77/0xd0 [ 448.291684][ C0] ? batadv_tt_purge+0x4ee/0xa40 [ 448.291704][ C0] do_softirq+0x77/0xd0 [ 448.291725][ C0] [ 448.291730][ C0] [ 448.291737][ C0] __local_bh_enable_ip+0x100/0x140 [ 448.291759][ C0] batadv_tt_purge+0x4ee/0xa40 [ 448.291782][ C0] ? process_scheduled_works+0x97a/0x1630 [ 448.291804][ C0] process_scheduled_works+0xc3d/0x1630 [ 448.291839][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 448.291864][ C0] ? assign_work+0x3cf/0x5d0 [ 448.291887][ C0] worker_thread+0xa47/0xfb0 [ 448.291921][ C0] kthread+0x38b/0x480 [ 448.291945][ C0] ? __pfx_worker_thread+0x10/0x10 [ 448.291967][ C0] ? __pfx_kthread+0x10/0x10 [ 448.291983][ C0] ret_from_fork+0x514/0xb70 [ 448.292010][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 448.292036][ C0] ? __switch_to+0xc89/0x1420 [ 448.292059][ C0] ? __pfx_kthread+0x10/0x10 [ 448.292076][ C0] ret_from_fork_asm+0x1a/0x30 [ 448.292107][ C0] [ 448.292997][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 452.294632][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 452.303756][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 452.313826][ T32] Call Trace: [ 452.317123][ T32] [ 452.320058][ T32] vpanic+0x56d/0xa60 [ 452.324064][ T32] ? __pfx_vpanic+0x10/0x10 [ 452.328596][ T32] ? console_srcu_read_unlock+0x3a/0x60 [ 452.334168][ T32] panic+0xc5/0xd0 [ 452.337909][ T32] ? __pfx_panic+0x10/0x10 [ 452.342348][ T32] ? wq_watchdog_touch+0xf9/0x160 [ 452.347390][ T32] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 452.353571][ T32] watchdog+0x1030/0x1030 [ 452.357931][ T32] ? watchdog+0x1c7/0x1030 [ 452.362369][ T32] kthread+0x38b/0x480 [ 452.366451][ T32] ? __pfx_watchdog+0x10/0x10 [ 452.371132][ T32] ? __pfx_kthread+0x10/0x10 [ 452.375736][ T32] ret_from_fork+0x514/0xb70 [ 452.380353][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 452.385491][ T32] ? __switch_to+0xc89/0x1420 [ 452.390190][ T32] ? __pfx_kthread+0x10/0x10 [ 452.394795][ T32] ret_from_fork_asm+0x1a/0x30 [ 452.399607][ T32] [ 452.402909][ T32] Kernel Offset: disabled [ 452.407267][ T32] Rebooting in 86400 seconds..