last executing test programs: 1m44.654499216s ago: executing program 2 (id=3818): r0 = socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) (async) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket(0x40000000015, 0x5, 0x0) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="0900000004000000080000004000000042000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYBLOB="0000000000000000000000000000000000000000000000000000000038b5fb7e6914dfc093235457f25725b81019e5d061ea6f5974b145500c8a5ce3bcffc9853267f44afb8f5de862d03e3bb0dda8c68f15d40cd1edbaac9d5a05906a4786bbfb5ef8312a53d79fe6e2e7aea4b93b8d"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r6}, 0x8b) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r6, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) getsockopt(r5, 0x200000000114, 0x5, 0x0, &(0x7f0000000080)=0x39) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100000300"/20, @ANYRES32, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000240)={{{@in=@remote, @in6=@loopback}}, {{@in=@dev}, 0x0, @in6=@initdev}}, &(0x7f0000000140)=0xe8) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) (async) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000340)=@newtaction={0x70, 0x30, 0x53b, 0x70bd2a, 0x0, {}, [{0x5c, 0x1, [@m_simple={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x73, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0xffffffffffffffff}}]}, {0x14, 0x6, "bfe03adc55c504336d8907e2bf2b2f00"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x0) 1m43.457435645s ago: executing program 2 (id=3823): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, &(0x7f00000001c0)=0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000340)={r1, @multicast2, @empty}, 0xc) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x300, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14}}, 0x58}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x2, 0x9, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x16}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1}, @NFCTH_TUPLE={0x60, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x17}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40}, 0x40005) 1m42.71621042s ago: executing program 2 (id=3825): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0xfffffffc) r1 = socket$netlink(0x10, 0x3, 0x8000000004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x7d4165c9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)='.\x00\x00\x00', 0x4}], 0x1}, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000001280)=""/4107, &(0x7f00000000c0)=0x100b) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) listen(r4, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000a0c100000000000000fff00", 0x58}], 0x1) 1m41.550626934s ago: executing program 2 (id=3830): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) ioctl$XFS_IOC_SCRUB_METADATA(r1, 0xc040583c, &(0x7f0000000040)={0xd, 0xa, 0x4, 0x5, 0x10001}) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000480)=[{&(0x7f00000007c0)="27031c0016001400020000000000000006e1f0000000890900000002ee1680ca82973d2bd4b836", 0x27}, {&(0x7f0000000380)="7d586d16062b1e1b9685b88189e003000000994b8d8624b2045e9ffc1de7b1aae3ec9e39aea8d6fabf7587093718cbd9", 0x30}], 0x2}, 0x24000008) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000280)={r1, &(0x7f0000000180)='\'.-\'^,\xca\x00', 0x40040, &(0x7f00000001c0)={@align=0x4, {0x1ff, 0x2, 0x1}}, 0xe699, &(0x7f0000000200), &(0x7f0000000240)=0x6}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r2) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001340)=@newtaction={0x898, 0x30, 0x12f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xffffffffffffffff}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) 1m40.041564616s ago: executing program 2 (id=3835): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r2 = openat$cgroup_devices(r1, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB='b 75:*\trmw'], 0xa) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000009c0)=@assoc_value={0x0, 0x800}, 0x8) 1m39.120063186s ago: executing program 2 (id=3841): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) unshare(0x200) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x23c000, 0x0, 0x10}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x0, r3, 0x0, r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@gettfilter={0x4c, 0x2e, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xf}, {0x4, 0xc}, {0x10, 0xf}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0x77a5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xa7}, {0x8, 0xb, 0xfffffffd}]}, 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) 1m23.700410021s ago: executing program 32 (id=3841): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x2c, &(0x7f0000000040)=0x800, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1b, &(0x7f0000000000)={0x0, 0x0}, 0x10) unshare(0x200) socket$nl_route(0x10, 0x3, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x23c000, 0x0, 0x10}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000340)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f00000003c0)={0x2c, 0x0, r3, 0x0, r1}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@gettfilter={0x4c, 0x2e, 0x20, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x2, 0xf}, {0x4, 0xc}, {0x10, 0xf}}, [{0x8, 0xb, 0xffff}, {0x8, 0xb, 0x77a5}, {0x8, 0xb, 0x8}, {0x8, 0xb, 0xa7}, {0x8, 0xb, 0xfffffffd}]}, 0x4c}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180), &(0x7f00000001c0)=0x14) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) 36.317423152s ago: executing program 4 (id=3955): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x0, 0xfffffffffffffde1, 0x10, &(0x7f0000002e00), &(0x7f0000000300), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r1, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, r2, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@void, @val={0xc, 0x99, {0x916c, 0x14}}}}}, 0x20}}, 0x4000054) 33.310603892s ago: executing program 4 (id=3963): r0 = socket(0x1d, 0x2, 0x6) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, 0x0, 0x1, {0x0, 0xff, 0x1}, 0xfd}, 0x18) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) splice(r1, &(0x7f0000000000)=0x100000001, r1, &(0x7f0000000040)=0x3, 0x43c9, 0xd) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xc4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket(0x10, 0x80002, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)={0x4c, r4, 0x1, 0xffffffff, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'sh\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2c}}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}]}]}, 0x4c}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000080)={'filter\x00', 0x3, [{}, {}, {}]}, 0x58) 31.873387168s ago: executing program 1 (id=3965): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xac}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001200)={0x60000010}) r3 = epoll_create1(0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x7d, &(0x7f0000000000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000100)={0xa000000d}) close(0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r1, &(0x7f0000000000)={0x1d}) 31.013304273s ago: executing program 4 (id=3968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000240)={0x34, 0xfd, 0x6, 0x11d594c9, 0x2}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="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", 0x114, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002640)=@newtaction={0xe94, 0x30, 0x3f, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0xfffffffc, 0x0, 0x0, 0x0, 0x100, 0x81}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x5943}, {0x0, 0x800000, 0x0, 0xfffffffc}, {}, {}, {0x0, 0x0, 0x0, 0x10}, {}, {}, {0x0, 0xa2}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x1cbe}, {0x0, 0x0, 0x0, 0x5, 0x8}, {}, {0x0, 0x1}, {}, {}, {0x8}, {}, {0x0, 0xfffffffe, 0x400000}, {0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0xffffffff}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xffffff6a}, {0x0, 0x0, 0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x10000000, 0x0, 0x0, 0x8}, {0x0, 0x7fffffff}, {0x3, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x27a}, {0x0, 0x0, 0xffffffff}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {0x0, 0x4}, {0x0, 0x80000000, 0x0, 0x0, 0xffffffff}, {0x0, 0xfffffffc, 0x0, 0x0, 0xfffffffc}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {0x0, 0x0, 0xa, 0x0, 0x200}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x0, 0x1}, {0xc}, {}, {0x0, 0x0, 0x2b7f}, {0x3ff, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x6}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0xcfc, 0x0, 0x0, 0xfffffffc}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x800}, {0xfffffffd, 0x0, 0x0, 0x0, 0xa92}, {0x0, 0x0, 0x1}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x0, 0x40000000, 0x1, 0x0, 0x10001}, {0x0, 0x0, 0x20}, {}, {0x80000, 0x0, 0x0, 0x0, 0x0, 0x2000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {0xfffffffc}, {}, {}, {}, {0x0, 0xa, 0xfffffffc}, {0x0, 0x0, 0x0, 0x8}, {0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {0x0, 0x0, 0x40, 0x0, 0x0, 0x3}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x2}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x2}, {0x5}, {}, {}, {0x0, 0x1}, {}, {}, {0x7, 0x1}, {}, {}, {0x0, 0x1}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) r2 = socket$kcm(0x2, 0x1, 0x84) socket$kcm(0x29, 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r4) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000200)=ANY=[@ANYRES16=r4, @ANYRES32=r3]) socket$netlink(0x10, 0x3, 0x4) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x50040, &(0x7f00000001c0)={0x11, 0x3, r6, 0x1, 0xd8}, 0x14) setsockopt$sock_attach_bpf(r2, 0x84, 0x9, &(0x7f0000000380), 0x98) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRESHEX=0x0], 0x7c}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, 0x0, &(0x7f0000000200)) socketpair(0x21, 0x6, 0x80000000, &(0x7f0000000080)) 30.693758715s ago: executing program 0 (id=3969): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x14, 0x4, 0x4, 0x22}, 0x50) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r1, &(0x7f0000000200)={0x2, 0x3, @empty}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r0, &(0x7f00000001c0), &(0x7f00000004c0)=@udp=r1}, 0x20) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) listen(r2, 0x0) ioctl$NILFS_IOCTL_GET_SUINFO(r3, 0x80186e84, &(0x7f00000001c0)={&(0x7f0000000080)=[{0x8, 0x6, 0x2}, {0x1000, 0x7fffffff}, {0x7, 0x20, 0x1}, {0xd, 0x7, 0x1}], 0x4, 0x10, 0xfff9, 0x8001}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000280), &(0x7f0000000100)=@tcp6=r2, 0x2}, 0x20) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, 0xfffffffffffffffd, &(0x7f00000002c0)=0x4) accept$netrom(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @netrom}, [@remote, @rose, @null, @default, @remote, @remote, @default, @netrom]}, &(0x7f00000002c0)=0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000fdff01000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000300c0009800800014044"], 0x90}}, 0x0) 30.683774396s ago: executing program 3 (id=3970): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r1}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=@ipv6_delroute={0x24, 0x19, 0x300, 0x70bd28, 0x25dfdbfc, {0xa, 0x80, 0x80, 0xe, 0xfc, 0x3, 0x0, 0x5, 0x800}, [@RTA_UID={0x8, 0x19, r1}]}, 0x24}}, 0x800) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e746572009c0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000700003806c000080080003400000000260000b80440001800c000100636f756e746572"], 0x130}, 0x1, 0x0, 0x0, 0x8000}, 0x40080) 29.969515497s ago: executing program 1 (id=3971): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="f0000000100001000000000000000008fe8000000000000000080000000000aa00000000292938887af48b000000000000ffff0a0101004e2300000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e01010000000000000000000000008c000000000000000000000000000000000000000000000000000000000000000400000000000000fcffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0xf0}, 0x1, 0x0, 0x0, 0x4c080}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (rerun: 32) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e22, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}, 0x1c) r3 = socket(0x400000000010, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xbb}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0x4, 0xc}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@gettfilter={0x24, 0x2e, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff2, 0xffe0}, {0x0, 0xfff1}, {0x7, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 29.397700602s ago: executing program 0 (id=3972): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000480)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1}, &(0x7f0000000440), &(0x7f0000000500)=r2}, 0x20) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000040)=0x8, 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20"], 0xfc}}, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f00000001c0)={0x80000006}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) readv(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)=""/74, 0x4a}], 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x16, &(0x7f0000000600)={&(0x7f0000000580)=@newqdisc={0x2c, 0x24, 0x100, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {}, {0xa, 0xffff}, {0xfff3, 0xfff2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x1}]}, 0x2c}}, 0x4000000) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) r5 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000080)={'filter\x00', 0x0, 0x0, 0x0, [0x7266da2e, 0xd4, 0x1, 0x9, 0x99, 0x7e26], 0x1, 0x0, 0x0, [{}]}, 0x88) sendmsg$inet(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="5c000000130025cc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514000cc00800250007000200060001000064bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d0001000000e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x18) r7 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 28.983759104s ago: executing program 3 (id=3973): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) (async) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="f9ffffff7f00000401000000013c440000000200"], 0x14) 24.3646s ago: executing program 0 (id=3974): socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x21, 0x2, 0x2) (async) r0 = socket$kcm(0x21, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f00), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket(0x2a, 0x2, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xfff1, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x7fffffff, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1b, 0x1b, 0x6, 0x2, {0x3, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x4, 0x7}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0x8}}]}}]}, 0x38}}, 0x4000) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@getqdisc={0x34, 0x26, 0x2, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xe, 0x7}, {0x1, 0x8}, {0x0, 0xf}}, [{0x4}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r10 = socket(0x4, 0x3, 0x4) sendmmsg(r10, &(0x7f0000000000), 0x4000000000001f2, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f00000002c0), 0x40000000000009f, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r12, 0x400448c9, 0x0) (async) ioctl$sock_bt_hci(r12, 0x400448c9, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000f40)={'wlan1\x00'}) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) 24.291478653s ago: executing program 3 (id=3975): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1b, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710437000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x4, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r1, 0x0, 0xcf, 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x36, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x2b0, 0x150, 0x150, 0x8, 0xf8010000, 0x380, 0x238, 0x238, 0x2b0, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r3 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$XFS_IOC_FD_TO_HANDLE(r3, 0xc038586a, &(0x7f0000000180)={r2, &(0x7f0000000480)='\xbb\xa7u\x9ci\aj', 0x101001, &(0x7f0000000080)={@_ha_fsid={[0x101, 0x7]}, {0x8, 0xfff2, 0x1000, 0x9}}, 0x5, &(0x7f00000000c0)={@_ha_fsid}, &(0x7f0000000100)=0x3}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r4}, &(0x7f00000001c0), &(0x7f0000000200)=r0}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)=0x0) sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000300)={0x130, 0x2e, 0x1, 0xf0bd26, 0x25dfdbfc, {0x4}, [@nested={0x11c, 0xd, 0x0, 0x1, [@nested={0x118, 0xce, 0x0, 0x1, [@nested={0x10b, 0x104, 0x0, 0x1, [@nested={0x4, 0x7a}, @nested={0x4, 0x154}, @typed={0x4, 0x6b}, @typed={0xc, 0xfb, 0x0, 0x0, @u64=0x8}, @generic="ba5472bb14dcdd235a3c02a545434df32d3ba768db90d2fbfbae183d3ba551ee75565edaf6a54065bc85eea003494a313014760fa87fd913015fb7f141e1839f9edd1b744b589cc280fc469b93a3194d2a7e2e261bd258d03ae8a57c7770ccfc97dc8b97f9d709f967dca06252f20f151e0f25493b22ab1ad6c55b578fb136842c3508222c7f7fd0614d06a9012e780891e08a33d169e1b0afd8fc77496e8903db34a7bd0a6f0175b56dc0", @generic="bb920349cfbecf6ed31db9e720086759dc4bd445cd5984d2b41da4b54385391c3d06aa68a0309f68f3f786f65082c61880eb5dc3ce75ff2c533ad8df7d460e4c", @nested={0x4, 0xb4}]}, @typed={0x8, 0x1e, 0x0, 0x0, @pid=r6}]}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 24.064026475s ago: executing program 1 (id=3976): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x20, &(0x7f0000000040)={0xffffffffffffffff, 0x2, 0x0, 0x0}}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000040)={0xffffffffffffffff, 0x3, 0xa, "a86711d85fb296b2"}) r2 = socket(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x400000fe, 0x656d, 0x7, 0x8, 0x6, 0x2, 0x0, 0x1}, &(0x7f0000000200)={0x3, 0x0, 0x5, 0x4, 0x5, 0x7, 0x5, 0x1ff}, &(0x7f0000000240)={0x4, 0x9, 0x7, 0x1ff, 0x1, 0x0, 0x1, 0x70e400000}, &(0x7f0000000280), &(0x7f0000000300)={&(0x7f00000002c0)={[0x6]}, 0x8}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=@bridge_getvlan={0x18, 0x72, 0x333, 0x6, 0x4}, 0x18}}, 0x20000010) recvmsg$unix(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x4002, 0x0) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x0, 0x6, 0xa, 0x1, 0xfff8, 0xa1}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x76}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, 0x140e, 0x10, 0x70bd2b, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_PDN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000001}, 0x1) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0x8004b707, 0x0) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c0000006c00010026bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000400088004001400030064756d6d79300000000000000000000018003480140035"], 0x4c}, 0x1, 0x0, 0x0, 0x6}, 0x0) 23.955076055s ago: executing program 4 (id=3977): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x401, 0x0, 0x1, 0xf, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)}, 0x20) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0xfa6, 0x0, 0xffffffffffffffff, 0xdad8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x5}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x1e, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x10}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000240)='syzkaller\x00', 0x1000, 0x0, 0x0, 0x1f00, 0x2d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x1, 0x2}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x9, 0x80000000, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f00000003c0)=[r2, r3], &(0x7f0000000400)=[{0x3, 0x5, 0x2, 0xf}, {0x0, 0x2, 0xe, 0x7}, {0x2, 0x2, 0x2, 0x6}], 0x10, 0x1}, 0x94) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$OCFS2_IOC_MOVE_EXT(r3, 0x40406f06, &(0x7f0000000500)={0xb, 0x9, 0xd699, 0xb50, 0x6}) r6 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000840)={&(0x7f0000000540)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @broadcast}, 0x4, 0x4, 0x0, 0x4}}, 0x80, &(0x7f0000000780)=[{&(0x7f00000005c0)="84fcc8eb7009f0e901c79730560eed02367fe18b3dd4ee32dbe58707963b05e89d9ba89fd99a1e9f7b571218eb3a48b2ac", 0x31}, {&(0x7f0000000600)="802b178d7e496b76854eee575cf6d0fec5bd2c421e998c5bba2d7fbc33e6f36dca3f2805df1f8e29e9de4dc357ee8595cab0004998dfda79e00ecbdced869e52408e19c5adddb9f46056a273592a8b089d67b36d047856b31a5319eec041977f6b67b642431cde67ed1d686658120f7797676ef83909f831875352e1a2ab757b", 0x80}, {&(0x7f0000000680)="52c3a5b919c645fd8243bb52ecac4b2a69e4cd6749725aceca6e1f9ad1bde75ec87151142b09da141e15aa4ae107053bea4cb8304eb146b4420817821c2b80a09b9a606dfb46dbcc91761c9b851653e211d21398b48d18dcadfe1f18eae013085763c5a3", 0x64}, {&(0x7f0000000700)="b1465f7311706ab76b1be1dd86b4441cf2c4d362", 0x14}, {&(0x7f0000000740)="44bb44f814e7b778e05fb02903e15d00fcf323c7cb1d892ccd1f2f66a906361c92b3b838abad79d116a8a1dba3425b", 0x2f}], 0x5, &(0x7f0000000800)}, 0x2000c000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0x90, r8, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x14}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x87}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x60, 0x3, 0x8, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7fff}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x10000}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2fe}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0xc000) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0), r7) sendmsg$IPVS_CMD_GET_SERVICE(r10, &(0x7f0000000d00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0xa4, r11, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x7fff}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x36}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x5243}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x9}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xe733}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000002}, 0x4000) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d80), r7) sendmsg$ETHTOOL_MSG_EEE_SET(r12, &(0x7f0000001080)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001040)={&(0x7f0000000dc0)={0x278, r13, 0x100, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5, 0x6, 0x1}, @ETHTOOL_A_EEE_MODES_OURS={0x25c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x60, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2d}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_MASK={0xf7, 0x5, "21b9afbe438d7f44ed4e97835c9810f4e9ba6d9839f03ff4c86e817eb59b6eabe37944716395d86b801c37288f5cddc1e520869f7591d14cd83fb144afafeb5d0c3ba97c21dc1f6e8841307718cd0fc3beb086ae68935c82ac70461e808718fdb8a2434f7c59fb799eaea3ace2212b8e7da954eb2bab0f3679d127d11451387f5e9c020283b7a15dcaaef66a72d7a370f012ab930e7ff6b594d24077369c4109603f0aa0a928a72e92cadfd042c7019bb3a217148e2b0236194a6993c9b2319d77bc979abdbf899d1f1fc01c4f8c75348d4b5d8e32a0f77821e76af0a9fb42ce14a627858e6c6a0a322d72c17b968434e8c0b5"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x4}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '@[)&),/{\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10001}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '((\xbc\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'ethtool\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf96}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbb65}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x83\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\\:O*!\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x8804}, 0x4044800) connect$bt_rfcomm(r4, &(0x7f00000010c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x2}, 0xa) ioctl$FAT_IOCTL_GET_VOLUME_ID(r7, 0x80047213, &(0x7f0000001100)) r14 = socket$packet(0x11, 0x0, 0x300) accept4$packet(r14, 0x0, &(0x7f0000001140), 0x0) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r12) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000001280)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x2c, r15, 0x200, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x1}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x5}, 0x405c805) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f00000018c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001880)={&(0x7f0000001300)={0x56c, r13, 0x300, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0xf8}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x2}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x4}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xf3}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_LINKMODES_LANES={0x8, 0x9, 0x8}, @ETHTOOL_A_LINKMODES_OURS={0x2a4, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9a, 0x5, "5554cee8b719bd14b81cc9f2d43e44dd58e1c232fa1ca1e5d6f0865068d15c3118a5fd8a83306118730fcc717eda110b67f020d95979ed5f19f0f6f958fa5b0b42db10a3b08993d20957ea65240ac7b7ff96e753e450ee0678f25c9a580c8f8452601198242fac15dead3bc99cb77b09fbbfd90859b21a8c85142e01b097271f9724dc42ad298a23742a0d3484fbc4380ab831d2ec37"}, @ETHTOOL_A_BITSET_MASK={0x1b, 0x5, "a17da1ffd5e4510e201c718f5441eb874a644918ef6181"}, @ETHTOOL_A_BITSET_MASK={0x4a, 0x5, "041be1c3bad0933d3787411267c8db000c3af7d4f897a5e0596f5f96203903a1ec22206f88dba1a0a70eac22821bd139c9aa672ea6f6bec71c6fde433bb69d707f3de7888a04"}, @ETHTOOL_A_BITSET_BITS={0xcc, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '&w%+,%):\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '!\x1e+-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5167}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/-!\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '^\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}]}, @ETHTOOL_A_BITSET_BITS={0x58, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '((\xbc\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '((\xbc\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^&{(&\t\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_MASK={0x56, 0x5, "9f437424a6001170e7a7749d00669616987d7822ae010ff91c99170455a97478e141cd09f2373a2f439b64a8d01481280312456521f5c8f737f6de02dca3573d14a7392ad611a379f3a53d9e2f8b806ebbeb"}]}, @ETHTOOL_A_LINKMODES_OURS={0x274, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',k^/(-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'sit0\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'macvtap0\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ',\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ')\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_MASK={0x67, 0x5, "0fb4d806d91e04360f6bc65af0f0d3b8837e413495f3990dd590c5ae1acc2689686ddea875a5dcb3704c7831fdc274ccb18c82ffdd1b73bb33cd41ba742830df082914372cb6d52c3307ed85a06b9669701f3ae26c53bc5cddf661f6a5487d4f6f0d96"}, @ETHTOOL_A_BITSET_VALUE={0xbf, 0x4, "73a43e14bae6ed3eed652598cf8d1ba22f4a8e8a3b1baee6e9652ceef2c9025e65a395308a010b9a4ba3eaf9ebe41b3241682b447cc909a3b4da8280221f4d4bf9f5dbede626a3eb1e940139ff382e9c78f513211166c3d8a1039b39cab02a85ec5680c2cf69231f1c08716bbe7a0c4dd6ed832229a3e774f66a2f7675d9ded1b59b2a70babf079545e2e41f796d2ba1f01a796f2dc7f43fc8ef098e4e06736c9f3a6458e8c9267990bd1b784359a3d944990e0d4b971b1759bc71"}, @ETHTOOL_A_BITSET_MASK={0x21, 0x5, "750451311022797a64c0096a88f56cbd9d19c7b99bb590114e984bf5ba"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'IPVS\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\x83*}.:\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '((\xbc\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x5}]}, 0x56c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r1) sendmsg$NL80211_CMD_TDLS_MGMT(r12, &(0x7f0000001a40)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x30, r16, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0xc2fec926e92f02fb}, 0x840) 23.954414075s ago: executing program 3 (id=3978): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x2, 0x2) (async) socket$kcm(0x2, 0x2, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000100)={'hsr0\x00', @broadcast}) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000003c0)={0x0, {0x2, 0x4e20, @rand_addr=0x64010108}, {0x2, 0x4a24, @dev={0xac, 0x14, 0x14, 0x12}}, {0x2, 0x4e21, @empty}, 0x40, 0x0, 0x0, 0x0, 0x2009, 0x0, 0x200001, 0x1ff, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="ac0000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c00028005000100000000000800074000000002180006801400040020010000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="080000fa"], 0xdc) 23.825699435s ago: executing program 0 (id=3979): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000840)={'ip6tnl0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x29, 0x5, 0x91, 0x7, 0x10, @mcast2, @local, 0x8, 0x20, 0xf89, 0x80000000}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x5, &(0x7f0000000080)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7f}], &(0x7f0000000680)='syzkaller\x00', 0x4, 0xe6, &(0x7f00000006c0)=""/230, 0x41100, 0x3, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000880)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x4, 0xd, 0x10, 0x80000001}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000900)=[r0, r0, r0, r0, r0], &(0x7f0000000940)=[{0x5, 0x5, 0xb, 0x8}], 0x10, 0xffff}, 0x94) (async) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x25, 0xc}, 0x14) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0x27, &(0x7f0000000300)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0x27}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x3, 0x9, 0x8, 0x1, 0x6}, @call={0x85, 0x0, 0x0, 0xa7}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], &(0x7f0000000440)='syzkaller\x00', 0x7ff, 0x18, &(0x7f0000000480)=""/24, 0x41100, 0x2, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xd, 0x2931, 0xff}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000000540)=[{0x0, 0x4, 0x6, 0x3}, {0x4, 0x2, 0xc, 0x3}], 0x10, 0x5}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000640)={r2, r3, 0x4}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400001d000000850000001500000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r0], &(0x7f0000000100)='syzkaller\x00', 0xff, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 23.405382578s ago: executing program 4 (id=3980): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=ANY=[@ANYBLOB="5800000002060101000000000000b7602dda000005000400030000000900020073797a32000000000c00078008001340000000040501050002000000050001000600000011000300686173683a4a65742c6e657400000000"], 0x58}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001480)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20000081}, 0x4000) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r4 = socket(0x400000000010, 0x3, 0x0) (async) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd06, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newtfilter={0x2c, 0x2c, 0x0, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xb}, {}, {0x7, 0x300}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x1e}}]}, 0x41}, 0x1, 0x0, 0x0, 0x10}, 0x0) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000000480)=""/102, 0x66}], 0x1}, 0x2041) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async, rerun: 64) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async, rerun: 64) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) close(r7) (async, rerun: 64) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r9, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x13, r9, 0xd1383000) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r10, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r10, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x30, r7, 0xfffff000) (async) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0x13, r8, 0x0) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r7, 0x0) (async) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) 23.362419679s ago: executing program 0 (id=3981): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0xfffffffe, 0x4, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a07e, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4840) r1 = socket$netlink(0x10, 0x3, 0x15) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_NAN(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x38f10a8f2e54e1ed, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x62}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000090}, 0xc000) 23.36195988s ago: executing program 1 (id=3982): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x339e68f63b70890, 0x4}}}]}, 0x3c}}, 0x4000010) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000000c0)={'bridge_slave_0\x00'}) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 23.361403423s ago: executing program 3 (id=3983): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0xfff3, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x8000}]}}]}, 0x3c}}, 0x2) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000002340)={{r1, &(0x7f0000000100)='*:\x00', 0x143102, &(0x7f00000001c0)={@align=0x6, {0xd71d, 0x4, 0x10001, 0xaff2}}, 0x8, &(0x7f0000000200), &(0x7f0000000280)=0x9}, {[0x7, 0x100, 0x44d, 0x3]}, 0x7fffffff, 0x1000, &(0x7f0000001340)=""/4096}) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000023c0)=@o_path={&(0x7f00000000c0)='./file0\x00', r5, 0x4000, r2}, 0x18) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003900)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) 22.84222684s ago: executing program 0 (id=3984): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000007e00), r0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket$kcm(0x11, 0x3, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5a, 0x2, 0x84d, 0x9, 0x1, 0x800}, {0x8c, 0x1, 0xfffc, 0x7fff, 0x2, 0xb}, 0x5, 0x34, 0x91f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xc2240edb8ac75ac7}, @TCA_TBF_RATE64={0xc, 0x4, 0xdd31e353c9fd1eb}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x50) (async) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xb}, {0xe, 0xffea}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c061}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r6, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000900)='l', 0x1}], 0x1}, 0x4) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000002580)=@newtaction={0x490, 0x30, 0x12f, 0x0, 0x0, {}, [{0x47c, 0x1, [@m_police={0x478, 0x1, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0xffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffc00, 0x8, 0x8, 0x2, 0x6, {0x1, 0x1, 0xf, 0x70, 0x5d5, 0x2}, {0x20, 0x0, 0x1, 0x5, 0x6}, 0x2, 0x5, 0x40}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x490}}, 0x0) (async) sendmsg$IEEE802154_LLSEC_GETPARAMS(r0, &(0x7f0000007f00)={0x0, 0x0, &(0x7f0000007ec0)={&(0x7f0000007e80)={0x20, r1, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x16}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) 22.73424505s ago: executing program 1 (id=3985): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000040)=0x2c5, 0x4) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000c40)={r2, 0xca60, 0xfffa}) (async) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000c40)={r2, 0xca60, 0xfffa}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0x18}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x80) 22.31112743s ago: executing program 1 (id=3986): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x269c, "dda32ad2976d1307aa1278fd3261166f"}}}]}, 0x48}}, 0x8804) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) socket$netlink(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'lo\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x269c, "dda32ad2976d1307aa1278fd3261166f"}}}]}, 0x48}}, 0x8804) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32], 0x5c}}, 0x40) (async) 21.575271819s ago: executing program 4 (id=3987): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000340), r0) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x24, r1, 0x109, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_IM_PROTOCOLS={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40880}, 0x48000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000d00), r2) sendmsg$NFC_CMD_ACTIVATE_TARGET(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r3, 0x1, 0x70bd26, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x410) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB=',\n\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000fbdbdf251e000000080004000000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="27ef0ea780b457ea9f6605584eea4c87b6ed85a98139d3bc95e20a9e3b6205249e6d9188de9b8f7381da385cc83d9fa9889273427ba93557e800c8016899bd032cc374eb3b43e7cc15fa6797d2e025717b605cb94b28fa2dcdd31faebe204e64fa8ff4a78dedb44eeed141be7f8c5cbe8b941a3bb8e1e726cc332591b42f75896450b4ddfe2d8758d0866ba02517e47ebd9335c067e3fabc732365bf87ea7565abbe2ec3"], 0x2c}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x4000000) r14 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r14, 0x1, 0xf, &(0x7f0000000180)=0x2, 0x4) bind$inet(r14, &(0x7f0000000280)={0x2, 0x5e21, @empty}, 0x10) connect$inet(r14, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) r15 = socket$inet(0x2, 0x3, 0x0) setsockopt$sock_int(r15, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r15, &(0x7f0000000280)={0x2, 0x5e21, @local}, 0x10) sendmsg$NFC_CMD_GET_SE(r9, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, r1, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x14}}, 0x24000040) connect$inet(r15, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x270bd2f, 0x25bfdbfb, {0x7, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x24008030) 0s ago: executing program 3 (id=3988): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x77}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r1 = socket$tipc(0x1e, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4000}], 0x1, &(0x7f00000003c0), 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x521deb0b}]}]}, @NFT_MSG_NEWRULE={0x13d4, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x13ac, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x1384, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1374, 0x2, 0x0, 0x1, [@NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x1200, 0x5, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xac, 0x1, "ec840a3c8216aea56ffc667d90baf1452acaa2d628065dc5399494938012553a9f3d798d1929d77cd977ad42342ad0ecf5b541166125a83ed860cf797cb610e8ff2d5db914b71343e9e54ddac12c7c362f7048a66b3e3086bfc3e7418159c25cf1a301b257fa2f73e2d04ef3cbabae7ff1b22cf0d621a7302219d3e41b2e5a6b58651ff2f1b9905b46cc920eca517807081773b6ac959ab2ad5f65c69cd57731a6dcc87c3ad52772"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x59, 0x1, "ce5b4ca1eab85f3df15df474f39ec2d62aa4c8b22de5208e2e62b98d500d1f14881446f532de8d3860d786794c3888c80da85103ca00b620d97dda7c6e143c10b15d701b7bef06a9327d5f1b5d457a426195902f6d"}, @NFTA_DATA_VALUE={0xc4, 0x1, "ce91b55be5a1d857b14f0891f1528eaf0519bf1d8a3302f3d254f55eb0efc966edd8aaed11c0d155c3164042c1ef99c7fcb5cd3cb8b6fac1e03b1fa1bcfc8a21ecd5adc96ed3019177dcd9db2d100f736c1185f5e6bb90de034e47c4f98e56f259ddfaa09f9b6aa8382119cdb0b30d018bedaff07d07d984b6e2aba358ceaae51262ce459b5d20b8aa8273f0ace52a8d28403521fffcb9e1a047e4eb09e36301290286993c5c8e9b5166acddbce97bdd1e3b05aedc82821fc770f8e99b203626"}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_BITWISE_MASK={0x150, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x6c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0x6b, 0x1, "1611772661f5b8fd6f8fee5d56b56510799271bb7d4a36f6b4950ace28f9a7a9c956a7997720de0095c08006d18ce94abbb84545556cfb854f7bad475a8d3bb61f2677e93682c056d58fd5bce38c4331b4bbf54803aaa532b4980c35adff1facfe2e457eac8e41"}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x145c}}, 0x0) socket(0x28, 0x80000, 0x8) kernel console output (not intermixed with test programs): ter on device netdevsim3 [ 455.633089][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3444'. [ 455.725340][T18633] macsec2: entered promiscuous mode [ 455.731472][T18633] ip6erspan0: entered promiscuous mode [ 455.746085][T18633] ip6erspan0: left promiscuous mode [ 455.957237][T18216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.021292][T18216] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.078634][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.085816][ T9000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.162665][ T9000] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.169888][ T9000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.357710][T18651] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3450'. [ 456.455756][T18649] syzkaller1: entered promiscuous mode [ 456.480030][T18649] syzkaller1: entered allmulticast mode [ 456.534701][T18649] netlink: 'syz.0.3450': attribute type 21 has an invalid length. [ 457.411992][T18688] team0 (unregistering): Port device team_slave_0 removed [ 457.470201][T18688] team0 (unregistering): Port device team_slave_1 removed [ 457.607886][T18679] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 457.615581][T18216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.648122][T18699] netlink: 'syz.0.3459': attribute type 1 has an invalid length. [ 458.820377][T18216] veth0_vlan: entered promiscuous mode [ 458.892685][T18216] veth1_vlan: entered promiscuous mode [ 459.078108][T18754] vlan2: entered allmulticast mode [ 459.106518][T18754] bond0: entered allmulticast mode [ 459.123946][T18754] bond_slave_0: entered allmulticast mode [ 459.159040][T18754] bond_slave_1: entered allmulticast mode [ 459.222807][T18216] veth0_macvtap: entered promiscuous mode [ 459.264550][T18216] veth1_macvtap: entered promiscuous mode [ 459.356839][T18216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 459.460480][T18216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 459.486329][T18767] __nla_validate_parse: 7 callbacks suppressed [ 459.486345][T18767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3472'. [ 459.515298][ T9024] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.539197][ T9024] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.588951][ T9024] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.633334][ T9024] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 459.872110][T18782] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3474'. [ 460.129941][ T9017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.182411][ T9017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.352129][ T9019] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.391406][ T9019] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.425341][T18788] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3475'. [ 460.741005][T18804] netlink: 'syz.4.3349': attribute type 83 has an invalid length. [ 460.787399][T18804] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3349'. [ 461.085190][T18813] netlink: 'syz.4.3480': attribute type 12 has an invalid length. [ 461.128404][T18813] netlink: 'syz.4.3480': attribute type 29 has an invalid length. [ 461.145329][T18815] ip6t_srh: unknown srh invflags 4000 [ 461.168168][T18813] netlink: 148 bytes leftover after parsing attributes in process `syz.4.3480'. [ 461.512263][T18827] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3483'. [ 461.718169][ T5826] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 461.732538][ T5826] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 461.753223][ T5826] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 461.776884][ T5826] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 461.790720][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 461.859535][T18832] vxcan1 speed is unknown, defaulting to 1000 [ 462.278824][T18849] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3485'. [ 462.370692][T18848] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 462.400230][T18849] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3485'. [ 462.810966][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 462.867380][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.068410][T18849] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.079234][T18849] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.178912][T18849] bridge0: entered allmulticast mode [ 463.236182][T18832] lo speed is unknown, defaulting to 1000 [ 463.591492][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.627249][T18888] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 463.639062][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.884145][ T5826] Bluetooth: hci1: command tx timeout [ 463.912573][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3495'. [ 464.128913][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.162635][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.575057][T18832] lo speed is unknown, defaulting to 1000 [ 464.674887][T18924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3500'. [ 465.020243][T18935] syzkaller0: entered promiscuous mode [ 465.062471][T18935] syzkaller0: entered allmulticast mode [ 465.908636][T18975] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3507'. [ 465.968221][ T5826] Bluetooth: hci1: command tx timeout [ 466.717934][ T35] bond7 (unregistering): (slave gretap2): Releasing active interface [ 466.956725][T19003] netlink: 'syz.4.3515': attribute type 1 has an invalid length. [ 466.987385][ T35] bond6 (unregistering): (slave geneve2): Releasing active interface [ 467.190520][T18913] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.427855][T19012] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3516'. [ 467.513269][ T35] bond3 (unregistering): (slave bridge5): Releasing active interface [ 467.614133][ T35] bond7 (unregistering): (slave bridge6): Releasing active interface [ 467.618779][T19016] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.3517'. [ 467.798092][ T35] bond0 (unregistering): (slave bridge8): Releasing backup interface [ 467.838899][ T35] bridge8 (unregistering): left promiscuous mode [ 467.970524][ T35] bond1 (unregistering): Released all slaves [ 468.045424][ T5826] Bluetooth: hci1: command tx timeout [ 468.070796][ T35] bond2 (unregistering): Released all slaves [ 468.082864][T19026] netlink: 'syz.3.3519': attribute type 1 has an invalid length. [ 468.171235][ T35] bond3 (unregistering): Released all slaves [ 468.228614][T19030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3519'. [ 468.240345][ T35] bond4 (unregistering): Released all slaves [ 468.290451][ T35] bond5 (unregistering): Released all slaves [ 468.414834][ T35] bond6 (unregistering): Released all slaves [ 468.488867][ T35] bond7 (unregistering): Released all slaves [ 468.541567][ T35] bond8 (unregistering): Released all slaves [ 468.619084][ T35] bond0 (unregistering): Released all slaves [ 468.714814][T18968] netlink: 'syz.1.3507': attribute type 29 has an invalid length. [ 468.839857][T19003] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 468.962812][ T35] tipc: Left network mode [ 468.964275][T19026] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 469.347646][T19050] netlink: 'syz.4.3522': attribute type 29 has an invalid length. [ 469.430745][T19050] netlink: 'syz.4.3522': attribute type 29 has an invalid length. [ 469.476551][T19056] netlink: 'syz.4.3522': attribute type 29 has an invalid length. [ 469.501292][T18832] chnl_net:caif_netlink_parms(): no params data found [ 470.134895][ T5826] Bluetooth: hci1: command tx timeout [ 471.699353][T19108] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3537'. [ 471.759049][T18832] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.801596][T18832] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.830557][T18832] bridge_slave_0: entered allmulticast mode [ 471.866185][T18832] bridge_slave_0: entered promiscuous mode [ 471.962725][T18832] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.980716][T19120] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3539'. [ 472.015550][T18832] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.053069][T18832] bridge_slave_1: entered allmulticast mode [ 472.082252][T18832] bridge_slave_1: entered promiscuous mode [ 472.362347][T18832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.489900][T19137] netlink: 'syz.1.3542': attribute type 61 has an invalid length. [ 472.522736][T18832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.548356][T19140] netlink: 'syz.1.3542': attribute type 61 has an invalid length. [ 472.579709][T19137] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3542'. [ 472.633196][T19140] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3542'. [ 472.719262][T18832] team0: Port device team_slave_0 added [ 472.756911][T18832] team0: Port device team_slave_1 added [ 473.121094][T18832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.153732][T18832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.202460][T18832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.262781][T18832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.307012][T18832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.402481][T18832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.509936][T19174] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3553'. [ 473.552606][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 473.595880][T19174] : entered promiscuous mode [ 473.679980][T19175] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3551'. [ 473.891919][T19183] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 473.952834][T18832] hsr_slave_0: entered promiscuous mode [ 474.010193][T18832] hsr_slave_1: entered promiscuous mode [ 474.039127][T18832] debugfs: 'hsr0' already exists in 'hsr' [ 474.054509][T18832] Cannot create hsr debugfs directory [ 474.064048][T19197] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 474.087879][T19201] x_tables: (null)_tables: NFQUEUE.1 target: invalid size 8 (kernel) != (user) 16 [ 474.160031][T19194] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.175843][T19194] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.218996][T19175] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3551'. [ 474.531085][T19211] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3561'. [ 474.565259][T19211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3561'. [ 474.619973][T19213] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3562'. [ 474.659501][T19219] netlink: 'syz.4.3561': attribute type 10 has an invalid length. [ 474.772949][T19219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 474.881903][T19219] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 475.336939][T19239] netlink: 'syz.4.3567': attribute type 1 has an invalid length. [ 475.429574][ T35] hsr_slave_0: left promiscuous mode [ 475.516021][ T35] veth1_macvtap: left promiscuous mode [ 475.542925][ T35] veth1_vlan: left promiscuous mode [ 475.561042][ T35] veth0_vlan: left promiscuous mode [ 476.845723][T19277] __nla_validate_parse: 5 callbacks suppressed [ 476.845773][T19277] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3574'. [ 477.146501][ T9022] smc: removing ib device syz2 [ 477.390491][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 477.425071][T19279] netlink: 100 bytes leftover after parsing attributes in process `syz.4.3574'. [ 477.690109][T19285] tipc: Enabling of bearer rejected, media not registered [ 477.941384][T19294] netlink: 220 bytes leftover after parsing attributes in process `syz.4.3579'. [ 478.163720][T19306] : renamed from hsr0 (while UP) [ 478.792285][T19319] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3586'. [ 478.849850][T19325] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3586'. [ 479.101043][T19319] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.162275][T19325] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.169630][T19325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.217474][T19325] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3586'. [ 479.475840][T19325] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.510006][T19328] syzkaller1: entered promiscuous mode [ 479.534350][T19328] syzkaller1: entered allmulticast mode [ 480.702161][T18832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 480.822190][T18832] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 480.862022][T18832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 480.930786][T18832] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 480.976571][T18832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 481.060322][T18832] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 481.202333][T18832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 481.249442][T19407] x_tables: unsorted underflow at hook 1 [ 481.289881][T18832] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 481.671302][T19428] openvswitch: netlink: IPv4 tun info is not correct [ 481.987142][T18832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.025843][T19438] netlink: 'syz.3.3611': attribute type 2 has an invalid length. [ 482.058938][T19442] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 482.319773][T18832] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.392809][ T9000] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.399999][ T9000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.555839][ T9015] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.565513][ T9015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.842534][T19465] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3617'. [ 482.921019][T19471] tipc: Trying to set illegal importance in message [ 482.951221][T19474] netlink: 260 bytes leftover after parsing attributes in process `syz.3.3617'. [ 482.957291][T19471] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3618'. [ 482.978070][T19470] pim6reg1: entered promiscuous mode [ 482.992622][T19470] pim6reg1: entered allmulticast mode [ 483.015590][T19471] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3618'. [ 483.081090][T19470] bridge0: port 3(veth0_to_bridge) entered blocking state [ 483.122407][T19475] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3619'. [ 483.146845][T19470] bridge0: port 3(veth0_to_bridge) entered disabled state [ 483.199038][T19470] veth0_to_bridge: entered allmulticast mode [ 483.280940][T19470] veth0_to_bridge: entered promiscuous mode [ 483.329221][T19470] bridge0: adding interface veth0_to_bridge with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 483.420887][T19470] bridge0: port 3(veth0_to_bridge) entered blocking state [ 483.428167][T19470] bridge0: port 3(veth0_to_bridge) entered forwarding state [ 483.828260][ T35] IPVS: stop unused estimator thread 0... [ 484.242803][T18832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.364843][T19515] netlink: 'syz.1.3626': attribute type 23 has an invalid length. [ 484.630010][T18832] veth0_vlan: entered promiscuous mode [ 484.726759][T18832] veth1_vlan: entered promiscuous mode [ 484.862882][T19531] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3630'. [ 485.337380][T18832] veth0_macvtap: entered promiscuous mode [ 485.387883][T18832] veth1_macvtap: entered promiscuous mode [ 485.394485][T19540] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 485.455292][T18832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.495787][T18832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.569298][ T9000] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.612334][ T9000] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.672208][ T9000] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.746011][ T9000] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.882747][T19559] netlink: 'syz.0.3637': attribute type 4 has an invalid length. [ 486.037327][ T9024] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.082440][ T9024] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.192530][ T9000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.240085][ T9000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.495436][T19576] netlink: 'syz.3.3641': attribute type 1 has an invalid length. [ 486.539048][T19576] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3641'. [ 486.567010][T19581] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 486.871800][T19591] delete_channel: no stack [ 486.891125][T19595] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3646'. [ 486.926455][T19595] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 487.058536][T19595] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 487.180138][T19601] netlink: 'syz.2.3648': attribute type 29 has an invalid length. [ 487.196130][T19606] openvswitch: netlink: Key 6 has unexpected len 16 expected 2 [ 487.207975][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3648'. [ 487.233406][T19598] netlink: 'syz.4.3647': attribute type 10 has an invalid length. [ 487.297287][T19598] veth0_macvtap: left promiscuous mode [ 487.340357][T19617] netlink: 'syz.1.3650': attribute type 11 has an invalid length. [ 488.340754][T19658] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3661'. [ 488.357732][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 488.368870][T19655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3658'. [ 488.370361][T19662] netlink: 'syz.3.3662': attribute type 2 has an invalid length. [ 488.418681][T19662] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3662'. [ 488.600234][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3658'. [ 488.643328][T19655] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3658'. [ 488.684997][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 488.691098][ T5826] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 488.884258][T19679] netlink: 'syz.2.3666': attribute type 29 has an invalid length. [ 488.918969][T19679] netlink: 'syz.2.3666': attribute type 29 has an invalid length. [ 488.956856][T19679] netlink: 'syz.2.3666': attribute type 32 has an invalid length. [ 488.987276][T19679] netlink: 500 bytes leftover after parsing attributes in process `syz.2.3666'. [ 489.155051][T19686] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3667'. [ 489.200917][T19689] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3668'. [ 489.629497][T19708] netlink: 'syz.2.3673': attribute type 10 has an invalid length. [ 489.668555][T19708] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3673'. [ 489.818278][T19708] vlan2: entered promiscuous mode [ 489.859768][T19708] bridge0: entered promiscuous mode [ 490.350897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.363231][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.375595][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.387889][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.400206][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.412460][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.424772][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.437052][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 490.449359][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 491.411347][T19749] syzkaller1: entered promiscuous mode [ 491.506537][T19749] syzkaller1: entered allmulticast mode [ 491.559532][T19737] tipc: Started in network mode [ 491.607134][T19737] tipc: Node identity fff, cluster identity 10 [ 491.691260][T19737] tipc: Node number set to 4095 [ 492.203810][ C0] net_ratelimit: 6066 callbacks suppressed [ 492.203828][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.222025][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.234343][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.246720][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.259017][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.271368][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.283711][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.296043][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.308335][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.320662][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 492.567597][T19759] sit1: entered promiscuous mode [ 492.600554][T19759] sit1: entered allmulticast mode [ 492.656340][T19756] lo: entered promiscuous mode [ 492.762475][T19756] tunl0: entered promiscuous mode [ 493.053307][T19756] gre0: entered promiscuous mode [ 493.373090][T19756] gretap0: entered promiscuous mode [ 494.050157][T19756] erspan0: entered promiscuous mode [ 494.200894][T19756] ip_vti0: entered promiscuous mode [ 494.415377][T19791] netlink: 'syz.1.3692': attribute type 1 has an invalid length. [ 495.217203][T19791] 8021q: adding VLAN 0 to HW filter on device bond1 [ 495.480066][T19794] vlan2: entered promiscuous mode [ 495.521389][T19794] bond1: entered promiscuous mode [ 495.551304][T19794] vlan2: entered allmulticast mode [ 495.579850][T19794] bond1: entered allmulticast mode [ 496.544447][T19812] syzkaller0: entered promiscuous mode [ 496.572690][T19812] syzkaller0: entered allmulticast mode [ 497.213704][ C0] net_ratelimit: 17364 callbacks suppressed [ 497.213723][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.231968][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.244227][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.256627][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.268936][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.281268][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.293561][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.305913][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.318186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 497.330556][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 501.352243][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.223610][ C0] net_ratelimit: 19285 callbacks suppressed [ 502.223630][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.241785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.254838][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.267089][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.279380][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.291629][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.303888][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.316102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.328373][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 502.340631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 504.800323][T19843] syz_tun: refused to change device tx_queue_len [ 504.929735][T19842] __nla_validate_parse: 3 callbacks suppressed [ 504.929769][T19842] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.3702'. [ 506.397160][T19865] "syz.1.3707" (19865) uses obsolete ecb(arc4) skcipher [ 506.673044][T19875] netlink: 'syz.4.3705': attribute type 1 has an invalid length. [ 506.818108][T19875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3705'. [ 507.044028][T19875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3705'. [ 507.055862][T19879] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3709'. [ 507.187779][T19875] netlink: 'syz.4.3705': attribute type 2 has an invalid length. [ 507.233638][ C0] net_ratelimit: 18994 callbacks suppressed [ 507.233655][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.243321][T19882] netlink: 'syz.3.3710': attribute type 8 has an invalid length. [ 507.251941][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.252250][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.252494][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.252797][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.308348][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.320610][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.332900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.333958][T19875] netlink: 'syz.4.3705': attribute type 2 has an invalid length. [ 507.345173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.345441][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 507.567204][T19886] sctp: [Deprecated]: syz.1.3711 (pid 19886) Use of int in max_burst socket option. [ 507.567204][T19886] Use struct sctp_assoc_value instead [ 507.712552][T19886] IPVS: length: 211 != 24 [ 507.781524][T19875] netlink: 'syz.4.3705': attribute type 2 has an invalid length. [ 512.244632][ C0] net_ratelimit: 18753 callbacks suppressed [ 512.244652][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.262836][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.275156][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.287525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.299831][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.312102][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.324384][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.336636][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.348948][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 512.361189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 516.932651][T19904] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 517.254165][ C0] net_ratelimit: 17107 callbacks suppressed [ 517.254187][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.280681][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.292944][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.305224][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.317495][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.329768][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.342046][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.354360][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.366637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.378915][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 517.671900][T19922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3717'. [ 517.684650][T19913] netlink: 80 bytes leftover after parsing attributes in process `syz.4.3716'. [ 517.988499][T19915] gre1: entered promiscuous mode [ 518.099069][ T5490] veth0_macvtap: left promiscuous mode [ 518.845484][T19918] Bluetooth: hci5: command 0x0405 tx timeout [ 518.854307][T19918] Bluetooth: hci0: link tx timeout [ 518.860628][T19918] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 518.874749][T19918] Bluetooth: hci0: link tx timeout [ 518.887036][T19918] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 520.497461][T19964] netlink: 'syz.0.3727': attribute type 1 has an invalid length. [ 520.630773][T19964] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3727'. [ 520.924176][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 521.440488][T19977] netlink: 212360 bytes leftover after parsing attributes in process `syz.1.3731'. [ 522.263895][ C0] net_ratelimit: 16402 callbacks suppressed [ 522.263916][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.282282][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.294636][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.306892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.319318][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.331732][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.344032][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.356319][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.368745][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 522.381186][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 523.004502][ T5826] Bluetooth: hci0: command 0x0c1a tx timeout [ 526.424333][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3746'. [ 526.473163][T20046] Bluetooth: MGMT ver 1.23 [ 526.595354][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3746'. [ 527.274194][ C0] net_ratelimit: 14293 callbacks suppressed [ 527.274214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.278446][T20055] netlink: 'syz.2.3748': attribute type 1 has an invalid length. [ 527.280628][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.293623][T20054] sctp: [Deprecated]: syz.0.3750 (pid 20054) Use of int in maxseg socket option. [ 527.293623][T20054] Use struct sctp_assoc_value instead [ 527.300420][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.300696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.300952][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.363429][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.375897][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.388214][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.400480][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.412868][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 527.570199][T20055] netlink: 88 bytes leftover after parsing attributes in process `syz.2.3748'. [ 527.592174][T20055] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3748'. [ 527.832113][T20055] netlink: 658 bytes leftover after parsing attributes in process `syz.2.3748'. [ 529.278665][T20077] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3754'. [ 531.637225][T20113] netlink: 'syz.2.3763': attribute type 1 has an invalid length. [ 531.968640][T20116] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3763'. [ 532.284477][ C0] net_ratelimit: 14963 callbacks suppressed [ 532.284496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 532.302757][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.315191][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.327575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.340852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.354065][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 532.366424][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.378806][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.391188][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 532.403579][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 533.009857][T20114] bond1 (unregistering): Released all slaves [ 533.071214][ C0] sched: DL replenish lagged too much [ 533.771237][T20116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 534.128001][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 534.742718][T20139] IPv6: Can't replace route, no match found [ 534.905297][T20139] IPv6: Can't replace route, no match found [ 535.713290][T20165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3771'. [ 535.966133][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3771'. [ 536.424419][T20165] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3771'. [ 536.781563][T20168] IPVS: persistence engine module ip_vs_pe_À not found [ 537.293685][ C0] net_ratelimit: 9953 callbacks suppressed [ 537.293703][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.311869][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.325024][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 537.337395][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.349782][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.362201][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.374489][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.387671][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 537.400022][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 537.412408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 538.591751][T20190] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3779'. [ 538.727876][T20190] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3779'. [ 538.821359][T20199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3781'. [ 539.334758][T20205] x_tables: unsorted underflow at hook 2 [ 539.609724][T20199] gretap1: entered promiscuous mode [ 539.666350][T20209] netlink: 116 bytes leftover after parsing attributes in process `syz.2.3783'. [ 539.716509][T20199] gretap1: entered allmulticast mode [ 539.842784][T20209] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3783'. [ 542.303637][ C0] net_ratelimit: 9884 callbacks suppressed [ 542.303657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.322649][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 542.335041][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.348364][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.360776][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.373127][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 542.385521][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.398829][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 542.411238][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 542.423700][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 543.700992][T20264] RDS: rds_bind could not find a transport for 400:0:1200:0:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 545.707704][T20282] netlink: 'syz.1.3799': attribute type 10 has an invalid length. [ 545.831968][T20282] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.936728][T20282] bridge_slave_1: left allmulticast mode [ 546.037663][T20282] bridge_slave_1: left promiscuous mode [ 546.111583][T20282] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.476767][T20282] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 546.835781][T20295] netlink: 'syz.0.3803': attribute type 1 has an invalid length. [ 547.022601][T20297] netlink: 112 bytes leftover after parsing attributes in process `syz.0.3803'. [ 547.313662][ C0] net_ratelimit: 10317 callbacks suppressed [ 547.313682][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.332708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 547.345053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.357431][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.369818][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.382972][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 547.395316][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.408426][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 547.420781][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 547.433138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 548.100134][T20295] bond1 (unregistering): Released all slaves [ 548.921728][T20325] netlink: 'syz.1.3809': attribute type 1 has an invalid length. [ 550.360506][T20344] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3812'. [ 550.493951][T20345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3812'. [ 552.323727][ C0] net_ratelimit: 9916 callbacks suppressed [ 552.323746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.341987][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.354357][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.366637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 552.378994][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.392177][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 552.404526][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.416903][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.429277][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 552.441572][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 553.943994][T20393] netlink: 'syz.3.3827': attribute type 10 has an invalid length. [ 554.158436][T20400] netlink: 'syz.3.3827': attribute type 10 has an invalid length. [ 554.251376][T20395] netlink: 27 bytes leftover after parsing attributes in process `syz.4.3826'. [ 554.341320][T20400] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3827'. [ 554.363371][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3829'. [ 554.468470][T20393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 554.565855][T20393] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 554.771222][T20400] batadv0: entered promiscuous mode [ 554.830497][T20400] batadv0: entered allmulticast mode [ 554.909477][T20400] bond0: (slave batadv0): Releasing backup interface [ 555.012851][T20400] bridge0: port 1(batadv0) entered blocking state [ 555.087650][T20400] bridge0: port 1(batadv0) entered disabled state [ 555.248728][T20418] netlink: 'syz.4.3832': attribute type 21 has an invalid length. [ 555.369939][T20417] netlink: 'syz.4.3832': attribute type 21 has an invalid length. [ 555.475237][T20417] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.564550][ T9082] batman_adv: batadv0: IGMP Querier appeared [ 555.571706][ T9082] batman_adv: batadv0: MLD Querier appeared [ 555.613442][T20418] IPv6: NLM_F_CREATE should be specified when creating new route [ 555.712344][T20422] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3833'. [ 556.093015][T20428] sctp: [Deprecated]: syz.2.3835 (pid 20428) Use of struct sctp_assoc_value in delayed_ack socket option. [ 556.093015][T20428] Use struct sctp_sack_info instead [ 557.033293][T20443] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3839'. [ 557.080384][T20446] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3840'. [ 557.334436][ C0] net_ratelimit: 9745 callbacks suppressed [ 557.334455][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 557.352666][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.365156][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.377597][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.389909][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 557.402290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.415575][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 557.427961][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.440372][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.452812][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 557.748047][T20443] bond1 (unregistering): Released all slaves [ 557.895967][T20462] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3842'. [ 558.455772][T20463] bridge_slave_0: left allmulticast mode [ 558.542173][T20463] bridge_slave_0: left promiscuous mode [ 558.656434][T20463] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.960075][T20463] bond0: (slave bridge_slave_1): Releasing backup interface [ 559.162552][T20463] bond0: (slave bond_slave_0): Releasing backup interface [ 559.270213][T20463] bond0: (slave bond_slave_1): Releasing backup interface [ 559.511026][T20463] team0: Port device team_slave_0 removed [ 559.794642][T20463] team0: Port device team_slave_1 removed [ 559.853792][T20463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.912673][T20463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.980501][T20463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 560.028738][T20463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 560.539047][T20456] lo speed is unknown, defaulting to 1000 [ 561.148260][T20491] netlink: 96 bytes leftover after parsing attributes in process `syz.3.3851'. [ 562.343520][ C0] net_ratelimit: 9695 callbacks suppressed [ 562.343540][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.361761][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.374049][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.386393][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.399576][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 562.411922][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.424249][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.436611][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.448911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 562.461261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 562.786622][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.835818][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e39ac00: rx timeout, send abort [ 564.346083][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805e39ac00: abort rx timeout. Force session deactivation [ 564.422406][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'. [ 564.552636][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'. [ 564.755253][T20526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'. [ 564.848538][ T5826] Bluetooth: hci4: command 0x0406 tx timeout [ 564.905888][T20527] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3858'. [ 565.968051][T20545] netlink: 256 bytes leftover after parsing attributes in process `syz.0.3862'. [ 566.366034][T20549] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3864'. [ 566.464116][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3864'. [ 566.536303][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3864'. [ 567.353634][ C0] net_ratelimit: 10212 callbacks suppressed [ 567.353654][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 567.371929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.384310][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.396686][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.408959][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 567.421275][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.435415][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 567.447742][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.460138][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.472543][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 567.713439][T20571] netlink: 'syz.4.3868': attribute type 21 has an invalid length. [ 567.814424][T20571] IPv6: NLM_F_CREATE should be specified when creating new route [ 568.059434][T20571] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 568.069247][T20571] IPv6: NLM_F_CREATE should be set when creating new route [ 568.077377][T20571] IPv6: NLM_F_CREATE should be set when creating new route [ 568.085452][T20571] IPv6: NLM_F_CREATE should be set when creating new route [ 568.473213][T20584] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3869'. [ 571.251115][T20616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3874'. [ 571.351024][T20616] netlink: 'syz.3.3874': attribute type 3 has an invalid length. [ 572.364327][ C0] net_ratelimit: 10280 callbacks suppressed [ 572.364346][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 572.382593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.394984][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.407352][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.419646][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 572.432009][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.445157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 572.457498][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.469862][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 572.482353][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 573.473107][ T5826] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 573.495137][ T5826] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 573.510301][ T5826] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 573.521212][ T5826] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 573.530042][ T5826] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 573.985057][T20612] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.993968][T20612] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.081529][T20610] syzkaller0: entered promiscuous mode [ 574.111778][T20610] syzkaller0: entered allmulticast mode [ 574.256197][ T9015] batman_adv: batadv0: MLD Querier disappeared - multicast optimizations disabled [ 574.849894][T20638] syzkaller1: entered promiscuous mode [ 574.891883][T20638] syzkaller1: entered allmulticast mode [ 575.564096][T19918] Bluetooth: hci2: command tx timeout [ 575.788639][T20628] lo speed is unknown, defaulting to 1000 [ 575.993759][T20656] macvlan0: entered promiscuous mode [ 576.751130][T20663] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3884'. [ 576.973361][T20668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 577.067479][T20662] netlink: 288 bytes leftover after parsing attributes in process `syz.4.3883'. [ 577.373547][ C0] net_ratelimit: 10054 callbacks suppressed [ 577.373566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.391830][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.404117][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.416504][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.429667][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 577.442040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.454435][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.466837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.479170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 577.491522][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 577.643851][ T5826] Bluetooth: hci2: command tx timeout [ 579.723995][ T5826] Bluetooth: hci2: command tx timeout [ 581.810336][ T5826] Bluetooth: hci2: command tx timeout [ 582.387893][ C0] net_ratelimit: 10596 callbacks suppressed [ 582.387914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 582.406170][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.418551][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.430915][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.443171][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 582.455467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.468580][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 582.480904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.493261][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 582.505612][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.393611][ C0] net_ratelimit: 9497 callbacks suppressed [ 587.393631][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.411795][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.424181][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.437378][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 587.449746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.462160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.474552][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.486834][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 587.499204][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 587.512400][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 589.908209][T20707] netlink: 'syz.0.3891': attribute type 1 has an invalid length. [ 590.449478][T20713] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3892'. [ 590.611828][T20719] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3894'. [ 591.125844][ T8997] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.194357][T20713] macsec0: entered promiscuous mode [ 592.282054][ T8997] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.405446][ C0] net_ratelimit: 9930 callbacks suppressed [ 592.405465][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 592.423696][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.436151][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.448582][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.460904][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 592.473661][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.486972][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 592.499320][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.511734][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.524160][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 592.819697][T20741] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3899'. [ 592.955032][T20743] netlink: 4768 bytes leftover after parsing attributes in process `syz.1.3899'. [ 593.683260][ T8997] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 594.821198][ T8997] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.317554][T20785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3909'. [ 597.169716][T20628] chnl_net:caif_netlink_parms(): no params data found [ 597.204249][T20781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3909'. [ 597.359769][T20802] ieee802154 phy1 wpan1: encryption failed: -22 [ 597.413746][ C0] net_ratelimit: 9892 callbacks suppressed [ 597.413764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.433566][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 597.445900][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.458252][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.470620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.482898][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 597.495193][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.508354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 597.520718][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 597.533072][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 598.401276][T20810] netlink: 6024 bytes leftover after parsing attributes in process `syz.4.3915'. [ 598.721043][T20811] veth0_to_team: entered promiscuous mode [ 599.241145][ T8997] bridge_slave_1: left allmulticast mode [ 599.312526][ T8997] bridge_slave_1: left promiscuous mode [ 599.383041][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 599.618016][ T8997] bridge_slave_0: left allmulticast mode [ 599.682350][ T8997] bridge_slave_0: left promiscuous mode [ 599.758890][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 600.341857][T20843] netlink: 'syz.3.3919': attribute type 2 has an invalid length. [ 601.350258][T20853] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3923'. [ 601.797530][ T8997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 601.841730][ T8997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 601.890547][ T8997] bond0 (unregistering): Released all slaves [ 601.922106][ T8997] bond1 (unregistering): Released all slaves [ 602.228821][T20832] netlink: 'syz.4.3920': attribute type 29 has an invalid length. [ 602.423648][ C0] net_ratelimit: 10196 callbacks suppressed [ 602.423667][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.442607][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 602.454924][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.467178][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.479544][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.491816][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 602.504975][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.518103][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 602.530425][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 602.542788][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 603.102549][T20628] bridge0: port 1(bridge_slave_0) entered blocking state [ 603.192988][T20628] bridge0: port 1(bridge_slave_0) entered disabled state [ 603.209933][T20860] netlink: 14 bytes leftover after parsing attributes in process `syz.4.3926'. [ 603.272820][T20628] bridge_slave_0: entered allmulticast mode [ 603.342016][T20628] bridge_slave_0: entered promiscuous mode [ 603.608045][T20870] netlink: 'syz.0.3928': attribute type 1 has an invalid length. [ 603.916454][T20860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 604.053147][T20860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 604.218693][T20860] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 604.322743][T20860] bond0 (unregistering): Released all slaves [ 604.428128][T20628] bridge0: port 2(bridge_slave_1) entered blocking state [ 604.477343][T20628] bridge0: port 2(bridge_slave_1) entered disabled state [ 604.510597][T20628] bridge_slave_1: entered allmulticast mode [ 604.581799][T20628] bridge_slave_1: entered promiscuous mode [ 604.670774][T20870] bond1: entered promiscuous mode [ 604.678761][T20870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.895473][T20873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 604.921691][T20873] bond1: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 604.953802][T20873] bond1: (slave ip6gre3): Setting fail_over_mac to active for active-backup mode [ 605.051781][T20873] bond1: (slave ip6gre3): making interface the new active one [ 605.076087][T20873] ip6gre3: entered promiscuous mode [ 605.108630][T20873] bond1: (slave ip6gre3): Enslaving as an active interface with an up link [ 605.926912][ T9013] batman_adv: batadv0: MLD Querier appeared [ 606.583403][T20628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.429700][T20628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.433640][ C0] net_ratelimit: 10562 callbacks suppressed [ 607.433657][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.443917][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 607.473217][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.485632][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.498902][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.511228][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 607.523634][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.536819][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 607.549222][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 607.561637][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 609.134694][T20628] team0: Port device team_slave_0 added [ 610.188747][T20930] bond0: entered allmulticast mode [ 610.322080][T20628] team0: Port device team_slave_1 added [ 611.270380][T20931] veth3: entered allmulticast mode [ 611.389697][T20931] bond0: (slave veth3): Enslaving as an active interface with an up link [ 611.648565][T20934] bond0 (unregistering): (slave veth3): Releasing backup interface [ 611.824080][T20934] bond0 (unregistering): Released all slaves [ 612.273283][T20961] netlink: 'syz.1.3949': attribute type 1 has an invalid length. [ 612.358219][T20961] netlink: 16179 bytes leftover after parsing attributes in process `syz.1.3949'. [ 612.443910][ C0] net_ratelimit: 10447 callbacks suppressed [ 612.443929][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.462138][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.475271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 612.487607][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.499945][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.512300][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.524568][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 612.536914][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.550013][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 612.562347][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 612.995732][ T8997] hsr_slave_0: left promiscuous mode [ 613.112137][ T8997] hsr_slave_1: left promiscuous mode [ 613.198315][ T8997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 613.289937][ T8997] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.036001][ T8997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.055661][ T8997] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.309370][ T8997] veth1_macvtap: left promiscuous mode [ 616.359235][ T8997] veth0_macvtap: left promiscuous mode [ 616.419835][ T8997] veth1_vlan: left promiscuous mode [ 616.470728][ T8997] veth0_vlan: left promiscuous mode [ 616.896722][T20986] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3954'. [ 617.316989][T20992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3954'. [ 617.453239][T20992] netlink: 'syz.0.3954': attribute type 1 has an invalid length. [ 617.461767][ C0] net_ratelimit: 8710 callbacks suppressed [ 617.461785][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 617.462090][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.462528][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.462860][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.463161][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 617.464192][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.465444][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 617.465751][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.466189][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.466525][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 617.910285][T20992] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3954'. [ 618.608404][ T8997] team0 (unregistering): Port device team_slave_1 removed [ 618.683129][ T8997] team0 (unregistering): Port device team_slave_0 removed [ 619.115443][T20628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.133333][T20628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.199632][T20628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.248296][T20975] veth1_to_bond: entered allmulticast mode [ 619.377233][T20975] veth1_to_bond: left allmulticast mode [ 619.626321][T20986] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 619.812566][T20991] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3954'. [ 620.018492][ T5490] 8021q: adding VLAN 0 to HW filter on device eth1 [ 620.041956][T20628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.121456][T20628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.199047][T20628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.673126][ T29] audit: type=1800 audit(1777025566.307:8): pid=20998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3955" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 620.716865][T20998] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 620.751047][T20628] hsr_slave_0: entered promiscuous mode [ 620.858655][T20998] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 620.894504][T20628] hsr_slave_1: entered promiscuous mode [ 620.920194][T20998] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 621.164588][T21012] ip6t_srh: unknown srh invflags 4000 [ 622.464092][ C0] net_ratelimit: 9944 callbacks suppressed [ 622.464112][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 622.477617][T20998] syz.4.3955 (20998) used greatest stack depth: 16792 bytes left [ 622.482299][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.482704][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.514562][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.526897][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 622.539276][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.552522][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 622.564892][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.577306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.589770][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 622.708601][T21043] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.3961'. [ 624.034798][T17220] IPVS: starting estimator thread 0... [ 624.184218][T21060] IPVS: using max 28 ests per chain, 67200 per kthread [ 624.221943][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.704698][T21082] sctp: [Deprecated]: syz.0.3969 (pid 21082) Use of int in max_burst socket option. [ 625.704698][T21082] Use struct sctp_assoc_value instead [ 625.722663][T21088] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3970'. [ 625.722723][T21088] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3970'. [ 625.722758][T21088] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3970'. [ 626.545821][ T8997] bridge_slave_1: left allmulticast mode [ 626.612594][ T8997] bridge_slave_1: left promiscuous mode [ 626.668443][ T8997] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.929416][ T8997] bridge_slave_0: left allmulticast mode [ 627.002217][ T8997] bridge_slave_0: left promiscuous mode [ 627.068713][ T8997] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.185609][T21106] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.3972'. [ 627.286919][ T8997] tipc: Resetting bearer [ 627.473603][ C0] net_ratelimit: 9870 callbacks suppressed [ 627.473621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.491832][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.504210][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.517505][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 627.529868][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.542278][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.554673][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.567045][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 627.579401][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 627.592694][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 627.610743][T21111] netlink: 'syz.3.3973': attribute type 4 has an invalid length. [ 628.581657][ T8997] ip6gretap0 (unregistering): left promiscuous mode [ 628.822868][ T8997] tipc: Disabling bearer [ 628.990816][ T8997] gretap0 (unregistering): left promiscuous mode [ 629.320297][ T8997] bond11 (unregistering): (slave geneve4): Releasing active interface [ 629.428316][ T8997] bond7 (unregistering): (slave geneve2): Releasing active interface [ 629.666445][ T8997] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 630.042764][ T8997] bond0 (unregistering): left promiscuous mode [ 630.053448][ T8997] bond_slave_0: left promiscuous mode [ 630.063110][ T8997] bond_slave_1: left promiscuous mode [ 630.220694][ T8997] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 630.352133][ T8997] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 630.415342][ T8997] bond0 (unregistering): Released all slaves [ 630.458821][ T8997] bond1 (unregistering): Released all slaves [ 630.542098][ T8997] bond2 (unregistering): (slave lo): Releasing backup interface [ 630.560318][ T8997] bond2 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 630.581128][ T8997] bond2 (unregistering): Released all slaves [ 630.622932][ T8997] bond3 (unregistering): Released all slaves [ 630.699971][ T8997] bond4 (unregistering): Released all slaves [ 630.743070][ T8997] bond5 (unregistering): Released all slaves [ 630.783170][ T8997] bond6 (unregistering): Released all slaves [ 630.868859][ T8997] bond7 (unregistering): Released all slaves [ 630.912126][ T8997] bond8 (unregistering): Released all slaves [ 630.961084][ T8997] bond9 (unregistering): Released all slaves [ 631.051454][ T8997] bond10 (unregistering): Released all slaves [ 631.092423][ T8997] bond11 (unregistering): Released all slaves [ 631.118661][ T8997] bond12 (unregistering): Released all slaves [ 631.197992][T21105] netlink: 'syz.0.3972': attribute type 1 has an invalid length. [ 631.270883][T21105] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.281008][T21075] syzkaller0: entered promiscuous mode [ 631.296106][T21075] syzkaller0: entered allmulticast mode [ 631.376099][ T5490] 8021q: adding VLAN 0 to HW filter on device eth2 [ 631.568030][ T8997] tipc: Disabling bearer [ 631.585671][ T8997] tipc: Disabling bearer [ 631.591252][ T8997] tipc: Left network mode [ 631.862663][ T8997] IPVS: stopping backup sync thread 7732 ... [ 632.452098][T21149] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3980'. [ 632.689411][T21156] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.697799][T21156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.720647][ C1] net_ratelimit: 7976 callbacks suppressed [ 632.720678][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 632.742132][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 632.755999][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 632.769922][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 632.784240][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 632.798238][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 632.812532][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 632.826418][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 632.840068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 632.854024][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 633.888203][T19918] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 633.902957][T19918] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 633.926427][T19918] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 633.936530][T19918] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 633.944445][T19918] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 636.394299][T19918] Bluetooth: hci1: command tx timeout [ 637.686378][T21196] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 637.723796][ C0] net_ratelimit: 15869 callbacks suppressed [ 637.723815][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.723852][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 637.724360][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.724597][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 637.724739][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.725280][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.725347][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 637.725660][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 637.726078][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 637.734419][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 638.612573][ T5826] Bluetooth: hci1: command tx timeout [ 642.733821][ C0] net_ratelimit: 20314 callbacks suppressed [ 642.733842][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.734033][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 642.740134][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.740590][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.754100][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 642.764746][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.765216][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.766280][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 642.779075][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 642.789910][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 644.553947][ T5826] Bluetooth: hci1: command tx timeout [ 646.640481][ T5826] Bluetooth: hci1: command tx timeout [ 647.743798][ C0] net_ratelimit: 20309 callbacks suppressed [ 647.743820][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.743955][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 647.750272][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.750584][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.764171][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 647.774756][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.775097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.775572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 647.788936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 647.799644][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.753773][ C1] net_ratelimit: 15782 callbacks suppressed [ 652.753810][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 652.754463][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.760989][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 652.772257][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.774745][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.786429][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 652.797304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.798555][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 652.811633][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 652.822392][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.763612][ C1] net_ratelimit: 13156 callbacks suppressed [ 657.763654][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 657.763705][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.770523][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 657.782981][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.796488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 657.807192][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.808437][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.821396][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 657.833355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 657.846394][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 662.773559][ C1] net_ratelimit: 12880 callbacks suppressed [ 662.773593][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 662.774153][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.780784][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 662.792001][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.793256][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.806546][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 662.817128][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.818388][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 662.831362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 662.842091][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.783576][ C1] net_ratelimit: 13806 callbacks suppressed [ 667.783610][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 667.784062][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.790806][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 667.802028][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.802837][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 667.816537][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 667.827577][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.828012][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 667.841362][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 667.852621][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 672.793736][ C0] net_ratelimit: 14182 callbacks suppressed [ 672.793758][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 672.794079][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 672.800538][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.814306][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 672.824805][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.825708][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 672.839315][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 672.850189][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.850656][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 672.864114][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 677.803908][ C1] net_ratelimit: 14532 callbacks suppressed [ 677.803943][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 677.804132][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 677.811138][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 677.822651][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.823083][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.836867][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 677.847852][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 677.848637][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 677.861506][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 677.872382][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.813913][ C0] net_ratelimit: 14501 callbacks suppressed [ 682.813919][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 682.813933][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 682.814593][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.821141][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 682.832304][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.833154][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 682.846895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 682.857706][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.858133][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 682.871606][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 687.823677][ C1] net_ratelimit: 14751 callbacks suppressed [ 687.823717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 687.824007][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.831027][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 687.842654][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 687.843061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.856656][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 687.867572][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 687.868290][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 687.881648][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 687.892053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.833537][ C1] net_ratelimit: 15877 callbacks suppressed [ 692.833570][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 692.833678][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.840680][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 692.851937][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.852748][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 692.866305][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 692.877277][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 692.878270][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 692.891286][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 692.901947][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.843685][ C0] net_ratelimit: 16020 callbacks suppressed [ 697.843704][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.844021][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 697.850045][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.850777][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 697.863738][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 697.874859][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.875216][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 697.875634][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 697.889168][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 697.900124][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 702.853718][ C1] net_ratelimit: 15646 callbacks suppressed [ 702.853766][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 702.853872][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.861040][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 702.872496][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 702.873179][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.886866][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 702.897338][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 702.897779][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 702.899167][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 702.911931][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 707.863704][ C1] net_ratelimit: 16242 callbacks suppressed [ 707.863737][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 707.864040][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.870626][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 707.882111][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.882563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.883336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 707.896281][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 707.907542][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 707.907911][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 707.908355][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 709.641486][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 712.873842][ C1] net_ratelimit: 16439 callbacks suppressed [ 712.873879][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 712.873995][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 712.881068][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 712.892679][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.893097][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 712.906720][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 712.917344][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 712.918142][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 712.931622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 712.942564][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.883538][ C1] net_ratelimit: 16517 callbacks suppressed [ 717.883572][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 717.883848][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.890743][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 717.902314][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 717.903034][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.916205][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 717.927014][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 717.927448][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 717.928242][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 717.941549][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 722.893706][ C0] net_ratelimit: 16680 callbacks suppressed [ 722.893727][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.894055][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 722.899997][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.900408][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.914001][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 722.924914][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 722.925672][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 722.938639][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 722.949467][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 722.951061][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.903985][ C0] net_ratelimit: 16130 callbacks suppressed [ 727.904006][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 727.904028][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 727.910686][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.924577][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 727.934934][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 727.935358][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.936092][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 727.949547][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 727.960371][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 727.960724][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.913779][ C0] net_ratelimit: 15823 callbacks suppressed [ 732.913799][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.914026][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 732.920199][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.920975][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 732.933954][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 732.945008][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.945376][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 732.945765][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 732.959541][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 732.970299][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 737.923681][ C1] net_ratelimit: 16322 callbacks suppressed [ 737.923717][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 737.923990][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.930833][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 737.942109][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.942563][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.943306][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 737.956488][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 737.967450][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 737.967817][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 737.981218][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 742.933620][ C0] net_ratelimit: 16176 callbacks suppressed [ 742.933642][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.933703][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 742.940000][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.941336][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 742.953591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 742.964829][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.965261][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 742.978917][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 742.989598][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 742.990383][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 747.943586][ C1] net_ratelimit: 16596 callbacks suppressed [ 747.943622][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 747.943713][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.950771][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 747.962434][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 747.963122][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.976430][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 747.987004][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 747.987433][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 747.988173][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 748.001468][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 749.804012][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.953718][ C1] net_ratelimit: 16572 callbacks suppressed [ 752.953765][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 752.954157][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 752.960895][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 752.972481][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.972852][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 752.986551][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 752.997229][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 752.998041][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 753.011262][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 753.022390][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.963547][ C1] net_ratelimit: 16174 callbacks suppressed [ 757.963591][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 757.963790][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.970588][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 757.981881][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 757.982354][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 757.983144][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 757.996389][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 758.007429][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 758.007793][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 758.008190][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.973790][ C1] net_ratelimit: 15742 callbacks suppressed [ 762.973837][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 762.974024][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.981123][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 762.992126][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 762.992554][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 762.993308][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 763.006851][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 763.017653][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 763.018012][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 763.018398][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 766.832860][ T5826] Bluetooth: hci1: command 0x0406 tx timeout [ 767.983862][ C0] net_ratelimit: 15842 callbacks suppressed [ 767.983883][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 767.983956][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 767.990271][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 767.991068][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 768.003939][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 768.015148][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.015557][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 768.015980][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 768.029128][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 768.040467][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 772.993851][ C1] net_ratelimit: 15941 callbacks suppressed [ 772.993885][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 772.994147][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 773.001153][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 773.012573][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.012935][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 773.013327][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.026876][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 773.037870][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 773.038571][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 773.051826][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 777.893498][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 777.900481][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P16654/1:b..l [ 777.908973][ C0] rcu: (detected by 0, t=10503 jiffies, g=109633, q=861 ncpus=2) [ 777.916796][ C0] task:syz-executor state:R running task stack:23864 pid:16654 tgid:16654 ppid:5808 task_flags:0x40050c flags:0x00080002 [ 777.931324][ C0] Call Trace: [ 777.934615][ C0] [ 777.937555][ C0] __schedule+0x17b4/0x5680 [ 777.942078][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 777.947055][ C0] ? __pfx___schedule+0x10/0x10 [ 777.951912][ C0] ? page_table_check_clear+0x144/0x5f0 [ 777.957465][ C0] ? lock_acquire+0x106/0x350 [ 777.962156][ C0] ? folio_mark_accessed+0x442/0x8c0 [ 777.967454][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 777.972837][ C0] preempt_schedule_common+0x82/0xd0 [ 777.978131][ C0] preempt_schedule_thunk+0x16/0x30 [ 777.983351][ C0] _raw_spin_unlock+0x3f/0x50 [ 777.988034][ C0] unmap_page_range+0x3b71/0x48f0 [ 777.993112][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 777.998502][ C0] ? mas_find+0xb0e/0xd30 [ 778.002848][ C0] ? unmap_vmas+0x1c4/0x6a0 [ 778.003712][ C1] net_ratelimit: 16049 callbacks suppressed [ 778.003740][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 778.007364][ C0] unmap_vmas+0x48f/0x6a0 [ 778.014921][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 778.025486][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 778.025538][ C0] exit_mmap+0x280/0x9e0 [ 778.025568][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 778.025602][ C0] ? uprobe_clear_state+0x53/0x290 [ 778.025633][ C0] ? __pfx_exit_aio+0x10/0x10 [ 778.025670][ C0] ? uprobe_clear_state+0x27c/0x290 [ 778.025694][ C0] __mmput+0x118/0x430 [ 778.025720][ C0] exit_mm+0x18e/0x250 [ 778.025743][ C0] do_exit+0x6a2/0x23c0 [ 778.025772][ C0] ? __pfx_do_exit+0x10/0x10 [ 778.025795][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 778.025826][ C0] do_group_exit+0x21b/0x2d0 [ 778.025845][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 778.025871][ C0] get_signal+0x1284/0x1330 [ 778.025915][ C0] arch_do_signal_or_restart+0xbc/0x830 [ 778.025946][ C0] ? __pfx___x64_sys_wait4+0x10/0x10 [ 778.025966][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 778.025986][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 778.026026][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.026046][ C0] exit_to_user_mode_loop+0x86/0x480 [ 778.026068][ C0] ? rcu_is_watching+0x15/0xb0 [ 778.026093][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.026114][ C0] do_syscall_64+0x33e/0xf80 [ 778.026137][ C0] ? trace_irq_disable+0x3b/0x140 [ 778.026157][ C0] ? clear_bhb_loop+0x40/0x90 [ 778.026179][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.026208][ C0] RIP: 0033:0x7fa215f57f57 [ 778.026225][ C0] RSP: 002b:00007ffdb69077c0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 778.026246][ C0] RAX: fffffffffffffe00 RBX: 0000555565409500 RCX: 00007fa215f57f57 [ 778.026260][ C0] RDX: 0000000040000000 RSI: 00007ffdb690781c RDI: ffffffffffffffff [ 778.026274][ C0] RBP: 00007ffdb690781c R08: 0000000000000000 R09: 0000000000000000 [ 778.026286][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008 [ 778.026298][ C0] R13: 0000000000000003 R14: 00007ffdb6907a78 R15: 0000000000000000 [ 778.026328][ C0] [ 778.026338][ C0] rcu: rcu_preempt kthread starved for 1779 jiffies! g109633 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 778.026359][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 778.026369][ C0] rcu: RCU grace-period kthread stack dump: [ 778.026376][ C0] task:rcu_preempt state:R running task stack:27528 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 778.026429][ C0] Call Trace: [ 778.026436][ C0] [ 778.026448][ C0] __schedule+0x17b4/0x5680 [ 778.026468][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 778.026520][ C0] ? __pfx___schedule+0x10/0x10 [ 778.026551][ C0] ? schedule+0x90/0x360 [ 778.026575][ C0] schedule+0x164/0x360 [ 778.026597][ C0] schedule_timeout+0x158/0x2c0 [ 778.026619][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 778.031992][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 778.042886][ C0] ? __pfx_process_timeout+0x10/0x10 [ 778.042915][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 778.042942][ C0] ? prepare_to_swait_event+0x340/0x370 [ 778.042969][ C0] rcu_gp_fqs_loop+0x312/0x11d0 [ 778.043006][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 778.043031][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 778.043052][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 778.043079][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 778.043104][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 778.043130][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 778.043151][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 778.043173][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 778.043198][ C0] ? __kthread_parkme+0x19c/0x1f0 [ 778.043229][ C0] kthread+0x388/0x470 [ 778.043248][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 778.043269][ C0] ? __pfx_kthread+0x10/0x10 [ 778.043289][ C0] ret_from_fork+0x514/0xb70 [ 778.043316][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 778.043341][ C0] ? __switch_to+0xc79/0x1410 [ 778.043365][ C0] ? __pfx_kthread+0x10/0x10 [ 778.043386][ C0] ret_from_fork_asm+0x1a/0x30 [ 778.043428][ C0] [ 778.043436][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 778.043457][ C0] Sending NMI from CPU 0 to CPUs 1: [ 778.043485][ C1] NMI backtrace for cpu 1 [ 778.043505][ C1] CPU: 1 UID: 0 PID: 19797 Comm: kworker/R-bond1 Not tainted syzkaller #0 PREEMPT(full) [ 778.043522][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 778.043532][ C1] Workqueue: 0x0 (bond1) [ 778.043553][ C1] RIP: 0010:lock_release+0x44/0x3c0 [ 778.043572][ C1] Code: 8b 05 a0 29 9c 11 48 89 44 24 28 0f 1f 44 00 00 65 8b 05 a3 29 9c 11 83 f8 08 0f 83 56 02 00 00 89 c0 48 0f a3 05 0c 75 90 0e <73> 0d e8 b5 f7 08 00 84 c0 0f 84 94 02 00 00 83 3d d6 a7 90 0e 00 [ 778.043585][ C1] RSP: 0018:ffffc90000a07cc0 EFLAGS: 00000097 [ 778.043597][ C1] RAX: 0000000000000001 RBX: ffff88807e8002a8 RCX: ffff888027971ec0 [ 778.043608][ C1] RDX: 0000000000010100 RSI: ffffffff89ba279f RDI: ffff88807e8002c0 [ 778.043619][ C1] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 778.043630][ C1] R10: dffffc0000000000 R11: fffff52000140f98 R12: ffff88805c6c5800 [ 778.043641][ C1] R13: ffffffff89ba279f R14: ffff88807e8002c0 R15: 18a9437b08d64909 [ 778.043652][ C1] FS: 0000000000000000(0000) GS:ffff888125343000(0000) knlGS:0000000000000000 [ 778.043665][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 778.043676][ C1] CR2: 00007feecaa9e270 CR3: 00000000805aa000 CR4: 00000000003526f0 [ 778.043696][ C1] Call Trace: [ 778.043701][ C1] [ 778.043707][ C1] ? taprio_set_budgets+0x37c/0x3b0 [ 778.043727][ C1] _raw_spin_unlock+0x16/0x50 [ 778.043743][ C1] advance_sched+0x94f/0xc20 [ 778.043766][ C1] ? __pfx_advance_sched+0x10/0x10 [ 778.043780][ C1] __hrtimer_run_queues+0x3c0/0xa20 [ 778.043810][ C1] hrtimer_interrupt+0x44b/0x950 [ 778.043844][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 778.043868][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 778.043887][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 778.043904][ C1] RIP: 0010:vprintk_emit+0x45d/0x560 [ 778.043925][ C1] Code: 0f 84 44 ff ff ff e8 a2 00 21 00 fb eb 44 e8 9a 00 21 00 e8 d5 07 0f 0a 4d 85 f6 74 94 e8 8b 00 21 00 fb 48 c7 c7 40 f4 94 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 fb 17 [ 778.043938][ C1] RSP: 0018:ffffc90000a080e0 EFLAGS: 00000246 [ 778.043950][ C1] RAX: ffffffff81a45d65 RBX: ffffffff81a45bdf RCX: ffff888027971ec0 [ 778.043961][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: ffffffff8e94f440 [ 778.043971][ C1] RBP: ffffc90000a08190 R08: ffffffff90321bb7 R09: 1ffffffff2064376 [ 778.043982][ C1] R10: dffffc0000000000 R11: fffffbfff2064377 R12: 0000000000000000 [ 778.043993][ C1] R13: 000000000000006f R14: 0000000000000200 R15: 1ffff92000141020 [ 778.044005][ C1] ? vprintk_emit+0x2cf/0x560 [ 778.044026][ C1] ? vprintk_emit+0x455/0x560 [ 778.044049][ C1] ? unwind_next_frame+0xa6/0x2550 [ 778.044063][ C1] ? lock_acquire+0x106/0x350 [ 778.044082][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 778.044102][ C1] ? unwind_next_frame+0xa6/0x2550 [ 778.044121][ C1] _printk+0xdd/0x130 [ 778.044138][ C1] ? __pfx__printk+0x10/0x10 [ 778.044153][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 778.044170][ C1] ? ___ratelimit+0x58c/0x8d0 [ 778.044195][ C1] br_fdb_update+0x62d/0x690 [ 778.044218][ C1] ? __pfx_br_fdb_update+0x10/0x10 [ 778.044236][ C1] ? skb_ext_add+0x148/0x8f0 [ 778.044261][ C1] br_handle_frame_finish+0x573/0x1c80 [ 778.044276][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 778.044296][ C1] ? ip6t_do_table+0x137d/0x1560 [ 778.044318][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 778.044339][ C1] ? ip6t_do_table+0x143/0x1560 [ 778.044358][ C1] ? __pfx_ip6t_do_table+0x10/0x10 [ 778.044375][ C1] ? nf_hook_slow+0x176/0x220 [ 778.044392][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 778.044407][ C1] br_nf_hook_thresh+0x3dd/0x4c0 [ 778.044434][ C1] ? __pfx_br_nf_hook_thresh+0x10/0x10 [ 778.044456][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 778.044471][ C1] ? nf_nat_ipv6_in+0x203/0x2c0 [ 778.044491][ C1] ? __pfx_nf_nat_ipv6_in+0x10/0x10 [ 778.044514][ C1] br_nf_pre_routing_finish_ipv6+0x91f/0xc30 [ 778.044530][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 778.044551][ C1] br_nf_pre_routing_ipv6+0x374/0x6f0 [ 778.044567][ C1] ? br_nf_pre_routing_ipv6+0x421/0x6f0 [ 778.044582][ C1] ? __pfx_br_nf_pre_routing_ipv6+0x10/0x10 [ 778.044600][ C1] ? __pfx_br_nf_pre_routing_finish_ipv6+0x10/0x10 [ 778.044616][ C1] ? br_nf_pre_routing+0x75f/0x14c0 [ 778.044641][ C1] ? __pfx_br_nf_pre_routing+0x10/0x10 [ 778.044663][ C1] br_handle_frame+0x1277/0x1510 [ 778.044683][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 778.044699][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 778.044719][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 778.044734][ C1] __netif_receive_skb_core+0x98f/0x3170 [ 778.044759][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 778.044781][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 778.044799][ C1] ? ip6_rcv_finish+0x265/0x280 [ 778.044814][ C1] ? NF_HOOK+0x336/0x3c0 [ 778.044833][ C1] ? process_backlog+0x3eb/0x1950 [ 778.044854][ C1] ? process_backlog+0x3eb/0x1950 [ 778.044872][ C1] ? process_backlog+0x3eb/0x1950 [ 778.044891][ C1] ? process_backlog+0x3eb/0x1950 [ 778.044910][ C1] process_backlog+0x76d/0x1950 [ 778.044938][ C1] __napi_poll+0xae/0x340 [ 778.044954][ C1] ? skb_defer_free_flush+0x233/0x260 [ 778.044973][ C1] net_rx_action+0x627/0xf70 [ 778.044999][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 778.045017][ C1] ? xfrm_dev_backlog+0x24b/0x3c0 [ 778.045044][ C1] ? net_tx_action+0x5b6/0xc30 [ 778.045064][ C1] ? net_tx_action+0xbfb/0xc30 [ 778.045085][ C1] handle_softirqs+0x22a/0x840 [ 778.045105][ C1] ? __irq_exit_rcu+0xca/0x220 [ 778.045128][ C1] __irq_exit_rcu+0xca/0x220 [ 778.045148][ C1] irq_exit_rcu+0x9/0x30 [ 778.045165][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 778.045188][ C1] [ 778.045193][ C1] [ 778.045199][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 778.045215][ C1] RIP: 0010:finish_task_switch+0x427/0xbe0 [ 778.045232][ C1] Code: 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 86 44 21 0a e8 21 6d 38 00 fb 49 8d bd a8 16 00 00 <48> 89 f8 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 7b 03 00 00 41 80 [ 778.045245][ C1] RSP: 0018:ffffc90002fe79f0 EFLAGS: 00000206 [ 778.045257][ C1] RAX: 000000000021e8af RBX: 1ffff110170e7784 RCX: 0000000080000001 [ 778.045268][ C1] RDX: 0000000000000000 RSI: ffffffff8dfb71ef RDI: ffff888027973568 [ 778.045278][ C1] RBP: ffffc90002fe7a50 R08: ffffffff90321bb7 R09: 1ffffffff2064376 [ 778.045289][ C1] R10: dffffc0000000000 R11: fffffbfff2064377 R12: ffff8880b873ae88 [ 778.045300][ C1] R13: ffff888027971ec0 R14: ffff888028250000 R15: dffffc0000000000 [ 778.045324][ C1] __schedule+0x17bc/0x5680 [ 778.045352][ C1] ? rescuer_thread+0xdb0/0x1130 [ 778.045377][ C1] ? __pfx___schedule+0x10/0x10 [ 778.045392][ C1] ? schedule+0x90/0x360 [ 778.045413][ C1] ? schedule+0x90/0x360 [ 778.045431][ C1] schedule+0x164/0x360 [ 778.045449][ C1] rescuer_thread+0xfbc/0x1130 [ 778.045474][ C1] ? rescuer_thread+0xbb/0x1130 [ 778.045503][ C1] kthread+0x388/0x470 [ 778.045518][ C1] ? __pfx_rescuer_thread+0x10/0x10 [ 778.045538][ C1] ? __pfx_kthread+0x10/0x10 [ 778.045553][ C1] ret_from_fork+0x514/0xb70 [ 778.045574][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 778.045593][ C1] ? __switch_to+0xc79/0x1410 [ 778.045610][ C1] ? __pfx_kthread+0x10/0x10 [ 778.045626][ C1] ret_from_fork_asm+0x1a/0x30 [ 778.045655][ C1] [ 778.047454][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 778.052338][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 778.056249][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.062039][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 778.066053][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 778.066477][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 778.071710][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 783.013643][ C1] net_ratelimit: 14304 callbacks suppressed [ 783.013688][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 783.013968][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 783.020936][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 783.032353][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.032764][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 783.033149][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.046752][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 783.057620][ C0] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0) [ 783.058303][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 783.071509][ C1] bridge0: received packet on veth0_to_bridge with own address as source address (addr:ba:a5:7b:51:04:85, vlan:0)